Title: [153526] trunk/LayoutTests
- Revision
- 153526
- Author
- [email protected]
- Date
- 2013-07-31 10:47:50 -0700 (Wed, 31 Jul 2013)
Log Message
Test assignment to indexed window properties
https://bugs.webkit.org/show_bug.cgi?id=119307
Reviewed by Geoffrey Garen.
Merge https://chromium.googlesource.com/chromium/blink/+/bdeca10fa79477f669cab1e5b081a480e743fd3f
* http/tests/security/xss-DENIED-window-index-assign-expected.txt: Added.
* http/tests/security/xss-DENIED-window-index-assign.html: Added.
Modified Paths
Added Paths
Diff
Modified: trunk/LayoutTests/ChangeLog (153525 => 153526)
--- trunk/LayoutTests/ChangeLog 2013-07-31 16:52:12 UTC (rev 153525)
+++ trunk/LayoutTests/ChangeLog 2013-07-31 17:47:50 UTC (rev 153526)
@@ -1,5 +1,17 @@
2013-07-31 Ryosuke Niwa <[email protected]>
+ Test assignment to indexed window properties
+ https://bugs.webkit.org/show_bug.cgi?id=119307
+
+ Reviewed by Geoffrey Garen.
+
+ Merge https://chromium.googlesource.com/chromium/blink/+/bdeca10fa79477f669cab1e5b081a480e743fd3f
+
+ * http/tests/security/xss-DENIED-window-index-assign-expected.txt: Added.
+ * http/tests/security/xss-DENIED-window-index-assign.html: Added.
+
+2013-07-31 Ryosuke Niwa <[email protected]>
+
Add a test to ensure SelectElement removes an option when null is assigned by indexed setter
https://bugs.webkit.org/show_bug.cgi?id=119311
Added: trunk/LayoutTests/http/tests/security/xss-DENIED-window-index-assign-expected.txt (0 => 153526)
--- trunk/LayoutTests/http/tests/security/xss-DENIED-window-index-assign-expected.txt (rev 0)
+++ trunk/LayoutTests/http/tests/security/xss-DENIED-window-index-assign-expected.txt 2013-07-31 17:47:50 UTC (rev 153526)
@@ -0,0 +1,4 @@
+ALERT: undefined
+CONSOLE MESSAGE: line 1: TypeError: undefined is not a function (evaluating 'parent[0].f()')
+
+This test passes if the access is forbidden.
Added: trunk/LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html (0 => 153526)
--- trunk/LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html (rev 0)
+++ trunk/LayoutTests/http/tests/security/xss-DENIED-window-index-assign.html 2013-07-31 17:47:50 UTC (rev 153526)
@@ -0,0 +1,13 @@
+<script>
+if (window.testRunner)
+ testRunner.dumpAsText();
+
+window[0] = {
+ a: "1",
+ f: function() {
+ alert("FAIL: Child called parent.f()");
+ }
+};
+</script>
+<iframe src=""
+This test passes if the access is forbidden.
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
