| <!DOCTYPE html> |
| <html> |
| <head> |
| <title>Location interface Security</title> |
| <link rel="author" title="Microsoft" href="http://www.microsoft.com/" /> |
| <link rel="help" href="https://html.spec.whatwg.org/multipage/#security-location" /> |
| <meta name="assert" content="access location object from different origins doesn't raise SECURITY_ERR exception" /> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| </head> |
| <body> |
| <p>Access location object from different origins doesn't raise SECURITY_ERR exception</p> |
| <div id=log></div> |
| <script src="/common/get-host-info.sub.js"></script> |
| <script> |
| var runTest = async_test("Accessing location object from different origins doesn't raise SECURITY_ERR exception").step_func_done(function() { |
| var frame = document.getElementById('testframe'); |
| frame.setAttribute('onload', ''); |
| frame.contentWindow.location = get_host_info().HTTP_REMOTE_ORIGIN + "/"; |
| }); |
| </script> |
| <iframe id='testframe' onload="runTest()">Test Frame</iframe> |
| <script> |
| document.getElementById('testframe').setAttribute('src', get_host_info().HTTP_REMOTE_ORIGIN + '/'); |
| </script> |
| </body> |
| </html> |
