strip-script-attrs-on-input.html | Explore in Territory

<!DOCTYPE html>
<body>
<div contenteditable="true" id="target">
    <!-- Blink will remove javascript url attrs when copy&pasted. -->
    <input onblur="javascript:false;" onclick="javascript:false;" type="text"/>
</div>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

requestAnimationFrame(function() {
    var target = document.getElementById("target");
    var selection = window.getSelection();
    var range = document.createRange();
    range.selectNodeContents(target);
    selection.addRange(range);

    // Invoke HTML parser with ParserContentPolicy disabling scripting content.
    document.execCommand("Cut");
    document.execCommand("Paste");

    target.innerHTML = '';
    testRunner.notifyDone();
});
</script>
<p>PASS: if no OOB access detected in ASAN.</p>
</body>

chromium/third_party/blink/web_tests/fast/parser/strip-script-attrs-on-input.html