cordova-plugin-mobilespec-tests/tests/bridge.tests.js

/*
 *
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 *
 */
exports.defineAutoTests = function () {
    describe('Bridge', function (done) {
        var frame;
        afterEach(function () {
            if (frame) {
                document.body.removeChild(frame);
            }
        });
        it("bridge.spec.1 should reject bridge from iframe with data: URL", function (done) {
            if (cordova.platformId != 'android') {
                pending();
                return;
            }
            frame = document.createElement('iframe');

            // Gets intercepted in native.
            frame.src = 'http://stealbridgesecret.test/';
            frame.onload = function () {
                var stolenSecret = frame.contentWindow.prompt('', 'gap_init:');
                expect(!!stolenSecret).toBe(false);
                done();
            };
            document.body.appendChild(frame);
        });
    });
}