attacker page (a.test)

This page simulates a compromised renderer. The injected renderer code has now bound PrintManagerHost while this RFH is active and scheduled a delayed RequestPrintPreview IPC.

In 2 seconds the tab will navigate to the victim page on a different site; this page will enter the back/forward cache. ~3 seconds after that, the BFCached renderer fires the IPC and the print-preview dialog should appear over the victim page.