bug608373-1.html - This HTML code creates an iframe with no…

/parser/htmlparser/tests/reftest/bug608373-1.html

http://github.com/zpao/v8monkey · HTML · 14 lines · 13 code · 1 blank · 0 comment · 0 complexity · cc18e051a806175a4eb9dc474118799b MD5 · raw file


<!DOCTYPE html>
<html class=reftest-wait>
<head>
<script>
function write() {
  document.getElementsByTagName("iframe")[0].contentDocument.write('\u003Cscript src="data:text/javascript,var i = 0;">\u003C\/script>TEXT\u003Cscript>parent.document.documentElement.removeAttribute("class");\u003c/script>');
}
</script>
</head>
<body onload="write();">
  <iframe></iframe>
</body>
</html>

Summary ✨

This HTML code creates an iframe with no content and a script that writes JavaScript code to its content document when the page loads. The written code removes the “class” attribute from the parent element’s DOM element, effectively removing the class “reftest-wait” from the entire page. This is likely used for testing purposes.

Alerts (3)

'<script>' Inline JavaScript detected; move to external files with CSP for security and maintainability
4
'onload=' Inline event handler detected; use addEventListener in external JS for separation of concerns
10
'<iframe' Iframe detected; ensure sandbox attribute or CSP is used to mitigate security risks
11