Google Git
Sign in
webkit / WebKit / a847461eedf68a16e2d2491447608ea3bf9d7890 / . / LayoutTests / http / tests / security / xssAuditor
tree: ac95053be85b27b9bea74844446b19334e534b1f [path history] [tgz]
  1. resources/
  2. anchor-url-dom-write-location-expected.txt
  3. anchor-url-dom-write-location-inline-event-expected.txt
  4. anchor-url-dom-write-location-inline-event-null-char-expected.txt
  5. anchor-url-dom-write-location-inline-event-null-char.html
  6. anchor-url-dom-write-location-inline-event.html
  7. anchor-url-dom-write-location-javascript-URL-expected.txt
  8. anchor-url-dom-write-location-javascript-URL.html
  9. anchor-url-dom-write-location.html
  10. anchor-url-dom-write-location2-expected.txt
  11. anchor-url-dom-write-location2.html
  12. base-href-control-char-expected.txt
  13. base-href-control-char.html
  14. base-href-direct-expected.txt
  15. base-href-direct.html
  16. base-href-expected.txt
  17. base-href-null-char-expected.txt
  18. base-href-null-char.html
  19. base-href-safe-expected.txt
  20. base-href-safe.html
  21. base-href-safe2-expected.txt
  22. base-href-safe2.html
  23. base-href-safe3-expected.txt
  24. base-href-safe3.html
  25. base-href-scheme-relative-expected.txt
  26. base-href-scheme-relative.html
  27. base-href.html
  28. block-does-not-leak-location-expected.txt
  29. block-does-not-leak-location.html
  30. block-does-not-leak-referrer-expected.txt
  31. block-does-not-leak-referrer.html
  32. cached-frame-expected.txt
  33. cached-frame.html
  34. cookie-injection-expected.txt
  35. cookie-injection.html
  36. crash-while-loading-tag-with-pause-expected.txt
  37. crash-while-loading-tag-with-pause.html
  38. data-urls-work-expected.txt
  39. data-urls-work.html
  40. dom-write-innerHTML-expected.txt
  41. dom-write-innerHTML.html
  42. dom-write-location-expected.txt
  43. dom-write-location-inline-event-expected.txt
  44. dom-write-location-inline-event.html
  45. dom-write-location-javascript-URL-expected.txt
  46. dom-write-location-javascript-URL.html
  47. dom-write-location.html
  48. dom-write-URL-expected.txt
  49. dom-write-URL.html
  50. embed-tag-code-attribute-2-expected.txt
  51. embed-tag-code-attribute-2.html
  52. embed-tag-code-attribute-expected.txt
  53. embed-tag-code-attribute.html
  54. embed-tag-control-char-expected.txt
  55. embed-tag-control-char.html
  56. embed-tag-expected.txt
  57. embed-tag-javascript-url-expected.txt
  58. embed-tag-javascript-url.html
  59. embed-tag-null-char-expected.txt
  60. embed-tag-null-char.html
  61. embed-tag.html
  62. faux-script1-expected.txt
  63. faux-script1.html
  64. faux-script2-expected.txt
  65. faux-script2.html
  66. faux-script3-expected.txt
  67. faux-script3.html
  68. form-action-expected.txt
  69. form-action.html
  70. formaction-on-button-expected.txt
  71. formaction-on-button.html
  72. formaction-on-input-expected.txt
  73. formaction-on-input.html
  74. full-block-base-href-expected.txt
  75. full-block-base-href.html
  76. full-block-get-from-iframe-expected.txt
  77. full-block-get-from-iframe.html
  78. full-block-iframe-javascript-url-expected.txt
  79. full-block-iframe-javascript-url.html
  80. full-block-iframe-no-inherit-expected.txt
  81. full-block-iframe-no-inherit.php
  82. full-block-javascript-link-expected.txt
  83. full-block-javascript-link.html
  84. full-block-link-onclick-expected.txt
  85. full-block-link-onclick.html
  86. full-block-object-tag-expected.txt
  87. full-block-object-tag.html
  88. full-block-post-from-iframe-expected.txt
  89. full-block-post-from-iframe.html
  90. full-block-script-tag-cross-domain-expected.txt
  91. full-block-script-tag-cross-domain.html
  92. full-block-script-tag-expected.txt
  93. full-block-script-tag-with-source-expected.txt
  94. full-block-script-tag-with-source.html
  95. full-block-script-tag.html
  96. get-from-iframe-expected.txt
  97. get-from-iframe.html
  98. iframe-injection-allowed-2-expected.txt
  99. iframe-injection-allowed-2.html
  100. iframe-injection-allowed-3-expected.txt
  101. iframe-injection-allowed-3.html
  102. iframe-injection-allowed-expected.txt
  103. iframe-injection-allowed.html
  104. iframe-injection-expected.txt
  105. iframe-injection.html
  106. iframe-javascript-url-expected.txt
  107. iframe-javascript-url-more-encoding-expected.txt
  108. iframe-javascript-url-more-encoding.html
  109. iframe-javascript-url-twice-url-encode-expected.txt
  110. iframe-javascript-url-twice-url-encode.html
  111. iframe-javascript-url-twice-url-encode2-expected.txt
  112. iframe-javascript-url-twice-url-encode2.html
  113. iframe-javascript-url-twice-url-encode3-expected.txt
  114. iframe-javascript-url-twice-url-encode3.html
  115. iframe-javascript-url-url-encoded-expected.txt
  116. iframe-javascript-url-url-encoded.html
  117. iframe-javascript-url.html
  118. iframe-onload-GBK-char-expected.txt
  119. iframe-onload-GBK-char.html
  120. iframe-onload-in-svg-tag-expected.txt
  121. iframe-onload-in-svg-tag.html
  122. iframe-srcdoc-expected.txt
  123. iframe-srcdoc-property-blocked-expected.txt
  124. iframe-srcdoc-property-blocked.html
  125. iframe-srcdoc.html
  126. img-onerror-accented-char-expected.txt
  127. img-onerror-accented-char.html
  128. img-onerror-GBK-char-expected.txt
  129. img-onerror-GBK-char.html
  130. img-onerror-non-ASCII-char-default-encoding-expected.txt
  131. img-onerror-non-ASCII-char-default-encoding.html
  132. img-onerror-non-ASCII-char-expected.txt
  133. img-onerror-non-ASCII-char.html
  134. img-onerror-non-ASCII-char2-default-encoding-expected.txt
  135. img-onerror-non-ASCII-char2-default-encoding.html
  136. img-onerror-non-ASCII-char2-expected.txt
  137. img-onerror-non-ASCII-char2.html
  138. img-onerror-tricky-expected.txt
  139. img-onerror-tricky.html
  140. img-tag-with-comma-expected.txt
  141. img-tag-with-comma.html
  142. inline-event-HTML-entities-expected.txt
  143. inline-event-HTML-entities.html
  144. javascript-link-ampersand-expected.txt
  145. javascript-link-ampersand.html
  146. javascript-link-control-char-expected.txt
  147. javascript-link-control-char.html
  148. javascript-link-control-char2-expected.txt
  149. javascript-link-control-char2.html
  150. javascript-link-expected.txt
  151. javascript-link-HTML-entities-control-char-expected.txt
  152. javascript-link-HTML-entities-control-char.html
  153. javascript-link-HTML-entities-expected.txt
  154. javascript-link-HTML-entities-named-expected.txt
  155. javascript-link-HTML-entities-named.html
  156. javascript-link-HTML-entities-null-char-expected.txt
  157. javascript-link-HTML-entities-null-char.html
  158. javascript-link-HTML-entities.html
  159. javascript-link-null-char-expected.txt
  160. javascript-link-null-char.html
  161. javascript-link-one-plus-one-expected.txt
  162. javascript-link-one-plus-one.html
  163. javascript-link-safe-expected.txt
  164. javascript-link-safe.html
  165. javascript-link-url-encoded-expected.txt
  166. javascript-link-url-encoded.html
  167. javascript-link.html
  168. link-onclick-ampersand-expected.txt
  169. link-onclick-ampersand.html
  170. link-onclick-control-char-expected.txt
  171. link-onclick-control-char.html
  172. link-onclick-entities-expected.txt
  173. link-onclick-entities.html
  174. link-onclick-expected.txt
  175. link-onclick-null-char-expected.txt
  176. link-onclick-null-char.html
  177. link-onclick.html
  178. link-opens-new-window-expected.txt
  179. link-opens-new-window.html
  180. malformed-HTML-expected.txt
  181. malformed-HTML.html
  182. malformed-xss-protection-header-1-expected.txt
  183. malformed-xss-protection-header-1.html
  184. malformed-xss-protection-header-2-expected.txt
  185. malformed-xss-protection-header-2.html
  186. malformed-xss-protection-header-3-expected.txt
  187. malformed-xss-protection-header-3.html
  188. malformed-xss-protection-header-4-expected.txt
  189. malformed-xss-protection-header-4.html
  190. malformed-xss-protection-header-5-expected.txt
  191. malformed-xss-protection-header-5.html
  192. malformed-xss-protection-header-6-expected.txt
  193. malformed-xss-protection-header-6.html
  194. malformed-xss-protection-header-7-expected.txt
  195. malformed-xss-protection-header-7.html
  196. malformed-xss-protection-header-8-expected.txt
  197. malformed-xss-protection-header-8.html
  198. malformed-xss-protection-header-9-expected.txt
  199. malformed-xss-protection-header-9.html
  200. meta-tag-http-refresh-javascript-url-expected.txt
  201. meta-tag-http-refresh-javascript-url.html
  202. meta-tag-http-refresh-x-frame-options-expected.txt
  203. meta-tag-http-refresh-x-frame-options.html
  204. no-protection-script-tag-expected.txt
  205. no-protection-script-tag.html
  206. non-block-javascript-url-frame-expected.txt
  207. non-block-javascript-url-frame.html
  208. object-embed-tag-control-char-expected.txt
  209. object-embed-tag-control-char.html
  210. object-embed-tag-expected.txt
  211. object-embed-tag-null-char-expected.txt
  212. object-embed-tag-null-char.html
  213. object-embed-tag.html
  214. object-src-inject-expected.txt
  215. object-src-inject.html
  216. object-tag-expected.txt
  217. object-tag-javascript-url-expected.txt
  218. object-tag-javascript-url.html
  219. object-tag.html
  220. open-attribute-body-expected.txt
  221. open-attribute-body.html
  222. open-event-handler-iframe-expected.txt
  223. open-event-handler-iframe.html
  224. open-iframe-src-01-expected.txt
  225. open-iframe-src-01.html
  226. open-iframe-src-02-expected.txt
  227. open-iframe-src-02.html
  228. open-iframe-src-03-expected.txt
  229. open-iframe-src-03.html
  230. open-script-src-01-expected.txt
  231. open-script-src-01.html
  232. open-script-src-02-expected.txt
  233. open-script-src-02.html
  234. open-script-src-03-expected.txt
  235. open-script-src-03.html
  236. open-script-src-04-expected.txt
  237. open-script-src-04.html
  238. post-from-iframe-expected.txt
  239. post-from-iframe.html
  240. property-escape-comment-01-expected.txt
  241. property-escape-comment-01.html
  242. property-escape-comment-02-expected.txt
  243. property-escape-comment-02.html
  244. property-escape-comment-03-expected.txt
  245. property-escape-comment-03.html
  246. property-escape-entity-01-expected.txt
  247. property-escape-entity-01.html
  248. property-escape-entity-02-expected.txt
  249. property-escape-entity-02.html
  250. property-escape-entity-03-expected.txt
  251. property-escape-entity-03.html
  252. property-escape-expected.txt
  253. property-escape-long-expected.txt
  254. property-escape-long.html
  255. property-escape-noquotes-expected.txt
  256. property-escape-noquotes-tab-slash-chars-expected.txt
  257. property-escape-noquotes-tab-slash-chars.html
  258. property-escape-noquotes.html
  259. property-escape-quote-01-expected.txt
  260. property-escape-quote-01.html
  261. property-escape-quote-02-expected.txt
  262. property-escape-quote-02.html
  263. property-escape-quote-03-expected.txt
  264. property-escape-quote-03.html
  265. property-escape.html
  266. property-inject-expected.txt
  267. property-inject.html
  268. report-script-tag-expected.txt
  269. report-script-tag-full-block-expected.txt
  270. report-script-tag-full-block.html
  271. report-script-tag.html
  272. script-tag-addslashes-backslash-expected.txt
  273. script-tag-addslashes-backslash.html
  274. script-tag-addslashes-double-quote-expected.txt
  275. script-tag-addslashes-double-quote.html
  276. script-tag-addslashes-null-char-expected.txt
  277. script-tag-addslashes-null-char.html
  278. script-tag-addslashes-single-quote-expected.txt
  279. script-tag-addslashes-single-quote.html
  280. script-tag-Big5-char-expected.txt
  281. script-tag-Big5-char-twice-url-encode-16bit-unicode-expected.txt
  282. script-tag-Big5-char-twice-url-encode-16bit-unicode.html
  283. script-tag-Big5-char-twice-url-encode-expected.txt
  284. script-tag-Big5-char-twice-url-encode.html
  285. script-tag-Big5-char.html
  286. script-tag-Big5-char2-expected.txt
  287. script-tag-Big5-char2.html
  288. script-tag-control-char-expected.txt
  289. script-tag-control-char.html
  290. script-tag-convoluted-expected.txt
  291. script-tag-convoluted.html
  292. script-tag-entities-expected.txt
  293. script-tag-entities.html
  294. script-tag-expected.txt
  295. script-tag-inside-svg-tag-expected.txt
  296. script-tag-inside-svg-tag.html
  297. script-tag-inside-svg-tag2-expected.txt
  298. script-tag-inside-svg-tag2.html
  299. script-tag-inside-svg-tag3-expected.txt
  300. script-tag-inside-svg-tag3.html
  301. script-tag-null-char-expected.txt
  302. script-tag-null-char.html
  303. script-tag-open-redirect-expected.txt
  304. script-tag-open-redirect.html
  305. script-tag-post-control-char-expected.txt
  306. script-tag-post-control-char.html
  307. script-tag-post-expected.txt
  308. script-tag-post-null-char-expected.txt
  309. script-tag-post-null-char.html
  310. script-tag-post.html
  311. script-tag-redirect-expected.txt
  312. script-tag-redirect.html
  313. script-tag-safe-expected.txt
  314. script-tag-safe.html
  315. script-tag-safe2-expected.txt
  316. script-tag-safe2.html
  317. script-tag-safe3-expected.txt
  318. script-tag-safe3.html
  319. script-tag-safe4-expected.txt
  320. script-tag-safe4.html
  321. script-tag-src-redirect-safe-expected.txt
  322. script-tag-src-redirect-safe.html
  323. script-tag-with-16bit-unicode-expected.txt
  324. script-tag-with-16bit-unicode-surrogate-pair-expected.txt
  325. script-tag-with-16bit-unicode-surrogate-pair.html
  326. script-tag-with-16bit-unicode.html
  327. script-tag-with-16bit-unicode2-expected.txt
  328. script-tag-with-16bit-unicode2.html
  329. script-tag-with-16bit-unicode3-expected.txt
  330. script-tag-with-16bit-unicode3.html
  331. script-tag-with-16bit-unicode4-expected.txt
  332. script-tag-with-16bit-unicode4.html
  333. script-tag-with-16bit-unicode5-expected.txt
  334. script-tag-with-16bit-unicode5.html
  335. script-tag-with-actual-comma-expected.txt
  336. script-tag-with-actual-comma.html
  337. script-tag-with-callbacks-expected.txt
  338. script-tag-with-callbacks.html
  339. script-tag-with-comma-01-expected.txt
  340. script-tag-with-comma-01.html
  341. script-tag-with-comma-02-expected.txt
  342. script-tag-with-comma-02.html
  343. script-tag-with-fancy-unicode-expected.txt
  344. script-tag-with-fancy-unicode.html
  345. script-tag-with-invalid-closing-tag-expected.txt
  346. script-tag-with-invalid-closing-tag.html
  347. script-tag-with-invalid-url-encoding-expected.txt
  348. script-tag-with-invalid-url-encoding.html
  349. script-tag-with-source-control-char-expected.txt
  350. script-tag-with-source-control-char.html
  351. script-tag-with-source-data-url-expected.txt
  352. script-tag-with-source-data-url.html
  353. script-tag-with-source-data-url2-expected.txt
  354. script-tag-with-source-data-url2.html
  355. script-tag-with-source-data-url3-expected.txt
  356. script-tag-with-source-data-url3.html
  357. script-tag-with-source-double-quote-expected.txt
  358. script-tag-with-source-double-quote.html
  359. script-tag-with-source-entities-expected.txt
  360. script-tag-with-source-entities.html
  361. script-tag-with-source-expected.txt
  362. script-tag-with-source-no-quote-expected.txt
  363. script-tag-with-source-no-quote.html
  364. script-tag-with-source-null-char-expected.txt
  365. script-tag-with-source-null-char.html
  366. script-tag-with-source-relative-scheme-expected.txt
  367. script-tag-with-source-relative-scheme.html
  368. script-tag-with-source-same-host-expected.txt
  369. script-tag-with-source-same-host-with-query-expected.txt
  370. script-tag-with-source-same-host-with-query.html
  371. script-tag-with-source-same-host.html
  372. script-tag-with-source-unterminated-01-expected.txt
  373. script-tag-with-source-unterminated-01.html
  374. script-tag-with-source-unterminated-02-expected.txt
  375. script-tag-with-source-unterminated-02.html
  376. script-tag-with-source-unterminated-03-expected.txt
  377. script-tag-with-source-unterminated-03.html
  378. script-tag-with-source.html
  379. script-tag-with-three-times-url-encoded-16bit-unicode-expected.txt
  380. script-tag-with-three-times-url-encoded-16bit-unicode.html
  381. script-tag-with-trailing-comment-expected.txt
  382. script-tag-with-trailing-comment-U2028-expected.txt
  383. script-tag-with-trailing-comment-U2028.html
  384. script-tag-with-trailing-comment.html
  385. script-tag-with-trailing-comment2-expected.txt
  386. script-tag-with-trailing-comment2.html
  387. script-tag-with-trailing-comment3-expected.txt
  388. script-tag-with-trailing-comment3.html
  389. script-tag-with-trailing-comment4-expected.txt
  390. script-tag-with-trailing-comment4.html
  391. script-tag-with-trailing-comment5-expected.txt
  392. script-tag-with-trailing-comment5.html
  393. script-tag.html
  394. svg-animate-expected.txt
  395. svg-animate.html
  396. svg-script-tag-expected.txt
  397. svg-script-tag.html
  398. window-open-without-url-should-not-assert-expected.txt
  399. window-open-without-url-should-not-assert.html
  400. xss-filter-bypass-big5-expected.txt
  401. xss-filter-bypass-big5.html
  402. xss-filter-bypass-long-string-expected.txt
  403. xss-filter-bypass-long-string.html
  404. xss-filter-bypass-sjis-expected.txt
  405. xss-filter-bypass-sjis.html
  406. xss-protection-parsing-01-expected.txt
  407. xss-protection-parsing-01.html
  408. xss-protection-parsing-02-expected.txt
  409. xss-protection-parsing-02.html
  410. xss-protection-parsing-03-expected.txt
  411. xss-protection-parsing-03.html
  412. xss-protection-parsing-04-expected.txt
  413. xss-protection-parsing-04.html