blob: cae7ee69007a2b40ed3c39aa3d684d75ee4a8247 (
plain)
1
2
3
4
5
6
7
8
|
<script>
// Capture window.parent: once this context navigates, window.parent always returns null.
var p = parent;
alert(1);
parent.document.getElementsByTagName('iframe')[0].src = "javascript:alert(2),'PASS<script>alert(3)<\/script>'";
alert(4);
p.setTimeout("done()", 0);
</script>
|
