image-tainting-checker.sub.html

Enable keyboard shortcuts

<!DOCTYPE html>

<body>

<canvas id="canvas"></canvas>

<script>

// Used by image-tainting-in-cross-origin-iframe.sub.html to check that an

// image resource loaded by the top level frame that is same-origin to the

// frame isn't treated as a same-origin resource in a cross-origin iframe.

const canvas = document.getElementById('canvas');

const ctx = canvas.getContext('2d');

const img = new Image();

img.src = 'http://{{host}}:{{ports[http][0]}}/images/blue-png-cachable.py';

img.onload = () => {

  ctx.drawImage(img, 0, 0);

  try {

    ctx.getImageData(0, 0, 1, 1);

    parent.postMessage('FAIL: getImageData() didn\'t throw', '*');

  } catch (e) {

    parent.postMessage('DONE', '*');

};

</script>

</body>