Changeset 261946 in webkit


Ignore:
Timestamp:
May 20, 2020, 1:14:23 PM (5 years ago)
Author:
Chris Dumez
Message:

Disable support for BeforeLoadEvent
​https://bugs.webkit.org/show_bug.cgi?id=212140
<rdar://problem/62847577>

Reviewed by Antti Koivisto.

Source/WebCore:

Disable support for BeforeLoadEvent. Other browsers do not support it and
Chrome dropped it shortly after the fork:

This is a synchronous event and therefore very dangerous.

Test: fast/frames/didBecomeCurrentDocumentInFrame-crash.html

  • bindings/js/WebCoreBuiltinNames.h:
  • dom/BeforeLoadEvent.idl:
  • dom/Node.cpp:

(WebCore::Node::dispatchBeforeLoadEvent):

  • page/RuntimeEnabledFeatures.h:

(WebCore::RuntimeEnabledFeatures::setLegacyBeforeLoadEventEnabled):
(WebCore::RuntimeEnabledFeatures::legacyBeforeLoadEventEnabled const):

LayoutTests:

  • fast/frames/didBecomeCurrentDocumentInFrame-crash-expected.txt: Added.
  • fast/frames/didBecomeCurrentDocumentInFrame-crash.html: Added.

Add layout test coverage for crash in <rdar://problem/62847577>.

  • fast/dom/HTMLLinkElement/event-while-removing-attribute-expected.txt:
  • fast/dom/HTMLObjectElement/beforeload-set-text-crash-expected.txt: Removed.
  • fast/dom/HTMLObjectElement/beforeload-set-text-crash.xhtml: Removed.
  • fast/dom/HTMLScriptElement/async-onbeforeload-expected.txt: Removed.
  • fast/dom/HTMLScriptElement/async-onbeforeload.html: Removed.
  • fast/dom/HTMLScriptElement/defer-onbeforeload-expected.txt: Removed.
  • fast/dom/HTMLScriptElement/defer-onbeforeload.html: Removed.
  • fast/dom/HTMLScriptElement/move-in-beforeload-expected.txt: Removed.
  • fast/dom/HTMLScriptElement/move-in-beforeload.html: Removed.
  • fast/dom/HTMLScriptElement/remove-in-beforeload-expected.txt: Removed.
  • fast/dom/HTMLScriptElement/remove-in-beforeload.html: Removed.
  • fast/dom/beforeload/cached-image-before-load-expected.txt: Removed.
  • fast/dom/beforeload/cached-image-before-load.html: Removed.
  • fast/dom/beforeload/clear-video-poster-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/clear-video-poster-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/flash-before-load-expected.txt: Removed.
  • fast/dom/beforeload/flash-before-load.html: Removed.
  • fast/dom/beforeload/frame-before-load-expected.txt: Removed.
  • fast/dom/beforeload/frame-before-load.html: Removed.
  • fast/dom/beforeload/image-before-load-expected.txt: Removed.
  • fast/dom/beforeload/image-before-load-innerHTML-expected.txt: Removed.
  • fast/dom/beforeload/image-before-load-innerHTML.html: Removed.
  • fast/dom/beforeload/image-before-load.html: Removed.
  • fast/dom/beforeload/image-object-before-load-expected.txt: Removed.
  • fast/dom/beforeload/image-object-before-load-innerHTML-expected.txt: Removed.
  • fast/dom/beforeload/image-object-before-load-innerHTML.html: Removed.
  • fast/dom/beforeload/image-object-before-load.html: Removed.
  • fast/dom/beforeload/image-removed-during-before-load-expected.txt: Removed.
  • fast/dom/beforeload/image-removed-during-before-load.html: Removed.
  • fast/dom/beforeload/link-before-load-expected.txt: Removed.
  • fast/dom/beforeload/link-before-load.html: Removed.
  • fast/dom/beforeload/pi-before-load-expected.txt: Removed.
  • fast/dom/beforeload/pi-before-load.xhtml: Removed.
  • fast/dom/beforeload/recursive-css-pi-before-load-expected.txt: Removed.
  • fast/dom/beforeload/recursive-css-pi-before-load.html: Removed.
  • fast/dom/beforeload/recursive-link-before-load-expected.txt: Removed.
  • fast/dom/beforeload/recursive-link-before-load.html: Removed.
  • fast/dom/beforeload/recursive-xsl-pi-before-load-expected.txt: Removed.
  • fast/dom/beforeload/recursive-xsl-pi-before-load.html: Removed.
  • fast/dom/beforeload/remove-bad-object-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-bad-object-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-flash-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-flash-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-frame-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-frame-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-image-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-image-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-link-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-link-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-script-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-script-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-video-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-video-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/remove-video-poster-in-beforeload-listener-expected.txt: Removed.
  • fast/dom/beforeload/remove-video-poster-in-beforeload-listener.html: Removed.
  • fast/dom/beforeload/resources/content.xhtml: Removed.
  • fast/dom/beforeload/resources/fail.css: Removed.
  • fast/dom/beforeload/resources/fail.js: Removed.
  • fast/dom/beforeload/resources/pass.css: Removed.
  • fast/dom/beforeload/resources/print.js: Removed.
  • fast/dom/beforeload/resources/test.xsl: Removed.
  • fast/dom/beforeload/script-before-load-dynamic-expected.txt: Removed.
  • fast/dom/beforeload/script-before-load-dynamic.html: Removed.
  • fast/dom/beforeload/script-before-load-expected.txt: Removed.
  • fast/dom/beforeload/script-before-load-xhtml-expected.txt: Removed.
  • fast/dom/beforeload/script-before-load-xhtml.xhtml: Removed.
  • fast/dom/beforeload/script-before-load.html: Removed.
  • fast/dom/beforeload/video-before-load-expected.txt: Removed.
  • fast/dom/beforeload/video-before-load.html: Removed.
  • fast/events/constructors/before-load-event-constructor-expected.txt: Removed.
  • fast/events/constructors/before-load-event-constructor.html: Removed.
  • fast/events/event-attribute-expected.txt:
  • fast/events/event-handler-regions-layout-expected.txt: Removed.
  • fast/events/event-handler-regions-layout.html: Removed.
  • fast/frames/crash-display-none-iframe-during-onbeforeload-expected.txt:
  • fast/frames/restoring-page-cache-should-not-run-scripts-via-style-update-expected.txt:
  • fast/html/link-element-removal-during-beforeload-expected.txt: Removed.
  • fast/html/link-element-removal-during-beforeload.html: Removed.
  • fast/parser/document-write-fighting-eof-expected.txt: Removed.
  • fast/parser/document-write-fighting-eof.html: Removed.
  • fast/parser/document-write-partial-entity-before-load-expected.txt: Removed.
  • fast/parser/document-write-partial-entity-before-load.html: Removed.
  • fast/parser/remove-misnested-iframe-in-beforeload-expected.txt: Removed.
  • fast/parser/remove-misnested-iframe-in-beforeload.html: Removed.
  • fast/parser/remove-misnested-iframe-parent-in-beforeload-expected.txt: Removed.
  • fast/parser/remove-misnested-iframe-parent-in-beforeload.html: Removed.
  • fast/replaced/object-param-spaces-expected.txt: Removed.
  • fast/replaced/object-param-spaces.html: Removed.
  • fast/scrolling/marquee-scroll-crash-expected.txt:
  • fast/tokenizer/write-before-load-expected.txt:
  • http/tests/security/beforeload-iframe-client-redirect-expected.txt:
  • http/tests/security/beforeload-iframe-server-redirect-expected.txt:
  • http/tests/security/xssAuditor/object-embed-tag-control-char-expected.txt:
  • http/tests/security/xssAuditor/object-embed-tag-control-char.html:
  • http/tests/security/xssAuditor/object-embed-tag-expected.txt:
  • http/tests/security/xssAuditor/object-embed-tag-null-char-expected.txt:
  • http/tests/security/xssAuditor/object-embed-tag-null-char.html:
  • http/tests/security/xssAuditor/object-embed-tag.html:
  • http/tests/security/xssAuditor/object-src-inject.html:
  • http/tests/security/xssAuditor/object-tag-expected.txt:
  • http/tests/security/xssAuditor/object-tag-javascript-url-expected.txt:
  • http/tests/security/xssAuditor/object-tag-javascript-url.html:
  • http/tests/security/xssAuditor/object-tag.html:
  • http/tests/security/xssAuditor/resources/echo-intertag.pl:
  • http/tests/security/xssAuditor/resources/echo-object-src.pl:
  • http/tests/security/xssAuditor/resources/utilities.js:

(notifyDoneAfterReceivingLoaded):
(notifyDoneAfterReceivingBeforeloadFromIds): Deleted.

  • plugins/unsupported-plugin-with-replacement-in-iframe-crash-expected.txt:

Update existing tests accordingly.

Location:
trunk
Files:
2 added
41 deleted
43 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r261940 r261946  
     12020-05-20  Chris Dumez  <cdumez@apple.com>
     2
     3        Disable support for BeforeLoadEvent
     4        https://bugs.webkit.org/show_bug.cgi?id=212140
     5        <rdar://problem/62847577>
     6
     7        Reviewed by Antti Koivisto.
     8
     9        * fast/frames/didBecomeCurrentDocumentInFrame-crash-expected.txt: Added.
     10        * fast/frames/didBecomeCurrentDocumentInFrame-crash.html: Added.
     11        Add layout test coverage for crash in <rdar://problem/62847577>.
     12
     13        * fast/dom/HTMLLinkElement/event-while-removing-attribute-expected.txt:
     14        * fast/dom/HTMLObjectElement/beforeload-set-text-crash-expected.txt: Removed.
     15        * fast/dom/HTMLObjectElement/beforeload-set-text-crash.xhtml: Removed.
     16        * fast/dom/HTMLScriptElement/async-onbeforeload-expected.txt: Removed.
     17        * fast/dom/HTMLScriptElement/async-onbeforeload.html: Removed.
     18        * fast/dom/HTMLScriptElement/defer-onbeforeload-expected.txt: Removed.
     19        * fast/dom/HTMLScriptElement/defer-onbeforeload.html: Removed.
     20        * fast/dom/HTMLScriptElement/move-in-beforeload-expected.txt: Removed.
     21        * fast/dom/HTMLScriptElement/move-in-beforeload.html: Removed.
     22        * fast/dom/HTMLScriptElement/remove-in-beforeload-expected.txt: Removed.
     23        * fast/dom/HTMLScriptElement/remove-in-beforeload.html: Removed.
     24        * fast/dom/beforeload/cached-image-before-load-expected.txt: Removed.
     25        * fast/dom/beforeload/cached-image-before-load.html: Removed.
     26        * fast/dom/beforeload/clear-video-poster-in-beforeload-listener-expected.txt: Removed.
     27        * fast/dom/beforeload/clear-video-poster-in-beforeload-listener.html: Removed.
     28        * fast/dom/beforeload/flash-before-load-expected.txt: Removed.
     29        * fast/dom/beforeload/flash-before-load.html: Removed.
     30        * fast/dom/beforeload/frame-before-load-expected.txt: Removed.
     31        * fast/dom/beforeload/frame-before-load.html: Removed.
     32        * fast/dom/beforeload/image-before-load-expected.txt: Removed.
     33        * fast/dom/beforeload/image-before-load-innerHTML-expected.txt: Removed.
     34        * fast/dom/beforeload/image-before-load-innerHTML.html: Removed.
     35        * fast/dom/beforeload/image-before-load.html: Removed.
     36        * fast/dom/beforeload/image-object-before-load-expected.txt: Removed.
     37        * fast/dom/beforeload/image-object-before-load-innerHTML-expected.txt: Removed.
     38        * fast/dom/beforeload/image-object-before-load-innerHTML.html: Removed.
     39        * fast/dom/beforeload/image-object-before-load.html: Removed.
     40        * fast/dom/beforeload/image-removed-during-before-load-expected.txt: Removed.
     41        * fast/dom/beforeload/image-removed-during-before-load.html: Removed.
     42        * fast/dom/beforeload/link-before-load-expected.txt: Removed.
     43        * fast/dom/beforeload/link-before-load.html: Removed.
     44        * fast/dom/beforeload/pi-before-load-expected.txt: Removed.
     45        * fast/dom/beforeload/pi-before-load.xhtml: Removed.
     46        * fast/dom/beforeload/recursive-css-pi-before-load-expected.txt: Removed.
     47        * fast/dom/beforeload/recursive-css-pi-before-load.html: Removed.
     48        * fast/dom/beforeload/recursive-link-before-load-expected.txt: Removed.
     49        * fast/dom/beforeload/recursive-link-before-load.html: Removed.
     50        * fast/dom/beforeload/recursive-xsl-pi-before-load-expected.txt: Removed.
     51        * fast/dom/beforeload/recursive-xsl-pi-before-load.html: Removed.
     52        * fast/dom/beforeload/remove-bad-object-in-beforeload-listener-expected.txt: Removed.
     53        * fast/dom/beforeload/remove-bad-object-in-beforeload-listener.html: Removed.
     54        * fast/dom/beforeload/remove-flash-in-beforeload-listener-expected.txt: Removed.
     55        * fast/dom/beforeload/remove-flash-in-beforeload-listener.html: Removed.
     56        * fast/dom/beforeload/remove-frame-in-beforeload-listener-expected.txt: Removed.
     57        * fast/dom/beforeload/remove-frame-in-beforeload-listener.html: Removed.
     58        * fast/dom/beforeload/remove-image-in-beforeload-listener-expected.txt: Removed.
     59        * fast/dom/beforeload/remove-image-in-beforeload-listener.html: Removed.
     60        * fast/dom/beforeload/remove-link-in-beforeload-listener-expected.txt: Removed.
     61        * fast/dom/beforeload/remove-link-in-beforeload-listener.html: Removed.
     62        * fast/dom/beforeload/remove-script-in-beforeload-listener-expected.txt: Removed.
     63        * fast/dom/beforeload/remove-script-in-beforeload-listener.html: Removed.
     64        * fast/dom/beforeload/remove-video-in-beforeload-listener-expected.txt: Removed.
     65        * fast/dom/beforeload/remove-video-in-beforeload-listener.html: Removed.
     66        * fast/dom/beforeload/remove-video-poster-in-beforeload-listener-expected.txt: Removed.
     67        * fast/dom/beforeload/remove-video-poster-in-beforeload-listener.html: Removed.
     68        * fast/dom/beforeload/resources/content.xhtml: Removed.
     69        * fast/dom/beforeload/resources/fail.css: Removed.
     70        * fast/dom/beforeload/resources/fail.js: Removed.
     71        * fast/dom/beforeload/resources/pass.css: Removed.
     72        * fast/dom/beforeload/resources/print.js: Removed.
     73        * fast/dom/beforeload/resources/test.xsl: Removed.
     74        * fast/dom/beforeload/script-before-load-dynamic-expected.txt: Removed.
     75        * fast/dom/beforeload/script-before-load-dynamic.html: Removed.
     76        * fast/dom/beforeload/script-before-load-expected.txt: Removed.
     77        * fast/dom/beforeload/script-before-load-xhtml-expected.txt: Removed.
     78        * fast/dom/beforeload/script-before-load-xhtml.xhtml: Removed.
     79        * fast/dom/beforeload/script-before-load.html: Removed.
     80        * fast/dom/beforeload/video-before-load-expected.txt: Removed.
     81        * fast/dom/beforeload/video-before-load.html: Removed.
     82        * fast/events/constructors/before-load-event-constructor-expected.txt: Removed.
     83        * fast/events/constructors/before-load-event-constructor.html: Removed.
     84        * fast/events/event-attribute-expected.txt:
     85        * fast/events/event-handler-regions-layout-expected.txt: Removed.
     86        * fast/events/event-handler-regions-layout.html: Removed.
     87        * fast/frames/crash-display-none-iframe-during-onbeforeload-expected.txt:
     88        * fast/frames/restoring-page-cache-should-not-run-scripts-via-style-update-expected.txt:
     89        * fast/html/link-element-removal-during-beforeload-expected.txt: Removed.
     90        * fast/html/link-element-removal-during-beforeload.html: Removed.
     91        * fast/parser/document-write-fighting-eof-expected.txt: Removed.
     92        * fast/parser/document-write-fighting-eof.html: Removed.
     93        * fast/parser/document-write-partial-entity-before-load-expected.txt: Removed.
     94        * fast/parser/document-write-partial-entity-before-load.html: Removed.
     95        * fast/parser/remove-misnested-iframe-in-beforeload-expected.txt: Removed.
     96        * fast/parser/remove-misnested-iframe-in-beforeload.html: Removed.
     97        * fast/parser/remove-misnested-iframe-parent-in-beforeload-expected.txt: Removed.
     98        * fast/parser/remove-misnested-iframe-parent-in-beforeload.html: Removed.
     99        * fast/replaced/object-param-spaces-expected.txt: Removed.
     100        * fast/replaced/object-param-spaces.html: Removed.
     101        * fast/scrolling/marquee-scroll-crash-expected.txt:
     102        * fast/tokenizer/write-before-load-expected.txt:
     103        * http/tests/security/beforeload-iframe-client-redirect-expected.txt:
     104        * http/tests/security/beforeload-iframe-server-redirect-expected.txt:
     105        * http/tests/security/xssAuditor/object-embed-tag-control-char-expected.txt:
     106        * http/tests/security/xssAuditor/object-embed-tag-control-char.html:
     107        * http/tests/security/xssAuditor/object-embed-tag-expected.txt:
     108        * http/tests/security/xssAuditor/object-embed-tag-null-char-expected.txt:
     109        * http/tests/security/xssAuditor/object-embed-tag-null-char.html:
     110        * http/tests/security/xssAuditor/object-embed-tag.html:
     111        * http/tests/security/xssAuditor/object-src-inject.html:
     112        * http/tests/security/xssAuditor/object-tag-expected.txt:
     113        * http/tests/security/xssAuditor/object-tag-javascript-url-expected.txt:
     114        * http/tests/security/xssAuditor/object-tag-javascript-url.html:
     115        * http/tests/security/xssAuditor/object-tag.html:
     116        * http/tests/security/xssAuditor/resources/echo-intertag.pl:
     117        * http/tests/security/xssAuditor/resources/echo-object-src.pl:
     118        * http/tests/security/xssAuditor/resources/utilities.js:
     119        (notifyDoneAfterReceivingLoaded):
     120        (notifyDoneAfterReceivingBeforeloadFromIds): Deleted.
     121        * plugins/unsupported-plugin-with-replacement-in-iframe-crash-expected.txt:
     122        Update existing tests accordingly.
     123
    11242020-05-20  Myles C. Maxfield  <mmaxfield@apple.com>
    2125

  • trunk/LayoutTests/TestExpectations

    r261859 r261946  
    16861686[ Debug ] fast/loader/document-with-fragment-url-3.html [ Pass Timeout ]
    16871687[ Debug ] fast/loader/document-with-fragment-url-4.html [ Pass Timeout ]
    1688 
    1689 webkit.org/b/110546 [ Debug ] fast/parser/document-write-fighting-eof.html [ Skip ]
    1690 webkit.org/b/110546 [ Debug ] fast/parser/document-write-partial-entity-before-load.html [ Skip ]
    16911688
    16921689webkit.org/b/85902 [ Debug ] fast/overflow/lots-of-sibling-inline-boxes.html [ Slow ]

  • trunk/LayoutTests/fast/dom/HTMLLinkElement/event-while-removing-attribute-expected.txt

    r216259 r261946  
    44
    55
    6 PASS Before load event handled for original link element.
    7 PASS Before load event handled for original link element.
    8 PASS Before load event handled for original link element.
    96PASS successfullyParsed is true
    107

  • trunk/LayoutTests/fast/events/event-attribute-expected.txt

    r182046 r261946  
    44
    55
    6 cancelled onbeforeload async
    76PASS /*img*/ typeof (element["onclick"]) is "function"
    87PASS /*img*/ typeof (element["oncontextmenu"]) is "function"

  • trunk/LayoutTests/fast/frames/crash-display-none-iframe-during-onbeforeload-expected.txt

    r186486 r261946  
    11PASS if no crash or assert while loading the iframe.
     2

  • trunk/LayoutTests/fast/frames/restoring-page-cache-should-not-run-scripts-via-style-update-expected.txt

    r248591 r261946  
    11This tests that pageshow event is fired before the object element loads when a document in the page cache is restored.
    22
    3 PASS
     3Running...

  • trunk/LayoutTests/fast/scrolling/marquee-scroll-crash-expected.txt

    r226491 r261946  
    1 Test passes if it does not crash.
     1marquee

  • trunk/LayoutTests/fast/tokenizer/write-before-load-expected.txt

    r61604 r261946  
    1 1 2 3 4 5 6 7
     11 2 5 6 7

  • trunk/LayoutTests/http/tests/media/video-play-stall-before-meta-data-expected.txt

    r158743 r261946  
    22Test that stalling very early, while loading meta-data, stops delaying the load event.
    33
    4 EVENT(beforeload)
    54EVENT(loadstart)
    65EVENT(stalled)

  • trunk/LayoutTests/http/tests/security/beforeload-iframe-client-redirect-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: http://127.0.0.1:8000/security/resources/client-redir.html?url=http://localhost:8000/security/resources/post-done.html
    21This test produces output in the console. Only the initial URL should be logged.

  • trunk/LayoutTests/http/tests/security/beforeload-iframe-server-redirect-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: http://127.0.0.1:8000/resources/redirect.php?url=http://localhost:8000/security/resources/post-done.html
    21This test produces output in the console. Only the initial URL should be logged.

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-embed-tag-control-char-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    2 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    3 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     1CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     2CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     3CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    44

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-embed-tag-control-char.html

    r176413 r261946  
    88  testRunner.setXSSAuditorEnabled(true);
    99  testRunner.waitUntilDone();
    10   notifyDoneAfterReceivingBeforeloadFromIds(["object", "embed"]);
     10  notifyDoneAfterReceivingLoaded();
    1111}
    1212</script>
    1313</head>
    1414<body>
    15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&relay-target-ids-for-event=beforeload&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05' /><embed id='embed' name='plugin' type='application/x-webkit-test-netscape' src='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05' /></object>">
     15<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-control-char.html&wait-for-load=1&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05' /><embed id='embed' name='plugin' type='application/x-webkit-test-netscape' src='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%05' /></object>">
    1616</iframe>
    1717</body>

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-embed-tag-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    2 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    3 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     1CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     2CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     3CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    44

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-embed-tag-null-char-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    2 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    3 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     1CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     2CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     3CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3Cembed%20id=%27embed%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%20src=%27http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    44

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-embed-tag-null-char.html

    r176413 r261946  
    88  testRunner.setXSSAuditorEnabled(true);
    99  testRunner.waitUntilDone();
    10   notifyDoneAfterReceivingBeforeloadFromIds(["object", "embed"]);
     10  notifyDoneAfterReceivingLoaded();
    1111}
    1212</script>
    1313</head>
    1414<body>
    15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&relay-target-ids-for-event=beforeload&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf' /><embed id='embed' name='plugin' type='application/x-webkit-test-netscape' src='http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf' /></object>">
     15<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag-null-char.html&wait-for-load=1&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf' /><embed id='embed' name='plugin' type='application/x-webkit-test-netscape' src='http://127.0.0.1:8000/sec%00urity/xssAuditor/resources/dummy.swf' /></object>">
    1616</iframe>
    1717</body>

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-embed-tag.html

    r176413 r261946  
    88  testRunner.setXSSAuditorEnabled(true);
    99  testRunner.waitUntilDone();
    10   notifyDoneAfterReceivingBeforeloadFromIds(["object", "embed"]);
     10  notifyDoneAfterReceivingLoaded();
    1111}
    1212</script>
    1313</head>
    1414<body>
    15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&relay-target-ids-for-event=beforeload&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf' /><embed id='embed' name='plugin' type='application/x-webkit-test-netscape' src='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf' /></object>">
     15<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-embed-tag.html&wait-for-load=1&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf' /><embed id='embed' name='plugin' type='application/x-webkit-test-netscape' src='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf' /></object>">
    1616</iframe>
    1717</body>

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-src-inject.html

    r120174 r261946  
    88  testRunner.setXSSAuditorEnabled(true);
    99  testRunner.waitUntilDone();
    10   notifyDoneAfterReceivingBeforeloadFromIds(["object"]);
     10  notifyDoneAfterReceivingLoaded();
    1111}
    1212</script>
    1313</head>
    1414<body>
    15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-object-src.pl?relay-target-ids-for-event=beforeload&q=http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf">
     15<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-object-src.pl?wait-for-load=1&q=http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf">
    1616</iframe>
    1717</body>

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-tag-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    2 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     1CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     2CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-webkit-test-netscape%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    33

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-tag-javascript-url-expected.txt

    r259900 r261946  
    1 CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag-javascript-url.html&relay-target-ids-for-event=beforeload&q=%3Cobject%20id=%27object%27%20data=%27javascript:alert(document.domain)%27%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
     1CONSOLE MESSAGE: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag-javascript-url.html&wait-for-load=1&q=%3Cobject%20id=%27object%27%20data=%27javascript:alert(document.domain)%27%3E%3C/object%3E' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header.
    22

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-tag-javascript-url.html

    r176413 r261946  
    88  testRunner.setXSSAuditorEnabled(true);
    99  testRunner.waitUntilDone();
    10   notifyDoneAfterReceivingBeforeloadFromIds(["object"]);
     10  notifyDoneAfterReceivingLoaded();
    1111}
    1212</script>
    1313</head>
    1414<body>
    15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag-javascript-url.html&relay-target-ids-for-event=beforeload&q=<object id='object' data='javascript:alert(document.domain)'></object>">
     15<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag-javascript-url.html&wait-for-load=1&q=<object id='object' data='javascript:alert(document.domain)'></object>">
    1616</iframe>
    1717</body>

  • trunk/LayoutTests/http/tests/security/xssAuditor/object-tag.html

    r176413 r261946  
    88  testRunner.setXSSAuditorEnabled(true);
    99  testRunner.waitUntilDone();
    10   notifyDoneAfterReceivingBeforeloadFromIds(["object"]);
     10  notifyDoneAfterReceivingLoaded();
    1111}
    1212</script>
    1313</head>
    1414<body>
    15 <iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag.html&relay-target-ids-for-event=beforeload&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf' /></object>">
     15<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?test=/security/xssAuditor/object-tag.html&wait-for-load=1&q=<object id='object' name='plugin' type='application/x-webkit-test-netscape'><param name='movie' value='http://127.0.0.1:8000/security/xssAuditor/resources/dummy.swf' /></object>">
    1616</iframe>
    1717</body>

  • trunk/LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl

    r206809 r261946  
    7979print "<!DOCTYPE html>\n";
    8080print "<html>\n";
    81 if ($cgi->param('relay-target-ids-for-event')) {
     81if ($cgi->param('wait-for-load')) {
    8282    print "<script>\n";
    83     print "document.addEventListener('" . $cgi->param('relay-target-ids-for-event') . "', function(event) {\n";
    84     print "    window.parent.postMessage(event.target.id, '*');\n";
    85     print "}, true);\n";
     83     print "onload = function() {\n";
     84    print "    window.parent.postMessage('loaded', '*');\n";
     85    print "}\n";
    8686    print "</script>\n";
    8787}

  • trunk/LayoutTests/http/tests/security/xssAuditor/resources/echo-object-src.pl

    r66254 r261946  
    99print "<!DOCTYPE html>\n";
    1010print "<html>\n";
    11 if ($cgi->param('relay-target-ids-for-event')) {
    12     print "<script>\n";
    13     print "document.addEventListener('" . $cgi->param('relay-target-ids-for-event') . "', function(event) {\n";
    14     print "    window.parent.postMessage(event.target.id, '*');\n";
    15     print "}, true);\n";
    16     print "</script>\n";
    17 }
     11print "<script>\n";
     12print "onload = function() {\n";
     13print "    window.parent.postMessage('loaded', '*');\n";
     14print "}\n";
     15print "</script>\n";
    1816print "<body>\n";
    1917print "<object id=\"object\" name=\"plugin\" type=\"application/x-webkit-test-netscape\">\n";

  • trunk/LayoutTests/http/tests/security/xssAuditor/resources/utilities.js

    r205026 r261946  
    4949}
    5050
    51 
    52 function notifyDoneAfterReceivingBeforeloadFromIds(ids)
     51function notifyDoneAfterReceivingLoaded()
    5352{
    54     var loadAttempted = 0;
    5553    window.addEventListener("message", function(event) {
    56         var index = ids.indexOf(event.data);
    57         if (index == -1)
    58             return;
    59 
    60         loadAttempted = loadAttempted | (1 << index);
    61         if (loadAttempted == (1 << ids.length) - 1)
     54        if (event.data == "loaded")
    6255            testRunner.notifyDone();
    6356    }, false);

  • trunk/LayoutTests/js/dom/constructor-length.html

    r205932 r261946  
    1212shouldBe('AutocompleteErrorEvent.length', '1');
    1313shouldBe('AnimationEvent.length', '1');
    14 shouldBe('BeforeLoadEvent.length', '1');
    1514shouldBe('Blob.length', '0');
    1615shouldBe('CloseEvent.length', '1');

  • trunk/LayoutTests/platform/glib/js/dom/constructor-length-expected.txt

    r261701 r261946  
    88FAIL AutocompleteErrorEvent.length should be 1. Threw exception ReferenceError: Can't find variable: AutocompleteErrorEvent
    99PASS AnimationEvent.length is 1
    10 PASS BeforeLoadEvent.length is 1
    1110PASS Blob.length is 0
    1211PASS CloseEvent.length is 1

  • trunk/LayoutTests/platform/gtk/TestExpectations

    r261922 r261946  
    15521552webkit.org/b/89650 svg/W3C-SVG-1.1/struct-dom-06-b.svg [ Failure Pass ]
    15531553
    1554 webkit.org/b/89811 media/media-blocked-by-beforeload.html [ Failure Pass ]
    15551554webkit.org/b/84856 media/media-controller-playback.html [ Crash Failure Timeout Pass ]
    15561555

  • trunk/LayoutTests/platform/ios-wk1/TestExpectations

    r261859 r261946  
    15571557fast/block/nested-renderers.html [ Crash Pass ]
    15581558fast/box-shadow/box-shadow-with-zero-radius.html [ Pass ImageOnlyFailure ]
    1559 fast/dom/HTMLObjectElement/beforeload-set-text-crash.xhtml [ Crash Pass ]
    15601559fast/dom/URL-attribute-reflection.html [ Crash Pass ]
    15611560fast/dynamic/window-scrollbars-test.html [ Failure Pass ]
    … …  
    18851884fast/canvas/canvas-createPattern-video-loading.html [ Skip ]
    18861885fast/canvas/canvas-createPattern-video-modify.html [ Skip ]
    1887 fast/dom/beforeload/video-before-load.html [ Skip ]
    18881886fast/dom/FileList-iterator.html [ Skip ]
    18891887fast/dom/HTMLAnchorElement/anchor-file-blob-download-no-extension.html [ Skip ]

  • trunk/LayoutTests/platform/ios-wk2/TestExpectations

    r261887 r261946  
    11691169
    11701170webkit.org/b/171957 fast/animation/request-animation-frame-time-unit.html [ Pass Failure ]
    1171 
    1172 webkit.org/b/172772 [ Release ] http/tests/cache/cancel-during-revalidation-succeeded.html [ Skip ]
    11731171
    11741172webkit.org/b/172454 http/tests/navigation/statistics.html [ Pass Failure ]

  • trunk/LayoutTests/platform/ios/TestExpectations

    r261896 r261946  
    17551755fast/preloader/image-srcset.html [ Failure ]
    17561756fast/replaced/invalid-object-with-fallback.html [ Failure ]
    1757 fast/replaced/object-with-embed-url-param.html [ Failure ]
    17581757fast/replaced/percent-height-in-anonymous-block.html [ Failure ]
    17591758fast/ruby/ruby-block-style-not-updated-with-before-after-content.html [ Failure ]

  • trunk/LayoutTests/platform/ios/js/dom/constructor-length-expected.txt

    r205932 r261946  
    88FAIL AutocompleteErrorEvent.length should be 1. Threw exception ReferenceError: Can't find variable: AutocompleteErrorEvent
    99PASS AnimationEvent.length is 1
    10 PASS BeforeLoadEvent.length is 1
    1110PASS Blob.length is 0
    1211PASS CloseEvent.length is 1

  • trunk/LayoutTests/platform/mac/js/dom/constructor-length-expected.txt

    r205932 r261946  
    88FAIL AutocompleteErrorEvent.length should be 1. Threw exception ReferenceError: Can't find variable: AutocompleteErrorEvent
    99PASS AnimationEvent.length is 1
    10 PASS BeforeLoadEvent.length is 1
    1110PASS Blob.length is 0
    1211PASS CloseEvent.length is 1

  • trunk/LayoutTests/platform/win/TestExpectations

    r261869 r261946  
    10581058media/controls-drag-timebar.html [ Skip ] # Timeout
    10591059media/event-attributes.html [ Skip ] # Timeout
    1060 media/media-blocked-by-beforeload.html [ Skip ] # Timeout
    10611060media/media-captions.html [ Skip ] # Timeout
    10621061media/media-continues-playing-after-replace-source.html [ Skip ] # Timeout

  • trunk/LayoutTests/platform/win/js/dom/constructor-length-expected.txt

    r205932 r261946  
    88FAIL AutocompleteErrorEvent.length should be 1. Threw exception ReferenceError: Can't find variable: AutocompleteErrorEvent
    99PASS AnimationEvent.length is 1
    10 PASS BeforeLoadEvent.length is 1
    1110PASS Blob.length is 0
    1211PASS CloseEvent.length is 1

  • trunk/LayoutTests/platform/wincairo/js/dom/constructor-length-expected.txt

    r229351 r261946  
    88FAIL AutocompleteErrorEvent.length should be 1. Threw exception ReferenceError: Can't find variable: AutocompleteErrorEvent
    99PASS AnimationEvent.length is 1
    10 PASS BeforeLoadEvent.length is 1
    1110PASS Blob.length is 0
    1211PASS CloseEvent.length is 1

  • trunk/LayoutTests/platform/wk2/TestExpectations

    r261103 r261946  
    278278# These tests use Flash, which is not a good idea, because it is not installed on all machines that run tests.
    279279# WebKitTestRunner detects attempts to use Flash, and raises an assertion.
    280 fast/dom/beforeload/flash-before-load.html [ Skip ]
    281 fast/dom/beforeload/remove-flash-in-beforeload-listener.html [ Skip ]
    282280fast/loader/sandboxed-plugin-crash.html [ Skip ]
    283281plugins/hidden-iframe-with-swf-plugin.html [ Skip ]

  • trunk/LayoutTests/plugins/unsupported-plugin-with-replacement-in-iframe-crash-expected.txt

    r259900 r261946  
    11CONSOLE MESSAGE: 1. Updating the layout with an embed object inside an iframe
    2 CONSOLE MESSAGE: 2. beforeload for the object fires and dirties the style tree
    32CONSOLE MESSAGE: Tried to use an unsupported plug-in.
    43CONSOLE MESSAGE: 3. Updated layout. The test passed.

  • trunk/Source/WebCore/ChangeLog

    r261941 r261946  
     12020-05-20  Chris Dumez  <cdumez@apple.com>
     2
     3        Disable support for BeforeLoadEvent
     4        https://bugs.webkit.org/show_bug.cgi?id=212140
     5        <rdar://problem/62847577>
     6
     7        Reviewed by Antti Koivisto.
     8
     9        Disable support for BeforeLoadEvent. Other browsers do not support it and
     10        Chrome dropped it shortly after the fork:
     11        - https://bugs.chromium.org/p/chromium/issues/detail?id=333318
     12
     13        This is a synchronous event and therefore very dangerous.
     14
     15        Test: fast/frames/didBecomeCurrentDocumentInFrame-crash.html
     16
     17        * bindings/js/WebCoreBuiltinNames.h:
     18        * dom/BeforeLoadEvent.idl:
     19        * dom/Node.cpp:
     20        (WebCore::Node::dispatchBeforeLoadEvent):
     21        * page/RuntimeEnabledFeatures.h:
     22        (WebCore::RuntimeEnabledFeatures::setLegacyBeforeLoadEventEnabled):
     23        (WebCore::RuntimeEnabledFeatures::legacyBeforeLoadEventEnabled const):
     24
    1252020-05-20  Zalan Bujtas  <zalan@apple.com>
    226

  • trunk/Source/WebCore/bindings/js/WebCoreBuiltinNames.h

    r261845 r261946  
    5353    macro(AuthenticatorAttestationResponse) \
    5454    macro(AuthenticatorResponse) \
     55    macro(BeforeLoadEvent) \
    5556    macro(BlobEvent) \
    5657    macro(Cache) \

  • trunk/Source/WebCore/dom/BeforeLoadEvent.idl

    r207215 r261946  
    2626
    2727[
    28     Constructor(DOMString type, optional BeforeLoadEventInit eventInitDict)
     28    Constructor(DOMString type, optional BeforeLoadEventInit eventInitDict),
     29    EnabledAtRuntime=LegacyBeforeLoadEvent
    2930] interface BeforeLoadEvent : Event {
    3031    readonly attribute DOMString url;

  • trunk/Source/WebCore/dom/Node.cpp

    r260762 r261946  
    6565#include "RenderTextControl.h"
    6666#include "RenderView.h"
     67#include "RuntimeEnabledFeatures.h"
    6768#include "SVGElement.h"
    6869#include "ScopedEventQueue.h"
    … …  
    24112412bool Node::dispatchBeforeLoadEvent(const String& sourceURL)
    24122413{
     2414    if (!RuntimeEnabledFeatures::sharedFeatures().legacyBeforeLoadEventEnabled())
     2415        return true;
     2416
    24132417    if (!document().hasListenerType(Document::BEFORELOAD_LISTENER))
    24142418        return true;

  • trunk/Source/WebCore/page/RuntimeEnabledFeatures.h

    r261074 r261946  
    360360    bool cssLogicalEnabled() const { return m_CSSLogicalEnabled; }
    361361
     362    void setLegacyBeforeLoadEventEnabled(bool isEnabled) { m_legacyBeforeLoadEventEnabled = isEnabled; }
     363    bool legacyBeforeLoadEventEnabled() const { return m_legacyBeforeLoadEventEnabled; }
     364
    362365    void setLineHeightUnitsEnabled(bool isEnabled) { m_lineHeightUnitsEnabled = isEnabled; }
    363366    bool lineHeightUnitsEnabled() const { return m_lineHeightUnitsEnabled; }
    … …  
    632635    bool m_needsInAppBrowserPrivacyQuirks { false };
    633636
     637    bool m_legacyBeforeLoadEventEnabled { false };
     638
    634639#if ENABLE(ACCESSIBILITY_ISOLATED_TREE)
    635640    bool m_accessibilityIsolatedTree { false };
Note: See TracChangeset for help on using the changeset viewer.