<!--
    1. save this file as test.html
    2. serve the directory with both `python -m http.server 8000` and `8001`
    3. go to <http://localhost:8000/test.html>
-->
<!-- case 1: same-origin -->
<!-- <iframe id=i src="http://localhost:8000/"></iframe> -->
<!-- case 2: same-site cross-origin -->
<iframe id=i src="http://localhost:8001/"></iframe>
<!-- case 3: cross-site -->
<!-- <iframe id=i src="https://servo.org/"></iframe> -->
<script>
    setTimeout(()=>{
        try {
            // for case 2...
            // servo 0.1.0: returns `"#document"`
            // servo 0.2.0: returns `"#document"`
            // firefox 150: throws DOMException
            alert(i.contentWindow.document.nodeName);
        } catch (e) {
            console.log(e);
        }
        try {
            // for case 2...
            // servo 0.1.0: returns `undefined`
            // servo 0.2.0: returns `undefined`
            // firefox 150: throws DOMException
            alert(i.contentWindow.stop());
        } catch (e) {
            console.log(e);
        }
        try {
            // for case 2...
            // servo 0.1.0: returns `undefined`
            // servo 0.2.0: throws SecurityError
            // firefox 150: throws DOMException
            const d = Object.getOwnPropertyDescriptor(window,"stop");
            alert(d.value.bind(i.contentWindow)());
        } catch (e) {
            console.log(e);
        }
    },250)
</script>