securityos/node_modules/comlink/tests/fixtures/attack-iframe.html

22 lines
514 B
HTML

<html>
<body>
<script>
window.addEventListener("message", (ev) => {
if (ev.data === "start") {
// send back a message to modify the prototype
parent.postMessage(
{
type: "SET",
value: { type: "RAW", value: "x" },
path: ["__proto__", "foo"],
},
"*"
);
parent.postMessage("done", "*");
}
});
parent.postMessage("ready", "*");
</script>
</body>
</html>