31 lines
778 B
HTML
31 lines
778 B
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<body>
|
|
<p>Test that we do not fire the svg load event when the SVGElement is detached.</p>
|
|
<p>This test passes if you see no alert.</p>
|
|
<script>
|
|
if (window.testRunner)
|
|
testRunner.dumpAsText();
|
|
|
|
const payloads = [
|
|
'<svg xmlns="http://www.w3.org/2000/svg"><g onload=alert("FAIL1")></g></svg>',
|
|
'<svg onload=alert("FAIL2")>'
|
|
];
|
|
|
|
for (let payload of payloads) {
|
|
document.createElement('body').innerHTML = payload;
|
|
|
|
document.implementation.createHTMLDocument().write(payload);
|
|
|
|
new DOMParser().parseFromString(payload, 'text/html');
|
|
|
|
var xhr = new XMLHttpRequest;
|
|
xhr.responseType='document'
|
|
xhr.open('GET', 'data:text/html,', false);
|
|
xhr.send(null);
|
|
xhr.response.body.innerHTML=payload;
|
|
}
|
|
</script>
|
|
</body>
|
|
</html>
|