| <!DOCTYPE html> |
| <script src="/resources/testharness.js"></script> |
| <script src="/resources/testharnessreport.js"></script> |
| <script src="./resources/helper.js"></script> |
| <body> |
| <script> |
| |
| var tests = [ |
| ` |
| <form action="/security/resources/postmessage-post.php" method="post"> |
| <input type="submit"> |
| <select name="dangling"><option> |
| `, |
| ` |
| <div> |
| <form action="/security/resources/postmessage-post.php" method="post"> |
| <input type="submit"> |
| <select name="dangling"><option> |
| `, |
| ` |
| <form action="/security/resources/postmessage-post.php" method="post" id="form"> |
| <input type="submit"> |
| </form> |
| <select name="dangling" form="form"><option> |
| `, |
| ` |
| <form action="/security/resources/postmessage-post.php" method="post"> |
| <input type="submit"> |
| <select name="dangling"><option label="yay"> |
| `, |
| ` |
| <div> |
| <form action="/security/resources/postmessage-post.php" method="post"> |
| <input type="submit"> |
| <select name="dangling"><option label="yay"> |
| `, |
| ` |
| <form action="/security/resources/postmessage-post.php" method="post" id="form"> |
| <input type="submit"> |
| </form> |
| <select name="dangling" form="form"><option label="yay"> |
| ` |
| ]; |
| |
| tests.forEach(markup => { |
| async_test(t => { |
| var i = createFrame(`${markup}sekrit<element attribute></element>`); |
| assert_no_submission(t, i); |
| }, markup.replace(/[\n\r]/g, '')); |
| }); |
| </script> |
| |
