From 33b94c84be4aca187f8ec78a04327243b2201926 Mon Sep 17 00:00:00 2001
From: Thomas Espach <tespach@duckduckgo.com>
Date: Fri, 13 Sep 2024 15:30:05 +0100
Subject: [PATCH 1/2] Add POC example nested frames tracker counter test.

---
 .../request-blocking/nested-frames.html       | 58 +++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 privacy-protections/request-blocking/nested-frames.html
diff --git a/privacy-protections/request-blocking/nested-frames.html b/privacy-protections/request-blocking/nested-frames.html
new file mode 100644
index 0000000..54db28c
--- /dev/null
+++ b/privacy-protections/request-blocking/nested-frames.html
@@ -0,0 +1,58 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Nested Frames Tracker Blocking Test</title>
+</head>
+
+<body>
+    <p><a href="/">[Home]</a></p>
+
+    <h1>Nested Frames Tracker Blocking Test</h1>
+
+    <p>
+        Example page that loads trackers in nested frames to check if tracker counts in the new tab page are updated
+        when child frame requests are blocked.
+    </p>
+
+    <button onclick="loadTracker('parent')">Load Tracker in Parent Frame</button>
+    <button onclick="loadTracker('child')">Load Tracker in Child Frame</button>
+
+    <script src="http://bad.third-party.site/privacy-protections/request-blocking/block-me/script.js"></script>
+    <script>
+        const [parentFrame, childFrame] = createFrames();
+
+        function createFrames() {
+            const parent = document.createElement('iframe');
+            const child = document.createElement('iframe');
+            parent.name = "parent-frame";
+            parent.id = "parent-frame";
+            child.name = "child-frame";
+            child.id = "child-frame";
+
+            document.body.appendChild(parent);
+            parent.contentDocument.body.appendChild(child);
+
+            return [parent, child];
+        }
+
+        function loadTracker(frameType) {
+            const trackerSrc = frameType === 'parent'
+                ? "http://broken.third-party.site/privacy-protections/request-blocking/block-me/script.js"
+                : "http://privacy-test-pages.site/privacy-protections/request-blocking/block-me/script.js";
+
+            const scriptElm = document.createElement('script');
+            scriptElm.src = trackerSrc;
+
+            if (frameType === 'parent') {
+                parentFrame.contentDocument.body.appendChild(scriptElm);
+            } else {
+                childFrame.contentDocument.body.appendChild(scriptElm);
+            }
+        }
+    </script>
+</body>
+
+</html>
\ No newline at end of file

From c9d82fcc3e1b90f747c1ac33d6b27c6be2165a78 Mon Sep 17 00:00:00 2001
From: Thomas Espach <tespach@duckduckgo.com>
Date: Fri, 13 Sep 2024 15:32:32 +0100
Subject: [PATCH 2/2] Add reference on homepage

---
 index.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/index.html b/index.html
index ba5cdbf..8ccc2b7 100644
--- a/index.html
+++ b/index.html
@@ -84,6 +84,7 @@ <h2>Privacy Protections Tests</h2>
 	<li><a href='./privacy-protections/amp-loop-protection/'>AMP Loop Protection</a></li>
 	<li><a href='./privacy-protections/query-parameters/'>Query Parameters</a></li>
 	<li><a href='./content-scope-scripts/runtime-checks/'>Runtime checks</a></li>
+	<li><a href="./privacy-protections/request-blocking/nested-frames.html">Nested iFrames</a></li>
 </ul>
 
 <h2 id="autofill">Autofill</h2>
