src/third_party/WebKit/LayoutTests/http/tests/security/xss-DENIED-javascript-with-spaces.html

   1 <body onload="test()">
   2 <iframe src="http://localhost:8000/security/resources/innocent-victim.html"></iframe>
   3 <p>There should be no alert displayed.</p>
   4 <script>
   5 if (window.testRunner) {
   6     testRunner.dumpAsText();
   7     testRunner.waitUntilDone();
   8 }
   9
  10 function test()
  11 {
  12     var i = document.getElementsByTagName("iframe")[0];
  13     i.src = new Array(100).join('\x20') + 'javascript:alert(document.body.innerHTML)';
  14     setTimeout(function() {
  15         if (window.testRunner)
  16             testRunner.notifyDone();
  17     }, 0);
  18 }
  19 </script>
  20 </body>