Content - 4446a58836695355efd0fbf3f9f5a0bd6c60c8a3 - 25fce48/trusted-types/block-string-assignment-to-DOMParser-parseFromString.tentative.html

visit type:

Tip revision: fe38104efc1fefb450302f42f157855f579d174c authored by Lan Wei on 15 December 2018, 01:20:34 UTC
Support multiple mouse pointers inputs

Tip revision: fe38104

block-string-assignment-to-DOMParser-parseFromString.tentative.html

<!DOCTYPE html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="support/helper.sub.js"></script>

<meta http-equiv="Content-Security-Policy" content="trusted-types *">
<body>
<script>
  // Trusted HTML assignments do not throw.
  test(t => {
    let p = createHTML_policy(window, 1);
    let html = p.createHTML(INPUTS.HTML);
    let parser = new DOMParser();
    let doc = parser.parseFromString(html, "text/html");
    assert_equals(doc.body.innerText, RESULTS.HTML);
  }, "document.innerText assigned via policy (successful HTML transformation).");

  // String assignments throw.
  test(t => {
    var parser = new DOMParser();
    assert_throws(new TypeError(), _ => {
      var doc = parser.parseFromString("Fail", "text/html");
    });
  }, "`document.innerText = string` throws.");

  // Null assignment throws.
  test(t => {
    var parser = new DOMParser();
    assert_throws(new TypeError(), _ => {
      var doc = parser.parseFromString(null, "text/html");
    });
  }, "'document.innerText = null' throws");

  // After default policy creation string assignment implicitly calls createHTML.
  test(t => {
    let p = window.TrustedTypes.createPolicy("default", { createHTML: createHTMLJS }, true);
    let parser = new DOMParser();
    let doc = parser.parseFromString(INPUTS.HTML, "text/html");
    assert_equals(doc.body.innerText, RESULTS.HTML);
  }, "'document.innerText = string' assigned via default policy (successful HTML transformation).");

  // After default policy creation null assignment implicitly calls createHTML.
  test(t => {
    var parser = new DOMParser();
    var doc = parser.parseFromString(null, "text/html");
    assert_equals(doc.body.innerText, "null");
  }, "'document.innerText = null' assigned via default policy does not throw");
</script>

Browse the archive

https://github.com/web-platform-tests/wpt