Source code
Revision control
Copy as Markdown
Other Tools
Test Info: Warnings
- This test has a WPT meta file that expects 11 subtest issues.
- This WPT test may be referenced by the following Test IDs:
- /html/browsers/browsing-the-web/navigating-across-documents/child-navigates-parent-cross-origin.window.html - WPT Dashboard Interop Dashboard
// META: script=/common/get-host-info.sub.js
// META: script=resources/wait-for-messages.js
function testNavigationFails(params) {
return async (t) => {
// Start waiting for messages before inserting the child frame, to avoid any
// race conditions. Note that this would be racy if we executed tests
// concurrently, thankfully `promise_test` executes sequentially. See also:
const messagesPromise = waitForMessages(1);
// Execute the test in an iframe, so that the document executing the test
// is not navigated away mid-test in case of failure.
const child = document.createElement("iframe");
document.body.appendChild(child);
t.add_cleanup(() => { document.body.removeChild(child); });
const url = new URL(
"resources/child-navigates-parent-cross-origin-inner.html",
window.location);
// Load the grandchild iframe from a different origin.
url.host = get_host_info().REMOTE_HOST;
for (const key in params || {}) {
url.searchParams.set(key, params[key]);
}
const grandchild = child.contentDocument.createElement("iframe");
grandchild.src = url;
child.contentDocument.body.appendChild(grandchild);
const messages = await messagesPromise;
assert_array_equals(messages, ["error: SecurityError"]);
}
}
promise_test(
testNavigationFails(),
"Child document attempts to navigate cross-origin parent via location");
promise_test(
testNavigationFails({ "property": "hash" }),
"Child document attempts to navigate cross-origin parent via "+
"location.hash");
promise_test(
testNavigationFails({ "property": "host" }),
"Child document attempts to navigate cross-origin parent via "+
"location.host");
promise_test(
testNavigationFails({ "property": "hostname" }),
"Child document attempts to navigate cross-origin parent via "+
"location.hostname");
promise_test(
testNavigationFails({ "property": "href" }),
"Child document attempts to navigate cross-origin parent via "+
"location.href");
promise_test(
testNavigationFails({ "property": "pathname" }),
"Child document attempts to navigate cross-origin parent via "+
"location.pathname");
promise_test(
testNavigationFails({ "property": "protocol" }),
"Child document attempts to navigate cross-origin parent via "+
"location.protocol");
promise_test(
testNavigationFails({ "property": "reload" }),
"Child document attempts to navigate cross-origin parent via "+
"location.reload()");
promise_test(
testNavigationFails({ "property": "replace" }),
"Child document attempts to navigate cross-origin parent via "+
"location.replace()");
promise_test(
testNavigationFails({ "property": "search" }),
"Child document attempts to navigate cross-origin parent via "+
"location.search");
promise_test(
testNavigationFails({ "property": "xxxNonExistent" }),
"Child document attempts to navigate cross-origin parent via non-standard "+
"location property");