From 488bce59c7fcc02ae1badb2c6a1eeaa50575b9e7 Mon Sep 17 00:00:00 2001
From: Rick Waldron <waldron.rick@gmail.com>
Date: Fri, 19 Jan 2018 12:22:42 -0500
Subject: [PATCH] navigating-across-documents: revisions and explanations for
 010-015, plus new tests

commit ad4a48b4b9b718d454eb0f7cf758a6d7a2826c1d
Author: Rick Waldron <waldron.rick@gmail.com>
Date:   Mon Jan 15 14:23:53 2018 -0500

    Minor nits: use a string for js: url return; file name typo fix;

commit 083c1ee6cbd0e2954669a5cc26f3354016a631cf
Author: Rick Waldron <waldron.rick@gmail.com>
Date:   Mon Jan 15 13:47:28 2018 -0500

    Replacement: 008.html will be replaced by this test.

commit 6c173357d7fd8e74d35e29e32ea4a4cba02faeab
Author: Rick Waldron <waldron.rick@gmail.com>
Date:   Mon Jan 15 13:18:37 2018 -0500

    Major refactor: simplification, eliminate async false positives, consistent test + test-runner.html, convert comment blocks into test names and assertion descriptions

    - Eliminating use of postMessage as a test signaling mechanism serves to "reveal" async false positives.
    - Implement "*-runner.html" machinery for all tests that use an iframe as a "target nested browsing context", this will prevent tests from producing blank screens when run in webkit (where javascript: url code executions ignore target)
    - Compute "*-runner.html" for each test file, instead of maintaining the file name directly in each test file.

commit 43a1f833f447c43067af4c9afabcd00f750cfd4e
Author: Rick Waldron <waldron.rick@gmail.com>
Date:   Wed Jan 10 10:52:13 2018 -0500

    Minor fixes

commit 884ada3d511ec366f92a072ced0bf0cfdd364dea
Author: Rick Waldron <waldron.rick@gmail.com>
Date:   Thu Nov 16 16:31:33 2017 -0500

    navigating-across-documents: additional revisions, and additions 010-017

commit 2826fc1ea5ed49eff59d9eed6c910eaf66b19127
Author: Rick Waldron <waldron.rick@gmail.com>
Date:   Wed Nov 1 15:47:32 2017 -0400

    navigating-across-documents: revisions and explanations for 010-*, 011, 012-*, 013, 014 & 015
---
 ...rite-script-then-navigate-href-runner.html | 10 +++++++
 ...ument-write-script-then-navigate-href.html | 25 ++++++++++++++++
 ...ion-javascript-url-direct-call-runner.html | 10 +++++++
 ...orm-action-javascript-url-direct-call.html | 30 +++++++++++++++++++
 ...document-writes-script-element-runner.html | 10 +++++++
 ...pt-url-document-writes-script-element.html | 29 ++++++++++++++++++
 ...-javascript-url-executes-async-runner.html | 10 +++++++
 ...-action-javascript-url-executes-async.html | 29 ++++++++++++++++++
 .../navigating-across-documents/010.html      | 17 -----------
 ...-href-cancels-response-delayed-runner.html | 10 +++++++
 ...element-href-cancels-response-delayed.html | 28 +++++++++++++++++
 ...-href-cancels-response-delayed-runner.html | 10 +++++++
 ...element-href-cancels-response-delayed.html | 28 +++++++++++++++++
 .../navigating-across-documents/011.html      | 21 -------------
 ...12-onclick-return-false-no-navigation.html | 19 ++++++++++++
 .../navigating-across-documents/012.html      | 20 -------------
 ...ted-in-target-nested-browsing-context.html | 23 ++++++++++++++
 .../navigating-across-documents/013.html      | 20 -------------
 ...ted-in-target-nested-browsing-context.html | 28 +++++++++++++++++
 .../navigating-across-documents/014.html      | 21 -------------
 .../navigating-across-documents/015.html      | 20 -------------
 ...igate-to-href-response-delayed-runner.html | 10 +++++++
 ...hen-navigate-to-href-response-delayed.html | 21 +++++++++++++
 ...location-then-navigate-to-href-runner.html | 10 +++++++
 ...iframe-location-then-navigate-to-href.html | 21 +++++++++++++
 ...igate-to-href-response-delayed-runner.html | 10 +++++++
 ...hen-navigate-to-href-response-delayed.html | 21 +++++++++++++
 ...rame-src-then-navigate-to-href-runner.html | 10 +++++++
 ...-set-iframe-src-then-navigate-to-href.html | 21 +++++++++++++
 ...ipt-url-returns-script-element-runner.html | 10 +++++++
 ...javascript-url-returns-script-element.html | 29 ++++++++++++++++++
 .../call-parent-postmessage.html              |  6 ++++
 .../call-verify-navigation.html               |  4 +++
 33 files changed, 472 insertions(+), 119 deletions(-)
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async.html
 delete mode 100644 html/browsers/browsing-the-web/navigating-across-documents/010.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed.html
 delete mode 100644 html/browsers/browsing-the-web/navigating-across-documents/011.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/012-onclick-return-false-no-navigation.html
 delete mode 100644 html/browsers/browsing-the-web/navigating-across-documents/012.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/013-link-href-javascript-url-evaluated-in-target-nested-browsing-context.html
 delete mode 100644 html/browsers/browsing-the-web/navigating-across-documents/013.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/014-form-action-javascript-url-evaluated-in-target-nested-browsing-context.html
 delete mode 100644 html/browsers/browsing-the-web/navigating-across-documents/014.html
 delete mode 100644 html/browsers/browsing-the-web/navigating-across-documents/015.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element-runner.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/call-parent-postmessage.html
 create mode 100644 html/browsers/browsing-the-web/navigating-across-documents/call-verify-navigation.html

diff --git a/html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href-runner.html
new file mode 100644
index 00000000000000..fbcb3588367cac
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:(()=>{document.write(`<script>parent.verifyNavigation(false)</script>`); return `<!-- this should not be successful --><script>parent.verifyNavigation(false)</script>`})()"></form>
+<a target="test" onclick="document.forms[0].submit();" href="call-verify-navigation.html">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href.html b/html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href.html
new file mode 100644
index 00000000000000..f079bef5b295b0
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/009-onclick-form-action-javascript-url-document-write-script-then-navigate-href.html
@@ -0,0 +1,25 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code was not canceled by the default href navigation. This might occur if the 'javascript:url' code is not evaluated async, and/or the default href navigation does not cancel the navigation via 'javascript: url'.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in ${runner}) must be evaluated async; to pass this test, that navigation must be aborted by the default href navigation (of the clicked link) before that evaluation can complete.`);
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call-runner.html
new file mode 100644
index 00000000000000..a0dcf8b45166c8
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:parent.verifyNavigation(false);'1';"><!-- 'javascript: url' ending with a "'1';" is intentional --></form>
+<a target="test" onclick="document.forms[0].submit();" href="call-verify-navigation.html">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call.html b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call.html
new file mode 100644
index 00000000000000..7f4bbb7357beed
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-direct-call.html
@@ -0,0 +1,30 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/text-level-semantics.html#the-a-element">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#the-event-handler-processing-algorithm">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element:about:blank">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code was not canceled by the default href navigation. This might occur if the 'javascript:url' code is not evaluated async, and/or the default href navigation does not cancel the navigation via 'javascript: url'.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in ${runner}) must be evaluated async; to pass this test, that navigation must be aborted by the default href navigation (of the clicked link) before that evaluation can complete.`);
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element-runner.html
new file mode 100644
index 00000000000000..ed4308c8c6e8c7
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:document.write(`<!-- this should not be successful --><script>parent.verifyNavigation(false);</script>`);'1';"><!-- 'javascript: url' ending with a "'1';" is intentional --></form>
+<a target="test" onclick="document.forms[0].submit();" href="call-verify-navigation.html">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element.html b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element.html
new file mode 100644
index 00000000000000..b79a94d19766ad
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-document-writes-script-element.html
@@ -0,0 +1,29 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-task">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code was not canceled by the default href navigation. This might occur if the 'javascript:url' code is not evaluated async, and/or the default href navigation does not cancel the navigation via 'javascript: url'.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in ${runner}) must be evaluated async; to pass this test, that navigation must be aborted by the default href navigation (of the clicked link) before that evaluation can complete.`);
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async-runner.html
new file mode 100644
index 00000000000000..5fd8a0734bbafe
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:/*this should not be successful*/((e,n)=>{while(e()<n);parent.verifyNavigation(false);})(Date.now,Date.now()+4000);'1';"><!-- 'javascript: url' ending with a "'1';" is intentional --></form>
+<a target="test" onclick="document.forms[0].submit();" href="call-verify-navigation.html">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async.html b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async.html
new file mode 100644
index 00000000000000..261a60512ca9fd
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/010-form-action-javascript-url-executes-async.html
@@ -0,0 +1,29 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-task">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code was not canceled by the default href navigation. This might occur if the 'javascript:url' code is not evaluated async, and/or the default href navigation does not cancel the navigation via 'javascript: url'.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in: ${runner}) must be evaluated async; to pass this test, that navigation must be aborted by the default href navigation (of the clicked link) before that evaluation can complete. Most importantly: the execution of the code in the 'javascript:url' must NOT block the default href navigation.`);
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/010.html b/html/browsers/browsing-the-web/navigating-across-documents/010.html
deleted file mode 100644
index 3917cd16e5578d..00000000000000
--- a/html/browsers/browsing-the-web/navigating-across-documents/010.html
+++ /dev/null
@@ -1,17 +0,0 @@
-<!doctype html>
-<title>Link with onclick form submit to javascript url with delayed document.write and href navigation </title>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<div id="log"></div>
-<iframe id="test" name="test"></iframe>
-<form target="test" action="javascript:(function() {var x = new XMLHttpRequest(); x.open('GET', 'blank.html?pipe=trickle(d2)', false); x.send(); document.write('<script>parent.postMessage(&quot;write&quot;, &quot;*&quot;)</script>'); return '<script>parent.postMessage(&quot;click&quot;, &quot;*&quot;)</script>'})()"></form>
-<a target="test" onclick="document.forms[0].submit()" href="href.html">Test</a>
-<script>
-var t = async_test(undefined, {timeout:4000});
-t.step(function() {document.getElementsByTagName("a")[0].click()});
-onmessage = t.step_func(
-  function(e) {
-    assert_equals(e.data, "href");
-    t.done();
-  });
-</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed-runner.html
new file mode 100644
index 00000000000000..e8034c60c14030
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:document.write(`<script>parent.verifyNavigation(false);</script>`);'1';"><!-- 'javascript: url' ending with a "'1';" is intentional --></form>
+<a target="test" onclick="document.forms[0].submit();" href="call-verify-navigation.html?pipe=trickle(d2)">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed.html b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed.html
new file mode 100644
index 00000000000000..7cf4a8d3aa47fc
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-document-writes-script-element-href-cancels-response-delayed.html
@@ -0,0 +1,28 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-task">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code was not canceled by the default href navigation. This might occur if the 'javascript:url' code is not evaluated async, and/or the default href navigation does not cancel the navigation via 'javascript: url'.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in: ${runner}) must be evaluated async; to pass this test, that navigation must be aborted by the default href navigation (of the clicked link) before that evaluation can complete. This test will delay the _response_ of the default href navigation, but that must NOT impact the cancellation of the navigation via 'javascript:url'.`);
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed-runner.html
new file mode 100644
index 00000000000000..0edb023fb814bb
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:'<script>parent.verifyNavigation(false);</script>';"></form>
+<a target="test" onclick="document.forms[0].submit();" href="call-verify-navigation.html?pipe=trickle(d2)">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed.html b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed.html
new file mode 100644
index 00000000000000..7cf4a8d3aa47fc
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/011-form-action-javascript-url-returns-string-with-script-element-href-cancels-response-delayed.html
@@ -0,0 +1,28 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-task">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code was not canceled by the default href navigation. This might occur if the 'javascript:url' code is not evaluated async, and/or the default href navigation does not cancel the navigation via 'javascript: url'.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in: ${runner}) must be evaluated async; to pass this test, that navigation must be aborted by the default href navigation (of the clicked link) before that evaluation can complete. This test will delay the _response_ of the default href navigation, but that must NOT impact the cancellation of the navigation via 'javascript:url'.`);
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/011.html b/html/browsers/browsing-the-web/navigating-across-documents/011.html
deleted file mode 100644
index fe6b8dbc3560fb..00000000000000
--- a/html/browsers/browsing-the-web/navigating-across-documents/011.html
+++ /dev/null
@@ -1,21 +0,0 @@
-<!doctype html>
-<title>Link with onclick navigation to javascript url with document.write and href navigation </title>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<div id="log"></div>
-<iframe id="test" name="test"></iframe>
-<a target="test" onclick="javascript:(function() {document.write('<script>parent.postMessage(&quot;write&quot;, &quot;*&quot;)</script>'); return '<script>parent.postMessage(&quot;click&quot;, &quot;*&quot;)</script>'})()" href="href.html">Test</a>
-<script>
-var t = async_test();
-var events = [];
-t.step(function() {
-  document.getElementsByTagName("a")[0].click()});
-onmessage = t.step_func(
-  function(e) {
-    events.push(e.data);
-    if (events.length === 2) {
-      assert_array_equals(events, ["write", "href"]);
-      t.done();
-    }
-  });
-</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/012-onclick-return-false-no-navigation.html b/html/browsers/browsing-the-web/navigating-across-documents/012-onclick-return-false-no-navigation.html
new file mode 100644
index 00000000000000..7a5c33446f0a52
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/012-onclick-return-false-no-navigation.html
@@ -0,0 +1,19 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="test" name="test"></iframe>
+<a target="test" onclick="document.querySelector('iframe').contentWindow.location='call-verify-navigation.html';return false;" href="javascript:parent.verifyNavigation(false);">Test</a>
+<script>
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation initiated in the onclick handler was erroneously canceled by the default href navigation.");
+  });
+
+  document.querySelector("a").click();
+
+}, "An onlick handler that returns false must prevent the default href navigation from occuring. To pass this test, verifyNavigation(true) must be called from the successful navigation to call-verify-navigation.html.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/012.html b/html/browsers/browsing-the-web/navigating-across-documents/012.html
deleted file mode 100644
index be8f2feba8244a..00000000000000
--- a/html/browsers/browsing-the-web/navigating-across-documents/012.html
+++ /dev/null
@@ -1,20 +0,0 @@
-<!doctype html>
-<title>Link with onclick navigation to javascript url with delayed document.write and href navigation </title>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<div id="log"></div>
-<iframe id="test" name="test"></iframe>
-<!-- XXX: What is this test trying to do?  It's navigating the subframe, but
-     doing a write() to _this_ document, and the "javascript:" in there is
-     completely a red herring: it's a label, not a protocol.  There is no
-     javascript url involved here, unlike what the title claims! -->
-<a target="test" onclick="javascript:(function() {var x = new XMLHttpRequest(); x.open('GET', 'blank.html?pipe=trickle(d2)', false); x.send(); document.write('write<script>parent.postMessage(&quot;write&quot;, &quot;*&quot;)</script>'); return '<script>parent.postMessage(&quot;click&quot;, &quot;*&quot;)</script>'})()" href="href.html">Test</a>
-<script>
-var t = async_test(undefined, {timeout:4000});
-t.step(function() {document.getElementsByTagName("a")[0].click()});
-onmessage = t.step_func(
-  function(e) {
-    assert_equals(e.data, "href");
-    t.done();
-  });
-</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/013-link-href-javascript-url-evaluated-in-target-nested-browsing-context.html b/html/browsers/browsing-the-web/navigating-across-documents/013-link-href-javascript-url-evaluated-in-target-nested-browsing-context.html
new file mode 100644
index 00000000000000..fa66e75218cb24
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/013-link-href-javascript-url-evaluated-in-target-nested-browsing-context.html
@@ -0,0 +1,23 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/text-level-semantics.html#the-a-element">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#the-event-handler-processing-algorithm">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element:about:blank">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="test" name="test"></iframe>
+<a target="test" href="javascript:parent.verifyNavigation(location.href);">Test</a>
+<script>
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(locationHref) {
+    assert_equals(locationHref, "about:blank", "'javascript: url' code is expected to run in the target nested browsing context, but it ran in the top-level browsing context.");
+  });
+
+  document.querySelector("a").click();
+
+}, "Link with href navigation to 'javascript: url' code is executed in target nested browsing context.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/013.html b/html/browsers/browsing-the-web/navigating-across-documents/013.html
deleted file mode 100644
index 69ce7bc6168a9a..00000000000000
--- a/html/browsers/browsing-the-web/navigating-across-documents/013.html
+++ /dev/null
@@ -1,20 +0,0 @@
-<!doctype html>
-<title>Link with onclick navigation to javascript url with delayed document.write and href navigation </title>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<div id="log"></div>
-<iframe id="test" name="test"></iframe>
-<a target="test" href="javascript:parent.events.push('javascript');">Test</a>
-<script>
-var t = async_test(undefined, {timeout:4000});
-var events = [];
-t.step(function() {
-  document.getElementsByTagName("a")[0].click();
-  events.push('after script');
-});
-onload = t.step_func(function() {
-  // javascript: executions are async.
-  assert_array_equals(events, ['after script', 'javascript']);
-  t.done();
-});
-</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/014-form-action-javascript-url-evaluated-in-target-nested-browsing-context.html b/html/browsers/browsing-the-web/navigating-across-documents/014-form-action-javascript-url-evaluated-in-target-nested-browsing-context.html
new file mode 100644
index 00000000000000..162fab8712d775
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/014-form-action-javascript-url-evaluated-in-target-nested-browsing-context.html
@@ -0,0 +1,28 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/text-level-semantics.html#the-a-element">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#the-event-handler-processing-algorithm">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element:about:blank">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:parent.verifyNavigation(location.href);"></form>
+<a target="test" onclick="document.forms[0].submit();">Test</a>
+<script>
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(locationHref) {
+    assert_equals(locationHref, "about:blank", "'javascript: url' code is expected to run in the target nested browsing context, but it ran in the top-level browsing context.");
+  });
+
+  document.querySelector("a").click();
+
+}, "Link with onclick form submit to 'javascript: url' code is executed in target nested browsing context.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/014.html b/html/browsers/browsing-the-web/navigating-across-documents/014.html
deleted file mode 100644
index 605e181858d4c7..00000000000000
--- a/html/browsers/browsing-the-web/navigating-across-documents/014.html
+++ /dev/null
@@ -1,21 +0,0 @@
-<!doctype html>
-<title> Link with javascript onclick form submission script order </title>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<div id="log"></div>
-<iframe id="test" name="test"></iframe>
-<form target="test" action="javascript:parent.events.push('submit');"></form>
-<a target="test" onclick="document.forms[0].submit()">Test</a>
-<script>
-var t = async_test(undefined, {timeout:4000});
-var events = [];
-t.step(function() {
-  document.getElementsByTagName("a")[0].click();
-  events.push('after script');
-});
-onload = t.step_func(function() {
-  // javascript: executions are async.
-  assert_array_equals(events, ['after script', 'submit']);
-  t.done();
-});
-</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/015.html b/html/browsers/browsing-the-web/navigating-across-documents/015.html
deleted file mode 100644
index eb54622b785ea1..00000000000000
--- a/html/browsers/browsing-the-web/navigating-across-documents/015.html
+++ /dev/null
@@ -1,20 +0,0 @@
-<!doctype html>
-<title> Link with javascript onclick and href script order </title>
-<script src="/resources/testharness.js"></script>
-<script src="/resources/testharnessreport.js"></script>
-<div id="log"></div>
-<iframe id="test" name="test"></iframe>
-<a target="test" onclick="parent.events.push('click');" href="javascript:parent.events.push('href')">Test</a>
-<script>
-var t = async_test(undefined, {timeout:4000});
-var events = [];
-t.step(function() {
-  document.getElementsByTagName("a")[0].click();
-  events.push('after script');
-});
-onload = t.step_func(function() {
-  // javascript: executions are async.
-  assert_array_equals(events, ['click', 'after script', 'href']);
-  t.done();
-});
-</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed-runner.html
new file mode 100644
index 00000000000000..1df0939f7e3f58
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<a target="test" onclick="document.querySelector('iframe').contentWindow.location='javascript:`<script>parent.verifyNavigation(false);</script>`';" href="call-verify-navigation.html?pipe=trickle(d1)">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed.html b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed.html
new file mode 100644
index 00000000000000..fc1236d35133f3
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-response-delayed.html
@@ -0,0 +1,21 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="runner"></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation initiated in the onclick handler was cancelled by the default href navigation.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, "Link with onclick sets iframe location to invoke a new navigation, which is immediately canceled by the default href navigation. This test will delay the _response_ of the default href navigation, but that must NOT impact the cancellation of the previous navigation.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-runner.html
new file mode 100644
index 00000000000000..9eb4d7ae61a074
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<a target="test" onclick="document.querySelector('iframe').contentWindow.location='javascript:`<script>parent.verifyNavigation(false);</script>`';" href="call-verify-navigation.html">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href.html b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href.html
new file mode 100644
index 00000000000000..b4ace8e93398e4
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/016-onclick-set-iframe-location-then-navigate-to-href.html
@@ -0,0 +1,21 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="runner"></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation initiated in the onclick handler was cancelled by the default href navigation.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, "Link with onclick sets iframe location to invoke a new navigation, which is immediately canceled by the default href navigation.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed-runner.html
new file mode 100644
index 00000000000000..daab73248c42d7
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<a target="test" onclick="document.querySelector('iframe').src='javascript:`<script>parent.verifyNavigation(false);</script>`';" href="call-verify-navigation.html?pipe=trickle(d1)">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed.html b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed.html
new file mode 100644
index 00000000000000..6a02ec002945a1
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-response-delayed.html
@@ -0,0 +1,21 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="runner"></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation initiated in the onclick handler was erroneously canceled by the default href navigation.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, "Link with onclick sets iframe location to invoke a new navigation, which is immediately canceled by the default href navigation. This test will delay the _response_ of the default href navigation, but that must NOT impact the cancellation of the previous navigation.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-runner.html
new file mode 100644
index 00000000000000..4a42e101df4399
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<a target="test" onclick="document.querySelector('iframe').src='javascript:`<script>parent.verifyNavigation(false);</script>`';" href="call-verify-navigation.html">Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href.html b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href.html
new file mode 100644
index 00000000000000..b4ace8e93398e4
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/017-onclick-set-iframe-src-then-navigate-to-href.html
@@ -0,0 +1,21 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe id="runner"></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation initiated in the onclick handler was cancelled by the default href navigation.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, "Link with onclick sets iframe location to invoke a new navigation, which is immediately canceled by the default href navigation.");
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element-runner.html b/html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element-runner.html
new file mode 100644
index 00000000000000..bfa81f7006b40c
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element-runner.html
@@ -0,0 +1,10 @@
+<!doctype html>
+<iframe id="test" name="test"></iframe>
+<form target="test" action="javascript:`<script>parent.verifyNavigation(true)</script>`"></form>
+<a target="test" onclick="document.forms[0].submit();" >Test</a>
+<script>
+window.verifyNavigation = parent.verifyNavigation;
+window.onload = function() {
+  document.querySelector("a").click();
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element.html b/html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element.html
new file mode 100644
index 00000000000000..a17faf0d7daa31
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/018-form-action-javascript-url-returns-script-element.html
@@ -0,0 +1,29 @@
+<!doctype html>
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#navigating-across-documents">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/links.html#following-hyperlinks">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/browsing-the-web.html#javascript-protocol">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#concept-form-submit">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-get-action">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#plan-to-navigate">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#planned-navigation">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-task">
+<link rel="help" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<div id="log"></div>
+<iframe src=""></iframe>
+<script>
+const runner = location.href.slice(location.href.lastIndexOf("/") + 1, location.href.length)
+                  .replace(".html", "-runner.html");
+
+async_test(function(test) {
+
+  window.verifyNavigation = test.step_func_done(function(signal) {
+    assert_equals(signal, true, "The navigation via 'javascript: url' code did not complete as expected.");
+  });
+
+  document.querySelector("iframe").src = runner;
+
+}, `A navigation via 'javascript: url' code (in: ${runner}) must be evaluated async; to pass this test, that code must be evaluated and the resulting string written to the iframe body as the contents of a script element. There is no default href navigation in the link.`);
+</script>
+
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/call-parent-postmessage.html b/html/browsers/browsing-the-web/navigating-across-documents/call-parent-postmessage.html
new file mode 100644
index 00000000000000..3c677b0b90687e
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/call-parent-postmessage.html
@@ -0,0 +1,6 @@
+<!doctype html>
+<script>
+window.onload = function() {
+  parent.postMessage("call-parent-postmessage", "*");
+};
+</script>
diff --git a/html/browsers/browsing-the-web/navigating-across-documents/call-verify-navigation.html b/html/browsers/browsing-the-web/navigating-across-documents/call-verify-navigation.html
new file mode 100644
index 00000000000000..b7a5913be50ea8
--- /dev/null
+++ b/html/browsers/browsing-the-web/navigating-across-documents/call-verify-navigation.html
@@ -0,0 +1,4 @@
+<!doctype html>
+<script>
+parent.verifyNavigation(true);
+</script>