10 lines
248 B
JavaScript
10 lines
248 B
JavaScript
/* import-globals-from mixedContentTest.js */
|
|
"use strict";
|
|
|
|
document.open();
|
|
document.write("This is insecure XSS script " + document.cookie);
|
|
isSecurityState(
|
|
"broken",
|
|
"security broken after document write from unsecure script"
|
|
);
|
|
finish();
|