Content - 698bf9dc494a1be2e58ab06cb7de9f3d9a18ae31 - 2f02d03/trusted-types/block-string-assignment-to-innerHTML.tentative.html

visit type:

Tip revision: 03b7db51f21ce2a157454020bb46301b825152a5 authored by Alex Moshchuk on 13 April 2018, 23:12:06 UTC
Reland 2: Use PostTask to schedule cross-process postMessage forwarding.

Tip revision: 03b7db5

block-string-assignment-to-innerHTML.tentative.html

<!DOCTYPE html>
<html>
<head>
  <script src="/resources/testharness.js"></script>
  <script src="/resources/testharnessreport.js"></script>
  <script src="./support/helper.js"></script>

  <meta http-equiv="Content-Security-Policy" content="require-trusted-types">
</head>
<body>
<script>
  // String assignments throw.
  test(t => {
    var d = document.createElement('div');
    assert_throws(new TypeError(), _ => {
      d.innerHTML = "Fail.";
    });
  }, "`innerHTML = string` throws.");

  // TrustedHTML assignments work.
  test(t => {
    var html = TrustedHTML.escape(STRINGS.unescapedHTML);
    var d = document.createElement('div');
    d.innerHTML = html;
    assert_equals(d.innerText, STRINGS.unescapedHTML);
  }, "innerHTML = TrustedHTML.escape().");

  test(t => {
    var html = TrustedHTML.unsafelyCreate(STRINGS.unescapedHTML);
    var d = document.createElement('div');
    d.innerHTML = html;
    assert_equals(d.innerText, STRINGS.unescapedText);
  }, "innerHTML = TrustedHTML.unsafelyCreate().");
</script>
</body>
</html>

Browse the archive

https://github.com/web-platform-tests/wpt