Bugzilla

      // Make sure this docshell has our sandbox flags

      docShell->SetSandboxFlags(doc->GetSandboxFlags());

		test_bug886262.html \

<!DOCTYPE HTML>

<html>

<!--

https://bugzilla.mozilla.org/show_bug.cgi?id=886262

-->

<head>

  <meta charset="utf-8">

  <title>Test for Bug 886262</title>

  <script type="application/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>

  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css"/>

  <script type="application/javascript">

  /** Test for Bug 886262 **/

  SimpleTest.waitForExplicitFinish();

  var gotSet1 = false;

  var gotSet2 = false;

  var gotSet3 = false;

  var gotMessage = false, gotLoad = false;

  window.onmessage = function(e) {

    ok(e.data.ran, "Sandboxed allow-scripts iframe should run script");

    ok(e.data.gotSet,

       "Sandboxed allow-scripts iframe's kid should not be able to set props on its parent");

    ok(!gotSet2,

       "Sandboxed allow-scripts iframe should not be able to set props on us");

    if (gotLoad) {

      SimpleTest.finish();

    } else {

      gotMessage = true;

    }

  }

  addLoadEvent(function() {

    ok(!gotSet1, "Sandboxed iframe should not be able to set props on us");

    ok(!frames[0][0].scriptRan, "Sandboxed iframe should not run script");

    ok(gotSet3,

       "Sandboxed allow-scripts same-origin iframe should be able to set " +

       "props on us");

    ok(frames[2][0].scriptRan,

       "Sandboxed allow-scripts same-origin iframe should run script");

    if (gotMessage) {

      SimpleTest.finish();

    } else {

      gotLoad = true;

    }

  });

  </script>

</head>

<body>

<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=886262">Mozilla Bug 886262</a>

<p id="display"></p>

<div id="content" style="display: none">

  <iframe sandbox="allow-same-origin" src="data:text/html,<object%20data='data:text/html,<script>var scriptRan = true;</script><script>parent.parent.gotSet1 = true</script>'></object>"></iframe>

  <iframe sandbox="allow-scripts"

  src="data:text/html,<script>var gotSet = false;</script><object%20data='data:text/html,<script>var scriptRan = true;</script><script>parent.gotSet = true</script>'></object><script>window.onload = function() {parent.postMessage({ 'ran': frames[0].scriptRan, 'gotSet': window.gotSet }, '*'); }</script>"></iframe>

  <iframe sandbox="allow-scripts allow-same-origin" src="data:text/html,<object%20data='data:text/html,<script>var scriptRan = true;</script><script>parent.parent.gotSet3 = true</script>'></object>"></iframe>

</div>

<pre id="test">

</pre>

</body>

</html>