Content - c7dca4aeee59385e37d79d086c1270a9f25c9c43 - 09c7b28/x-frame-options/support/nested.py

visit type:

Tip revision: cb0c9da3fc19b0e553036b07d304b264c40386eb authored by Mike Pennisi on 07 September 2018, 01:57:53 UTC
Log suspicious test declarations

Tip revision: cb0c9da

nested.py

def main(request, response):
    origin = request.GET.first("origin");
    value = request.GET.first("value");
    return ([("Content-Type", "text/html")],
            """<!DOCTYPE html>
<title>XFO.</title>
<body>
<script>
  var gotMessage = false;
  window.addEventListener("message", e => {
    gotMessage = true;
    window.parent.postMessage(e.data, "*");
  });

  var i = document.createElement("iframe");
  i.src = "%s/x-frame-options/support/xfo.py?value=%s";
  i.onload = _ => {
    // Why two rAFs? Because that seems to be enough to stop the
    // load event from racing with the onmessage event.
    requestAnimationFrame(_ => {
      requestAnimationFrame(_ => {
        if (!gotMessage) {
          window.parent.postMessage("Failed", "*");
        }
      });
    });
  };
  document.body.appendChild(i);
</script>
            """ % (origin, value))

Browse the archive

https://github.com/web-platform-tests/wpt