Initial window.open() tests

Main page

Test case: Is native window.open() overridden?

This test case checks if native UIWebView window.open() is overridden.

 

Other functions/objects loaded with stringByEvaluatingJavaScriptFromString to window object are shown by this script. They either override native Javascript functions to bridge them with Objective-C code, or implement browser functions like password manager, autocomplete, context menu.

Test case: Origin of a child window (about:blank)

This test case calls window.open("about:blank") and in the opened window writes its document.location. Please ignore address bar for this test.

applewebdata: URL is shown when loadHTMLString is called with baseURL=nil/NULL (see also CVE-2012-2899).

Test case: Origin of a child window (same location)

This test case calls window.open(document.location.href) and in the opened window writes its document.location. Please ignore address bar for this test.

If both window.open() and document.write() work, please go to UXSS tests. Otherwise go directly to tests for address bar spoofing in a single UIWebView