Description: Block window.open() API inside iframe with sandbox attribute.
Test Result | Test Assertion |
Manual |
Steps:
1. Click button "Click here to call window.open() API".
Test passes if there is no red on the page and no new window opens. The user agent may offer the user the option of allowing a new window to open.
|
iframe with sandbox="allow-scripts allow-same-origin allow-forms allow-top-navigation"