| <!DOCTYPE html> |
| <body> |
| <div contenteditable="true" id="target"> |
| <!-- Blink will remove javascript url attrs when copy&pasted. --> |
| <input onblur="javascript:false;" onclick="javascript:false;" type="text"/> |
| </div> |
| <script> |
| if (window.testRunner) { |
| testRunner.dumpAsText(); |
| testRunner.waitUntilDone(); |
| } |
| |
| requestAnimationFrame(function() { |
| var target = document.getElementById("target"); |
| var selection = window.getSelection(); |
| var range = document.createRange(); |
| range.selectNodeContents(target); |
| selection.addRange(range); |
| |
| // Invoke HTML parser with ParserContentPolicy disabling scripting content. |
| document.execCommand("Cut"); |
| document.execCommand("Paste"); |
| |
| target.innerHTML = ''; |
| testRunner.notifyDone(); |
| }); |
| </script> |
| <p>PASS: if no OOB access detected in ASAN.</p> |
| </body> |
