security/manager/ssl/tests/mochitest/mixedcontent/test_documentWrite2.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

<!DOCTYPE HTML>
<html>
<head>
  <title>document.write('<iframe src="http://">')</title>
  <script type="text/javascript" src="/MochiKit/Base.js"></script>
  <script type="text/javascript" src="/MochiKit/DOM.js"></script>
  <script type="text/javascript" src="/MochiKit/Style.js"></script>
  <script type="text/javascript" src="/MochiKit/Signal.js"></script>
  <script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
  <script type="text/javascript" src="mixedContentTest.js"></script>
  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />

  <script class="testbody" type="text/javascript">
  /* import-globals-from mixedContentTest.js */
  "use strict";

  hasMixedActiveContent = true;

  function runTest()
  {
    isSecurityState("broken", "insecure iframe written dynamically breaks security");
    finish();
  }

  function afterNavigationTest()
  {
    isSecurityState("broken", "security still broken after navigation");
    finish();
  }

  </script>
</head>

<body>
  <script class="testbody" type="text/javascript">
  document.write(
    "<iframe src='http://example.com/tests/security/manager/ssl/tests/mochitest/mixedcontent/iframe.html'></iframe>");
  </script>
</body>
</html>