xss-DENIED-javascript-with-spaces.html

<body onload="test()">
<iframe src="http://localhost:8000/security/resources/innocent-victim.html"></iframe>
<p>There should be no alert displayed.</p>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.setDumpConsoleMessages(false);
    testRunner.waitUntilDone();
}

function test()
{
    var i = document.getElementsByTagName("iframe")[0];
    i.src = new Array(100).join('\x20') + 'javascript:alert(document.body.innerHTML)';
    setTimeout(function() {
        if (window.testRunner)
            testRunner.notifyDone();
    }, 0);
}
</script>
</body>

chromium/third_party/blink/web_tests/http/tests/security/xss-DENIED-javascript-with-spaces.html