@@ -70,6 +70,36 @@ describe '<webview> tag', ->
7070 webview .src = " file://#{ fixtures} "
7171 document .body .appendChild webview
7272
73+ describe ' disablewebsecurity attribute' ->
74+ it ' does not disable web security when not set' done ) ->
75+ src = "
76+ <script src='file://#{ __dirname }
77+ <script>console.log('ok');</script>
78+ "
79+ encoded = btoa (unescape (encodeURIComponent (src)))
80+ listener = (e ) ->
81+ assert / Not allowed to load local resource/ test (e .message )
82+ webview .removeEventListener ' console-message'
83+ done ()
84+ webview .addEventListener ' console-message'
85+ webview .src = " data:text/html;base64,#{ encoded} "
86+ document .body .appendChild webview
87+
88+ it ' disables web security when set' done ) ->
89+ src = "
90+ <script src='file://#{ __dirname }
91+ <script>console.log('ok');</script>
92+ "
93+ encoded = btoa (unescape (encodeURIComponent (src)))
94+ listener = (e ) ->
95+ assert .equal e .message , ' ok'
96+ webview .removeEventListener ' console-message'
97+ done ()
98+ webview .addEventListener ' console-message'
99+ webview .setAttribute ' disablewebsecurity' ' '
100+ webview .src = " data:text/html;base64,#{ encoded} "
101+ document .body .appendChild webview
102+
73103 describe ' new-window event' ->
74104 it ' emits when window.open is called' done ) ->
75105 webview .addEventListener ' new-window' e ) ->
0 commit comments