xhr.onreadystatechange = function (oEvent) { var result = false;
if (xhr.readyState == 4) {
if (xhr.status == 200) {
result = true;
}
ok(result, "XHR should work normally in an iframe sandboxed with 'allow-same-origin'");
}
}
xhr.send(null);
}
function doStuff() {
ok(true, "documents sandboxed with 'allow-same-origin' should be able to access their parent");
// should be able to access document.cookie since we have 'allow-same-origin'
ok(document.cookie == "", "a document sandboxed with allow-same-origin should be able to access document.cookie");
// should be able to access localStorage since we have 'allow-same-origin'
ok(window.localStorage, "a document sandboxed with allow-same-origin should be able to access localStorage");
// should be able to access sessionStorage since we have 'allow-same-origin'
ok(window.sessionStorage, "a document sandboxed with allow-same-origin should be able to access sessionStorage");
testXHR();
}
</script>
<body onLoad="doStuff()">
I am sandboxed but with "allow-same-origin" and "allow-scripts"
</body>
</html>
Die Informationen auf dieser Webseite wurden
nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit,
noch Qualität der bereit gestellten Informationen zugesichert.
Bemerkung:
Die farbliche Syntaxdarstellung und die Messung sind noch experimentell.
