Google Git
Sign in
webkit / WebKit / a847461eedf68a16e2d2491447608ea3bf9d7890 / . / LayoutTests / http / tests / security
tree: 7fb8dbdc5f0ea4bfc03b2e54e10ffb735cdf033d [path history] [tgz]
  1. 401-logout/
  2. aboutBlank/
  3. clipboard/
  4. contentSecurityPolicy/
  5. contentTypeOptions/
  6. cookies/
  7. dataURL/
  8. frameNavigation/
  9. isolatedWorld/
  10. javascriptURL/
  11. listener/
  12. MessagePort/
  13. mixedContent/
  14. originHeader/
  15. postMessage/
  16. resources/
  17. seamless/
  18. XFrameOptions/
  19. xssAuditor/
  20. beforeload-iframe-client-redirect-expected.txt
  21. beforeload-iframe-client-redirect.html
  22. beforeload-iframe-server-redirect-expected.txt
  23. beforeload-iframe-server-redirect.html
  24. calling-versus-current-expected.txt
  25. calling-versus-current.html
  26. cannot-read-cssrules-expected.txt
  27. cannot-read-cssrules-redirect-expected.txt
  28. cannot-read-cssrules-redirect.html
  29. cannot-read-cssrules.html
  30. canvas-cors-with-two-hosts-expected.txt
  31. canvas-cors-with-two-hosts.html
  32. canvas-remote-read-data-url-image-expected.txt
  33. canvas-remote-read-data-url-image.html
  34. canvas-remote-read-redirect-to-remote-image-expected.txt
  35. canvas-remote-read-redirect-to-remote-image.html
  36. canvas-remote-read-remote-image-allowed-expected.txt
  37. canvas-remote-read-remote-image-allowed-with-credentials-expected.txt
  38. canvas-remote-read-remote-image-allowed-with-credentials.html
  39. canvas-remote-read-remote-image-allowed.html
  40. canvas-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  41. canvas-remote-read-remote-image-blocked-no-crossorigin.html
  42. canvas-remote-read-remote-image-blocked-then-allowed-expected.txt
  43. canvas-remote-read-remote-image-blocked-then-allowed.html
  44. canvas-remote-read-remote-image-document-domain-expected.txt
  45. canvas-remote-read-remote-image-document-domain.html
  46. canvas-remote-read-remote-image-expected.txt
  47. canvas-remote-read-remote-image-redirect-expected.txt
  48. canvas-remote-read-remote-image-redirect.html
  49. canvas-remote-read-remote-image.html
  50. credentials-in-referer-expected.txt
  51. credentials-in-referer.html
  52. cross-frame-access-call-expected.txt
  53. cross-frame-access-call.html
  54. cross-frame-access-callback-explicit-domain-ALLOW-expected.txt
  55. cross-frame-access-callback-explicit-domain-ALLOW.html
  56. cross-frame-access-callback-explicit-domain-DENY-expected.txt
  57. cross-frame-access-callback-explicit-domain-DENY.html
  58. cross-frame-access-child-explicit-domain-expected.txt
  59. cross-frame-access-child-explicit-domain.html
  60. cross-frame-access-custom-expected.txt
  61. cross-frame-access-custom.html
  62. cross-frame-access-delete-expected.txt
  63. cross-frame-access-delete.html
  64. cross-frame-access-document-direct-expected.txt
  65. cross-frame-access-document-direct.html
  66. cross-frame-access-DOMImplementation-expected.txt
  67. cross-frame-access-DOMImplementation.html
  68. cross-frame-access-enumeration-expected.txt
  69. cross-frame-access-enumeration.html
  70. cross-frame-access-first-time-expected.txt
  71. cross-frame-access-first-time.html
  72. cross-frame-access-frameelement-expected.txt
  73. cross-frame-access-frameelement.html
  74. cross-frame-access-frames-expected.txt
  75. cross-frame-access-frames.html
  76. cross-frame-access-get-custom-property-cached-expected.txt
  77. cross-frame-access-get-custom-property-cached.html
  78. cross-frame-access-get-expected.txt
  79. cross-frame-access-get-override-expected.txt
  80. cross-frame-access-get-override.html
  81. cross-frame-access-get.html
  82. cross-frame-access-getOwnPropertyDescriptor-expected.txt
  83. cross-frame-access-getOwnPropertyDescriptor.html
  84. cross-frame-access-history-get-expected.txt
  85. cross-frame-access-history-get-override-expected.txt
  86. cross-frame-access-history-get-override.html
  87. cross-frame-access-history-get.html
  88. cross-frame-access-history-prototype-expected.txt
  89. cross-frame-access-history-prototype.html
  90. cross-frame-access-history-put-expected.txt
  91. cross-frame-access-history-put.html
  92. cross-frame-access-location-get-expected.txt
  93. cross-frame-access-location-get-override-expected.txt
  94. cross-frame-access-location-get-override.html
  95. cross-frame-access-location-get.html
  96. cross-frame-access-location-prototype-expected.txt
  97. cross-frame-access-location-prototype.html
  98. cross-frame-access-location-put-expected.txt
  99. cross-frame-access-location-put.html
  100. cross-frame-access-name-getter-expected.txt
  101. cross-frame-access-name-getter.html
  102. cross-frame-access-object-getPrototypeOf-expected.txt
  103. cross-frame-access-object-getPrototypeOf.html
  104. cross-frame-access-object-prototype-expected.txt
  105. cross-frame-access-object-prototype.html
  106. cross-frame-access-parent-explicit-domain-expected.txt
  107. cross-frame-access-parent-explicit-domain.html
  108. cross-frame-access-port-expected.txt
  109. cross-frame-access-port-explicit-domain-expected.txt
  110. cross-frame-access-port-explicit-domain.html
  111. cross-frame-access-port.html
  112. cross-frame-access-private-browsing-expected.txt
  113. cross-frame-access-private-browsing.html
  114. cross-frame-access-protocol-expected.txt
  115. cross-frame-access-protocol-explicit-domain-expected.txt
  116. cross-frame-access-protocol-explicit-domain.html
  117. cross-frame-access-protocol.html
  118. cross-frame-access-put-expected.txt
  119. cross-frame-access-put.html
  120. cross-frame-access-selection-expected.txt
  121. cross-frame-access-selection.html
  122. cross-origin-appcache-allowed-expected.txt
  123. cross-origin-appcache-allowed.html
  124. cross-origin-appcache-expected.txt
  125. cross-origin-appcache.html
  126. cross-origin-css-expected.txt
  127. cross-origin-css-in-xml-expected.txt
  128. cross-origin-css-in-xml.xml
  129. cross-origin-css-primitive-expected.txt
  130. cross-origin-css-primitive.html
  131. cross-origin-css.html
  132. cross-origin-getMatchedCSSRules-expected.txt
  133. cross-origin-getMatchedCSSRules.html
  134. cross-origin-getMatchedCSSRules2-expected.txt
  135. cross-origin-getMatchedCSSRules2.html
  136. cross-origin-indexeddb-allowed-expected.txt
  137. cross-origin-indexeddb-allowed.html
  138. cross-origin-indexeddb-expected.txt
  139. cross-origin-indexeddb.html
  140. cross-origin-local-storage-allowed-expected.txt
  141. cross-origin-local-storage-allowed.html
  142. cross-origin-local-storage-expected.txt
  143. cross-origin-local-storage-wk1-expected.txt
  144. cross-origin-local-storage-wk1.html
  145. cross-origin-local-storage.html
  146. cross-origin-plugin-allowed-expected.txt
  147. cross-origin-plugin-allowed.html
  148. cross-origin-plugin-expected.txt
  149. cross-origin-plugin-private-browsing-toggled-allowed-expected.txt
  150. cross-origin-plugin-private-browsing-toggled-allowed.html
  151. cross-origin-plugin-private-browsing-toggled-expected.txt
  152. cross-origin-plugin-private-browsing-toggled.html
  153. cross-origin-plugin.html
  154. cross-origin-script-window-onerror-expected.txt
  155. cross-origin-script-window-onerror-redirected-expected.txt
  156. cross-origin-script-window-onerror-redirected.html
  157. cross-origin-script-window-onerror.html
  158. cross-origin-session-storage-allowed-expected.txt
  159. cross-origin-session-storage-allowed.html
  160. cross-origin-session-storage-third-party-blocked-expected.txt
  161. cross-origin-session-storage-third-party-blocked.html
  162. cross-origin-shared-worker-allowed-expected.txt
  163. cross-origin-shared-worker-allowed.html
  164. cross-origin-shared-worker-expected.txt
  165. cross-origin-shared-worker.html
  166. cross-origin-websql-allowed-expected.txt
  167. cross-origin-websql-allowed.html
  168. cross-origin-websql-expected.txt
  169. cross-origin-websql.html
  170. cross-origin-worker-indexeddb-allowed-expected.txt
  171. cross-origin-worker-indexeddb-allowed.html
  172. cross-origin-worker-indexeddb-expected.txt
  173. cross-origin-worker-indexeddb.html
  174. cross-origin-worker-websql-allowed-expected.txt
  175. cross-origin-worker-websql-allowed.html
  176. cross-origin-worker-websql-expected.txt
  177. cross-origin-worker-websql.html
  178. cross-origin-xsl-BLOCKED-expected.txt
  179. cross-origin-xsl-BLOCKED.html
  180. cross-origin-xsl-redirect-BLOCKED-expected.txt
  181. cross-origin-xsl-redirect-BLOCKED.html
  182. data-url-inline.css-expected.txt
  183. data-url-inline.css.html
  184. dataTransfer-set-data-file-url-expected.txt
  185. dataTransfer-set-data-file-url.html
  186. detached-sandboxed-frame-access-expected.txt
  187. detached-sandboxed-frame-access.html
  188. document-all-expected.txt
  189. document-all.html
  190. drag-drop-different-origin-expected.txt
  191. drag-drop-different-origin.html
  192. drag-drop-same-unique-origin-expected.txt
  193. drag-drop-same-unique-origin.html
  194. drag-over-remote-content-iframe-expected.txt
  195. drag-over-remote-content-iframe.html
  196. escape-form-data-field-names-expected.txt
  197. escape-form-data-field-names.html
  198. feed-urls-from-remote-expected.txt
  199. feed-urls-from-remote.html
  200. frame-loading-via-document-write-expected.txt
  201. frame-loading-via-document-write.html
  202. host-compare-case-insensitive-expected.txt
  203. host-compare-case-insensitive.html
  204. img-crossorigin-loads-same-origin-expected.txt
  205. img-crossorigin-loads-same-origin.html
  206. img-with-failed-cors-check-fails-to-load-expected.txt
  207. img-with-failed-cors-check-fails-to-load.html
  208. inactive-document-with-empty-security-origin-expected.txt
  209. inactive-document-with-empty-security-origin.html
  210. local-CSS-from-remote-expected.txt
  211. local-CSS-from-remote.html
  212. local-iFrame-from-remote-expected.txt
  213. local-iFrame-from-remote.html
  214. local-image-from-remote-expected.txt
  215. local-image-from-remote-whitelisted-expected.txt
  216. local-image-from-remote-whitelisted.html
  217. local-image-from-remote.html
  218. local-JavaScript-from-remote-expected.txt
  219. local-JavaScript-from-remote.html
  220. local-user-CSS-from-remote-expected.txt
  221. local-user-CSS-from-remote.html
  222. local-video-poster-from-remote-expected.txt
  223. local-video-poster-from-remote.html
  224. local-video-source-from-remote-expected.txt
  225. local-video-source-from-remote.html
  226. local-video-src-from-remote-expected.txt
  227. local-video-src-from-remote.html
  228. location-prototype-expected.txt
  229. location-prototype.html
  230. no-indexeddb-from-sandbox-expected.txt
  231. no-indexeddb-from-sandbox.html
  232. no-popup-from-sandbox-expected.txt
  233. no-popup-from-sandbox-top-expected.txt
  234. no-popup-from-sandbox-top.html
  235. no-popup-from-sandbox.html
  236. no-referrer-expected.txt
  237. no-referrer.html
  238. object-literals-expected.txt
  239. object-literals.html
  240. popup-allowed-by-sandbox-is-sandboxed-control-expected.txt
  241. popup-allowed-by-sandbox-is-sandboxed-control.html
  242. popup-allowed-by-sandbox-is-sandboxed-expected.txt
  243. popup-allowed-by-sandbox-is-sandboxed.html
  244. popup-allowed-by-sandbox-when-allowed-expected.txt
  245. popup-allowed-by-sandbox-when-allowed.html
  246. popup-blocked-from-fake-event-expected.txt
  247. popup-blocked-from-fake-event.html
  248. popup-blocked-from-window-open-expected.txt
  249. popup-blocked-from-window-open.html
  250. protocol-compare-case-insensitive-expected.txt
  251. protocol-compare-case-insensitive.html
  252. redirect-BLOCKED-to-localURL-expected.txt
  253. redirect-BLOCKED-to-localURL.html
  254. referrer-policy-always-expected.txt
  255. referrer-policy-always.html
  256. referrer-policy-default-expected.txt
  257. referrer-policy-default.html
  258. referrer-policy-https-always-expected.txt
  259. referrer-policy-https-always.html
  260. referrer-policy-https-default-expected.txt
  261. referrer-policy-https-default.html
  262. referrer-policy-https-never-expected.txt
  263. referrer-policy-https-never.html
  264. referrer-policy-https-origin-expected.txt
  265. referrer-policy-https-origin.html
  266. referrer-policy-never-expected.txt
  267. referrer-policy-never.html
  268. referrer-policy-origin-expected.txt
  269. referrer-policy-origin.html
  270. referrer-policy-redirect-expected.txt
  271. referrer-policy-redirect-link-expected.txt
  272. referrer-policy-redirect-link.html
  273. referrer-policy-redirect.html
  274. referrer-policy-rel-noreferrer-expected.txt
  275. referrer-policy-rel-noreferrer.html
  276. referrer-policy-window-open-expected.txt
  277. referrer-policy-window-open.html
  278. same-origin-appcache-blocked-expected.txt
  279. same-origin-appcache-blocked.html
  280. same-origin-document-domain-storage-allowed-expected.txt
  281. same-origin-document-domain-storage-allowed.html
  282. same-origin-shared-worker-blocked-expected.txt
  283. same-origin-shared-worker-blocked.html
  284. same-origin-storage-blocked-expected.txt
  285. same-origin-storage-blocked.html
  286. same-origin-websql-blocked-expected.txt
  287. same-origin-websql-blocked.html
  288. sandbox-inherit-to-initial-document-2-expected.txt
  289. sandbox-inherit-to-initial-document-2.html
  290. sandbox-inherit-to-initial-document-expected.txt
  291. sandbox-inherit-to-initial-document.html
  292. sandboxed-iframe-blocks-access-from-parent-expected.txt
  293. sandboxed-iframe-blocks-access-from-parent.html
  294. sandboxed-iframe-document-cookie-expected.txt
  295. sandboxed-iframe-document-cookie.html
  296. sandboxed-iframe-form-top-expected.txt
  297. sandboxed-iframe-form-top.html
  298. sandboxed-iframe-invalid-expected.txt
  299. sandboxed-iframe-invalid.html
  300. sandboxed-iframe-modify-self-expected.txt
  301. sandboxed-iframe-modify-self.html
  302. sandboxed-iframe-origin-add-expected.txt
  303. sandboxed-iframe-origin-add.html
  304. sandboxed-iframe-origin-remove-expected.txt
  305. sandboxed-iframe-origin-remove.html
  306. script-crossorigin-loads-correctly-expected.txt
  307. script-crossorigin-loads-correctly.html
  308. script-crossorigin-loads-same-origin-expected.txt
  309. script-crossorigin-loads-same-origin.html
  310. script-crossorigin-onerror-information-expected.txt
  311. script-crossorigin-onerror-information.html
  312. script-no-crossorigin-onerror-should-be-sanitized-expected.txt
  313. script-no-crossorigin-onerror-should-be-sanitized.html
  314. script-with-failed-cors-check-fails-to-load-expected.txt
  315. script-with-failed-cors-check-fails-to-load.html
  316. setDomainRelaxationForbiddenForURLScheme-expected.txt
  317. setDomainRelaxationForbiddenForURLScheme.html
  318. shape-image-cors-expected.html
  319. shape-image-cors.html
  320. srcdoc-can-access-parent-expected.txt
  321. srcdoc-can-access-parent.html
  322. srcdoc-in-sandbox-cannot-access-parent-expected.txt
  323. srcdoc-in-sandbox-cannot-access-parent.html
  324. srcdoc-inherits-referrer-expected.txt
  325. srcdoc-inherits-referrer-for-forms-expected.txt
  326. srcdoc-inherits-referrer-for-forms.html
  327. srcdoc-inherits-referrer.html
  328. storage-blocking-loosened-local-storage-expected.txt
  329. storage-blocking-loosened-local-storage.html
  330. storage-blocking-loosened-plugin-expected.txt
  331. storage-blocking-loosened-plugin.html
  332. storage-blocking-loosened-private-browsing-plugin-expected.txt
  333. storage-blocking-loosened-private-browsing-plugin.html
  334. storage-blocking-loosened-shared-worker-expected.txt
  335. storage-blocking-loosened-shared-worker.html
  336. storage-blocking-loosened-websql-expected.txt
  337. storage-blocking-loosened-websql.html
  338. storage-blocking-strengthened-local-storage-expected.txt
  339. storage-blocking-strengthened-local-storage.html
  340. storage-blocking-strengthened-plugin-expected.txt
  341. storage-blocking-strengthened-plugin.html
  342. storage-blocking-strengthened-private-browsing-plugin-expected.txt
  343. storage-blocking-strengthened-private-browsing-plugin.html
  344. storage-blocking-strengthened-shared-worker-expected.txt
  345. storage-blocking-strengthened-shared-worker.html
  346. storage-blocking-strengthened-websql-expected.txt
  347. storage-blocking-strengthened-websql.html
  348. stylesheet-href-redirect-expected.txt
  349. stylesheet-href-redirect.html
  350. svg-image-leak-expected.txt
  351. svg-image-leak.html
  352. text-track-crossorigin-expected.txt
  353. text-track-crossorigin.html
  354. video-cross-origin-readback-expected.txt
  355. video-cross-origin-readback.html
  356. video-poster-cross-origin-crash-expected.txt
  357. video-poster-cross-origin-crash.html
  358. video-poster-cross-origin-crash2-expected.txt
  359. video-poster-cross-origin-crash2.html
  360. view-source-javascript-url-in-document-expected.txt
  361. view-source-javascript-url-in-document.html
  362. view-source-no-javascript-url-expected.txt
  363. view-source-no-javascript-url.html
  364. view-source-no-refresh-expected.txt
  365. view-source-no-refresh.html
  366. webgl-remote-read-remote-image-allowed-expected.txt
  367. webgl-remote-read-remote-image-allowed-with-credentials-expected.txt
  368. webgl-remote-read-remote-image-allowed-with-credentials.html
  369. webgl-remote-read-remote-image-allowed.html
  370. webgl-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  371. webgl-remote-read-remote-image-blocked-no-crossorigin.html
  372. window-events-clear-domain-expected.txt
  373. window-events-clear-domain.html
  374. window-events-clear-port-expected.txt
  375. window-events-clear-port.html
  376. window-events-pass-expected.txt
  377. window-events-pass.html
  378. window-named-proto-expected.txt
  379. window-named-proto.html
  380. window-named-valueOf-expected.txt
  381. window-named-valueOf.html
  382. window-onerror-exception-in-iframe-expected.txt
  383. window-onerror-exception-in-iframe.html
  384. window-properties-clear-domain-expected.txt
  385. window-properties-clear-domain.html
  386. window-properties-clear-port-expected.txt
  387. window-properties-clear-port.html
  388. window-properties-pass-expected.txt
  389. window-properties-pass.html
  390. xhr-cors-redirect-expected.txt
  391. xss-DENIED-assign-location-hash-expected.txt
  392. xss-DENIED-assign-location-hash.html
  393. xss-DENIED-assign-location-host-expected.txt
  394. xss-DENIED-assign-location-host.html
  395. xss-DENIED-assign-location-hostname-expected.txt
  396. xss-DENIED-assign-location-hostname.html
  397. xss-DENIED-assign-location-href-javascript-expected.txt
  398. xss-DENIED-assign-location-href-javascript.html
  399. xss-DENIED-assign-location-nonstandardProperty-expected.txt
  400. xss-DENIED-assign-location-nonstandardProperty.html
  401. xss-DENIED-assign-location-pathname-expected.txt
  402. xss-DENIED-assign-location-pathname.html
  403. xss-DENIED-assign-location-protocol-expected.txt
  404. xss-DENIED-assign-location-protocol.html
  405. xss-DENIED-assign-location-reload-expected.txt
  406. xss-DENIED-assign-location-reload.html
  407. xss-DENIED-assign-location-search-expected.txt
  408. xss-DENIED-assign-location-search.html
  409. xss-DENIED-contentWindow-eval-expected.txt
  410. xss-DENIED-contentWindow-eval.html
  411. xss-DENIED-defineProperty-expected.txt
  412. xss-DENIED-defineProperty.html
  413. xss-DENIED-frame-name-expected.txt
  414. xss-DENIED-frame-name.html
  415. xss-DENIED-getSelection-from-inactive-domwindow-expected.txt
  416. xss-DENIED-getSelection-from-inactive-domwindow.html
  417. xss-DENIED-getSVGDocument-iframe-expected.txt
  418. xss-DENIED-getSVGDocument-iframe.html
  419. xss-DENIED-getSVGDocument-object-expected.txt
  420. xss-DENIED-getSVGDocument-object.html
  421. xss-DENIED-htmlelelment-with-iframe-proto-expected.txt
  422. xss-DENIED-htmlelelment-with-iframe-proto.html
  423. xss-DENIED-iframe-src-alias-expected.txt
  424. xss-DENIED-iframe-src-alias.html
  425. xss-DENIED-invalid-domain-change-expected.txt
  426. xss-DENIED-invalid-domain-change.html
  427. xss-DENIED-javascript-with-spaces-expected.txt
  428. xss-DENIED-javascript-with-spaces.html
  429. xss-DENIED-method-with-iframe-proto-expected.txt
  430. xss-DENIED-method-with-iframe-proto.html
  431. xss-DENIED-mime-type-execute-as-html-expected.txt
  432. xss-DENIED-mime-type-execute-as-html.html
  433. xss-DENIED-non-shadowable-propterty-with-iframe-proto-expected.txt
  434. xss-DENIED-non-shadowable-propterty-with-iframe-proto.html
  435. xss-DENIED-object-element-expected.txt
  436. xss-DENIED-object-element.html
  437. xss-DENIED-regular-propterty-with-iframe-proto-expected.txt
  438. xss-DENIED-regular-propterty-with-iframe-proto.html
  439. xss-DENIED-sandboxed-iframe-expected.txt
  440. xss-DENIED-sandboxed-iframe.html
  441. xss-DENIED-synchronous-form-expected.txt
  442. xss-DENIED-synchronous-form.html
  443. xss-DENIED-synchronous-frame-load-in-javascript-url-expected.txt
  444. xss-DENIED-synchronous-frame-load-in-javascript-url.html
  445. xss-DENIED-window-index-assign-expected.txt
  446. xss-DENIED-window-index-assign.html
  447. xss-DENIED-window-name-alert-expected.txt
  448. xss-DENIED-window-name-alert.html
  449. xss-DENIED-window-name-navigator-expected.txt
  450. xss-DENIED-window-name-navigator.html
  451. xss-DENIED-window-open-javascript-url-expected.txt
  452. xss-DENIED-window-open-javascript-url-with-spaces-expected.txt
  453. xss-DENIED-window-open-javascript-url-with-spaces.html
  454. xss-DENIED-window-open-javascript-url.html
  455. xss-DENIED-window-open-parent-expected.txt
  456. xss-DENIED-window-open-parent.html
  457. xss-DENIED-xml-external-entity-expected.txt
  458. xss-DENIED-xml-external-entity.xhtml
  459. xss-DENIED-xsl-document-expected.txt
  460. xss-DENIED-xsl-document-redirect-expected.txt
  461. xss-DENIED-xsl-document-redirect.xml
  462. xss-DENIED-xsl-document-securityOrigin-expected.txt
  463. xss-DENIED-xsl-document-securityOrigin.xml
  464. xss-DENIED-xsl-document.xml
  465. xss-DENIED-xsl-external-entity-expected.txt
  466. xss-DENIED-xsl-external-entity-redirect-expected.txt
  467. xss-DENIED-xsl-external-entity-redirect.xml
  468. xss-DENIED-xsl-external-entity.xml
  469. xss-eval-expected.txt
  470. xss-eval.html