Google Git
Sign in
webkit / WebKit / c40b553ec07240fe5ed753e57d2381bca594fba7 / . / LayoutTests / http / tests / security / xssAuditor
tree: dd399fd7a41391d11266defe7fc1c0fa0c8e1d9e [path history] [tgz]
  1. intercept/
  2. resources/
  3. anchor-url-dom-write-location-expected.txt
  4. anchor-url-dom-write-location-inline-event-expected.txt
  5. anchor-url-dom-write-location-inline-event-null-char-expected.txt
  6. anchor-url-dom-write-location-inline-event-null-char.html
  7. anchor-url-dom-write-location-inline-event.html
  8. anchor-url-dom-write-location-javascript-URL-expected.txt
  9. anchor-url-dom-write-location-javascript-URL.html
  10. anchor-url-dom-write-location.html
  11. anchor-url-dom-write-location2-expected.txt
  12. anchor-url-dom-write-location2.html
  13. base-href-control-char-expected.txt
  14. base-href-control-char.html
  15. base-href-direct-expected.txt
  16. base-href-direct.html
  17. base-href-expected.txt
  18. base-href-null-char-expected.txt
  19. base-href-null-char.html
  20. base-href-safe-expected.txt
  21. base-href-safe.html
  22. base-href-safe2-expected.txt
  23. base-href-safe2.html
  24. base-href-safe3-expected.txt
  25. base-href-safe3.html
  26. base-href-scheme-relative-expected.txt
  27. base-href-scheme-relative.html
  28. base-href.html
  29. block-does-not-leak-location-expected.txt
  30. block-does-not-leak-location.html
  31. block-does-not-leak-referrer-expected.txt
  32. block-does-not-leak-referrer.html
  33. block-does-not-leak-that-page-was-blocked-using-empty-data-url-expected.txt
  34. block-does-not-leak-that-page-was-blocked-using-empty-data-url.html
  35. cached-frame-expected.txt
  36. cached-frame.html
  37. cookie-injection-expected.txt
  38. cookie-injection.html
  39. crash-while-loading-tag-with-pause-expected.txt
  40. crash-while-loading-tag-with-pause.html
  41. data-urls-work-expected.txt
  42. data-urls-work.html
  43. dom-write-innerHTML-expected.txt
  44. dom-write-innerHTML.html
  45. dom-write-location-dom-write-open-img-onerror-expected.txt
  46. dom-write-location-dom-write-open-img-onerror.html
  47. dom-write-location-expected.txt
  48. dom-write-location-inline-event-expected.txt
  49. dom-write-location-inline-event.html
  50. dom-write-location-javascript-URL-expected.txt
  51. dom-write-location-javascript-URL.html
  52. dom-write-location-open-img-onerror-expected.txt
  53. dom-write-location-open-img-onerror.html
  54. dom-write-location.html
  55. dom-write-URL-expected.txt
  56. dom-write-URL.html
  57. embed-tag-code-attribute-2-expected.txt
  58. embed-tag-code-attribute-2.html
  59. embed-tag-code-attribute-expected.txt
  60. embed-tag-code-attribute.html
  61. embed-tag-control-char-expected.txt
  62. embed-tag-control-char.html
  63. embed-tag-expected.txt
  64. embed-tag-in-path-unterminated-expected.txt
  65. embed-tag-in-path-unterminated.html
  66. embed-tag-javascript-url-expected.txt
  67. embed-tag-javascript-url.html
  68. embed-tag-null-char-expected.txt
  69. embed-tag-null-char.html
  70. embed-tag.html
  71. faux-script1-expected.txt
  72. faux-script1.html
  73. faux-script2-expected.txt
  74. faux-script2.html
  75. faux-script3-expected.txt
  76. faux-script3.html
  77. form-action-expected.txt
  78. form-action.html
  79. formaction-on-button-expected.txt
  80. formaction-on-button.html
  81. formaction-on-input-expected.txt
  82. formaction-on-input.html
  83. frameset-injection-expected.txt
  84. frameset-injection.html
  85. full-block-base-href-expected.txt
  86. full-block-base-href.html
  87. full-block-get-from-iframe-expected.txt
  88. full-block-get-from-iframe.html
  89. full-block-iframe-javascript-url-expected.txt
  90. full-block-iframe-javascript-url.html
  91. full-block-iframe-no-inherit-expected.txt
  92. full-block-iframe-no-inherit.php
  93. full-block-javascript-link-expected.txt
  94. full-block-javascript-link.html
  95. full-block-link-onclick-expected.txt
  96. full-block-link-onclick.html
  97. full-block-object-tag-expected.txt
  98. full-block-object-tag.html
  99. full-block-post-from-iframe-expected.txt
  100. full-block-post-from-iframe.html
  101. full-block-script-tag-cross-domain-expected.txt
  102. full-block-script-tag-cross-domain.html
  103. full-block-script-tag-expected.txt
  104. full-block-script-tag-with-source-expected.txt
  105. full-block-script-tag-with-source.html
  106. full-block-script-tag.html
  107. get-from-iframe-expected.txt
  108. get-from-iframe.html
  109. iframe-injection-allowed-2-expected.txt
  110. iframe-injection-allowed-2.html
  111. iframe-injection-allowed-3-expected.txt
  112. iframe-injection-allowed-3.html
  113. iframe-injection-allowed-expected.txt
  114. iframe-injection-allowed.html
  115. iframe-injection-expected.txt
  116. iframe-injection.html
  117. iframe-javascript-url-expected.txt
  118. iframe-javascript-url-more-encoding-expected.txt
  119. iframe-javascript-url-more-encoding.html
  120. iframe-javascript-url-twice-url-encode-expected.txt
  121. iframe-javascript-url-twice-url-encode.html
  122. iframe-javascript-url-twice-url-encode2-expected.txt
  123. iframe-javascript-url-twice-url-encode2.html
  124. iframe-javascript-url-twice-url-encode3-expected.txt
  125. iframe-javascript-url-twice-url-encode3.html
  126. iframe-javascript-url-url-encoded-expected.txt
  127. iframe-javascript-url-url-encoded.html
  128. iframe-javascript-url.html
  129. iframe-onload-GBK-char-expected.txt
  130. iframe-onload-GBK-char.html
  131. iframe-onload-in-svg-tag-expected.txt
  132. iframe-onload-in-svg-tag.html
  133. iframe-srcdoc-expected.txt
  134. iframe-srcdoc-property-blocked-expected.txt
  135. iframe-srcdoc-property-blocked.html
  136. iframe-srcdoc.html
  137. img-onerror-accented-char-expected.txt
  138. img-onerror-accented-char.html
  139. img-onerror-GBK-char-expected.txt
  140. img-onerror-GBK-char.html
  141. img-onerror-non-ASCII-char-default-encoding-expected.txt
  142. img-onerror-non-ASCII-char-default-encoding.html
  143. img-onerror-non-ASCII-char-expected.txt
  144. img-onerror-non-ASCII-char.html
  145. img-onerror-non-ASCII-char2-default-encoding-expected.txt
  146. img-onerror-non-ASCII-char2-default-encoding.html
  147. img-onerror-non-ASCII-char2-expected.txt
  148. img-onerror-non-ASCII-char2.html
  149. img-onerror-tricky-expected.txt
  150. img-onerror-tricky.html
  151. img-tag-with-comma-expected.txt
  152. img-tag-with-comma.html
  153. inline-event-HTML-entities-expected.txt
  154. inline-event-HTML-entities.html
  155. javascript-link-ampersand-expected.txt
  156. javascript-link-ampersand.html
  157. javascript-link-control-char-expected.txt
  158. javascript-link-control-char.html
  159. javascript-link-control-char2-expected.txt
  160. javascript-link-control-char2.html
  161. javascript-link-expected.txt
  162. javascript-link-HTML-entities-control-char-expected.txt
  163. javascript-link-HTML-entities-control-char.html
  164. javascript-link-HTML-entities-expected.txt
  165. javascript-link-HTML-entities-named-expected.txt
  166. javascript-link-HTML-entities-named.html
  167. javascript-link-HTML-entities-null-char-expected.txt
  168. javascript-link-HTML-entities-null-char.html
  169. javascript-link-HTML-entities.html
  170. javascript-link-null-char-expected.txt
  171. javascript-link-null-char.html
  172. javascript-link-one-plus-one-expected.txt
  173. javascript-link-one-plus-one.html
  174. javascript-link-safe-expected.txt
  175. javascript-link-safe.html
  176. javascript-link-url-encoded-expected.txt
  177. javascript-link-url-encoded.html
  178. javascript-link.html
  179. link-onclick-ampersand-expected.txt
  180. link-onclick-ampersand.html
  181. link-onclick-control-char-expected.txt
  182. link-onclick-control-char.html
  183. link-onclick-entities-expected.txt
  184. link-onclick-entities.html
  185. link-onclick-expected.txt
  186. link-onclick-null-char-expected.txt
  187. link-onclick-null-char.html
  188. link-onclick.html
  189. link-opens-new-window-expected.txt
  190. link-opens-new-window.html
  191. malformed-HTML-expected.txt
  192. malformed-HTML.html
  193. malformed-xss-protection-header-1-expected.txt
  194. malformed-xss-protection-header-1.html
  195. malformed-xss-protection-header-2-expected.txt
  196. malformed-xss-protection-header-2.html
  197. malformed-xss-protection-header-3-expected.txt
  198. malformed-xss-protection-header-3.html
  199. malformed-xss-protection-header-4-expected.txt
  200. malformed-xss-protection-header-4.html
  201. malformed-xss-protection-header-5-expected.txt
  202. malformed-xss-protection-header-5.html
  203. malformed-xss-protection-header-6-expected.txt
  204. malformed-xss-protection-header-6.html
  205. malformed-xss-protection-header-7-expected.txt
  206. malformed-xss-protection-header-7.html
  207. malformed-xss-protection-header-8-expected.txt
  208. malformed-xss-protection-header-8.html
  209. malformed-xss-protection-header-9-expected.txt
  210. malformed-xss-protection-header-9.html
  211. meta-tag-http-refresh-javascript-url-expected.txt
  212. meta-tag-http-refresh-javascript-url.html
  213. meta-tag-http-refresh-x-frame-options-ignored-expected.txt
  214. meta-tag-http-refresh-x-frame-options-ignored.html
  215. nested-dom-write-location-open-img-onerror-expected.txt
  216. nested-dom-write-location-open-img-onerror.html
  217. no-protection-script-tag-expected.txt
  218. no-protection-script-tag.html
  219. non-block-javascript-url-frame-expected.txt
  220. non-block-javascript-url-frame.html
  221. object-embed-tag-control-char-expected.txt
  222. object-embed-tag-control-char.html
  223. object-embed-tag-expected.txt
  224. object-embed-tag-null-char-expected.txt
  225. object-embed-tag-null-char.html
  226. object-embed-tag.html
  227. object-src-inject-expected.txt
  228. object-src-inject.html
  229. object-tag-expected.txt
  230. object-tag-javascript-url-expected.txt
  231. object-tag-javascript-url.html
  232. object-tag.html
  233. open-attribute-body-expected.txt
  234. open-attribute-body.html
  235. open-event-handler-iframe-expected.txt
  236. open-event-handler-iframe.html
  237. open-iframe-src-01-expected.txt
  238. open-iframe-src-01.html
  239. open-iframe-src-02-expected.txt
  240. open-iframe-src-02.html
  241. open-iframe-src-03-expected.txt
  242. open-iframe-src-03.html
  243. open-script-src-01-expected.txt
  244. open-script-src-01.html
  245. open-script-src-02-expected.txt
  246. open-script-src-02.html
  247. open-script-src-03-expected.txt
  248. open-script-src-03.html
  249. open-script-src-04-expected.txt
  250. open-script-src-04.html
  251. post-from-iframe-expected.txt
  252. post-from-iframe.html
  253. property-escape-comment-01-expected.txt
  254. property-escape-comment-01.html
  255. property-escape-comment-02-expected.txt
  256. property-escape-comment-02.html
  257. property-escape-comment-03-expected.txt
  258. property-escape-comment-03.html
  259. property-escape-entity-01-expected.txt
  260. property-escape-entity-01.html
  261. property-escape-entity-02-expected.txt
  262. property-escape-entity-02.html
  263. property-escape-entity-03-expected.txt
  264. property-escape-entity-03.html
  265. property-escape-expected.txt
  266. property-escape-long-expected.txt
  267. property-escape-long.html
  268. property-escape-noquotes-expected.txt
  269. property-escape-noquotes-tab-slash-chars-expected.txt
  270. property-escape-noquotes-tab-slash-chars.html
  271. property-escape-noquotes.html
  272. property-escape-quote-01-expected.txt
  273. property-escape-quote-01.html
  274. property-escape-quote-02-expected.txt
  275. property-escape-quote-02.html
  276. property-escape-quote-03-expected.txt
  277. property-escape-quote-03.html
  278. property-escape.html
  279. property-inject-expected.txt
  280. property-inject.html
  281. reflection-in-path-expected.txt
  282. reflection-in-path.html
  283. regress-167121-expected.txt
  284. regress-167121.html
  285. report-script-tag-and-do-not-follow-redirect-when-sending-report-expected.txt
  286. report-script-tag-and-do-not-follow-redirect-when-sending-report.html
  287. report-script-tag-expected.txt
  288. report-script-tag-full-block-and-do-not-follow-redirect-when-sending-report-expected.txt
  289. report-script-tag-full-block-and-do-not-follow-redirect-when-sending-report.html
  290. report-script-tag-full-block-expected.txt
  291. report-script-tag-full-block.html
  292. report-script-tag-replace-state-expected.txt
  293. report-script-tag-replace-state.html
  294. report-script-tag.html
  295. script-tag-addslashes-backslash-expected.txt
  296. script-tag-addslashes-backslash.html
  297. script-tag-addslashes-double-quote-expected.txt
  298. script-tag-addslashes-double-quote.html
  299. script-tag-addslashes-null-char-expected.txt
  300. script-tag-addslashes-null-char.html
  301. script-tag-addslashes-single-quote-expected.txt
  302. script-tag-addslashes-single-quote.html
  303. script-tag-Big5-char-expected.txt
  304. script-tag-Big5-char-twice-url-encode-16bit-unicode-expected.txt
  305. script-tag-Big5-char-twice-url-encode-16bit-unicode.html
  306. script-tag-Big5-char-twice-url-encode-expected.txt
  307. script-tag-Big5-char-twice-url-encode.html
  308. script-tag-Big5-char.html
  309. script-tag-Big5-char2-expected.txt
  310. script-tag-Big5-char2.html
  311. script-tag-control-char-expected.txt
  312. script-tag-control-char.html
  313. script-tag-convoluted-expected.txt
  314. script-tag-convoluted.html
  315. script-tag-entities-expected.txt
  316. script-tag-entities.html
  317. script-tag-expected.txt
  318. script-tag-expression-follows-expected.txt
  319. script-tag-expression-follows.html
  320. script-tag-inside-svg-tag-expected.txt
  321. script-tag-inside-svg-tag.html
  322. script-tag-inside-svg-tag2-expected.txt
  323. script-tag-inside-svg-tag2.html
  324. script-tag-inside-svg-tag3-expected.txt
  325. script-tag-inside-svg-tag3.html
  326. script-tag-near-start-expected.txt
  327. script-tag-near-start.html
  328. script-tag-null-char-expected.txt
  329. script-tag-null-char.html
  330. script-tag-open-redirect-expected.txt
  331. script-tag-open-redirect.html
  332. script-tag-post-control-char-expected.txt
  333. script-tag-post-control-char.html
  334. script-tag-post-expected.txt
  335. script-tag-post-null-char-expected.txt
  336. script-tag-post-null-char.html
  337. script-tag-post.html
  338. script-tag-redirect-expected.txt
  339. script-tag-redirect.html
  340. script-tag-safe-expected.txt
  341. script-tag-safe.html
  342. script-tag-safe2-expected.txt
  343. script-tag-safe2.html
  344. script-tag-safe3-expected.txt
  345. script-tag-safe3.html
  346. script-tag-safe4-expected.txt
  347. script-tag-safe4.html
  348. script-tag-src-redirect-safe-expected.txt
  349. script-tag-src-redirect-safe.html
  350. script-tag-with-16bit-unicode-expected.txt
  351. script-tag-with-16bit-unicode-surrogate-pair-expected.txt
  352. script-tag-with-16bit-unicode-surrogate-pair.html
  353. script-tag-with-16bit-unicode.html
  354. script-tag-with-16bit-unicode2-expected.txt
  355. script-tag-with-16bit-unicode2.html
  356. script-tag-with-16bit-unicode3-expected.txt
  357. script-tag-with-16bit-unicode3.html
  358. script-tag-with-16bit-unicode4-expected.txt
  359. script-tag-with-16bit-unicode4.html
  360. script-tag-with-16bit-unicode5-expected.txt
  361. script-tag-with-16bit-unicode5.html
  362. script-tag-with-actual-comma-expected.txt
  363. script-tag-with-actual-comma.html
  364. script-tag-with-callbacks-expected.txt
  365. script-tag-with-callbacks.html
  366. script-tag-with-comma-01-expected.txt
  367. script-tag-with-comma-01.html
  368. script-tag-with-comma-02-expected.txt
  369. script-tag-with-comma-02.html
  370. script-tag-with-fancy-unicode-expected.txt
  371. script-tag-with-fancy-unicode.html
  372. script-tag-with-injected-comment-expected.txt
  373. script-tag-with-injected-comment.html
  374. script-tag-with-invalid-closing-tag-expected.txt
  375. script-tag-with-invalid-closing-tag.html
  376. script-tag-with-invalid-url-encoding-expected.txt
  377. script-tag-with-invalid-url-encoding.html
  378. script-tag-with-source-control-char-expected.txt
  379. script-tag-with-source-control-char.html
  380. script-tag-with-source-data-url-expected.txt
  381. script-tag-with-source-data-url.html
  382. script-tag-with-source-data-url2-expected.txt
  383. script-tag-with-source-data-url2.html
  384. script-tag-with-source-data-url3-expected.txt
  385. script-tag-with-source-data-url3.html
  386. script-tag-with-source-data-url4-expected.txt
  387. script-tag-with-source-data-url4.html
  388. script-tag-with-source-data-url5-expected.txt
  389. script-tag-with-source-data-url5.html
  390. script-tag-with-source-double-quote-expected.txt
  391. script-tag-with-source-double-quote.html
  392. script-tag-with-source-entities-expected.txt
  393. script-tag-with-source-entities.html
  394. script-tag-with-source-expected.txt
  395. script-tag-with-source-no-quote-expected.txt
  396. script-tag-with-source-no-quote.html
  397. script-tag-with-source-null-char-expected.txt
  398. script-tag-with-source-null-char.html
  399. script-tag-with-source-relative-scheme-expected.txt
  400. script-tag-with-source-relative-scheme.html
  401. script-tag-with-source-same-host-expected.txt
  402. script-tag-with-source-same-host-with-query-expected.txt
  403. script-tag-with-source-same-host-with-query.html
  404. script-tag-with-source-same-host.html
  405. script-tag-with-source-unterminated-01-expected.txt
  406. script-tag-with-source-unterminated-01.html
  407. script-tag-with-source-unterminated-02-expected.txt
  408. script-tag-with-source-unterminated-02.html
  409. script-tag-with-source-unterminated-03-expected.txt
  410. script-tag-with-source-unterminated-03.html
  411. script-tag-with-source.html
  412. script-tag-with-three-times-url-encoded-16bit-unicode-expected.txt
  413. script-tag-with-three-times-url-encoded-16bit-unicode.html
  414. script-tag-with-trailing-comment-expected.txt
  415. script-tag-with-trailing-comment-U2028-expected.txt
  416. script-tag-with-trailing-comment-U2028.html
  417. script-tag-with-trailing-comment.html
  418. script-tag-with-trailing-comment2-expected.txt
  419. script-tag-with-trailing-comment2.html
  420. script-tag-with-trailing-comment3-expected.txt
  421. script-tag-with-trailing-comment3.html
  422. script-tag-with-trailing-comment4-expected.txt
  423. script-tag-with-trailing-comment4.html
  424. script-tag-with-trailing-comment5-expected.txt
  425. script-tag-with-trailing-comment5.html
  426. script-tag-with-trailing-script-and-urlencode-expected.txt
  427. script-tag-with-trailing-script-and-urlencode.html
  428. script-tag.html
  429. svg-animate-expected.txt
  430. svg-animate.html
  431. svg-script-tag-expected.txt
  432. svg-script-tag.html
  433. window-open-without-url-should-not-assert-expected.txt
  434. window-open-without-url-should-not-assert.html
  435. xss-filter-bypass-big5-expected.txt
  436. xss-filter-bypass-big5.html
  437. xss-filter-bypass-long-string-expected.txt
  438. xss-filter-bypass-long-string.html
  439. xss-filter-bypass-sjis-expected.txt
  440. xss-filter-bypass-sjis.html
  441. xss-protection-parsing-01-expected.txt
  442. xss-protection-parsing-01.html
  443. xss-protection-parsing-02-expected.txt
  444. xss-protection-parsing-02.html
  445. xss-protection-parsing-03-expected.txt
  446. xss-protection-parsing-03.html
  447. xss-protection-parsing-04-expected.txt
  448. xss-protection-parsing-04.html