| <!doctype html> |
| <meta charset="utf-8"> |
| <title>Check that a grandchild can access window.top</title> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <body> |
| <script> |
| // Assert that the grandchild can't access window.location.href and send it back to us. |
| // This test is slightly different than cross_origin_intermediate_acess because the |
| // disallowdocumentaccess is on a remote frame. The test should indicate noaccess. |
| async_test(function(test) { |
| window.addEventListener('message', test.step_func((e) => { |
| assert_equals(e.data, 'noaccess'); |
| test.done(); |
| })); |
| }); |
| </script> |
| <iframe src="http://{{domains[www1]}}:{{ports[http][0]}}/html/browsers/windows/document-access/resources/cross_origin_intermediate_child_remote.sub.html"></iframe> |
| </body> |
