Google Git
Sign in
chromium / chromium / blink / 92189a9881a5ccdec4197fe086000a3af3939ec5 / . / LayoutTests / http / tests / security
tree: 5239aa8f485c92654ee879c47437e9b5da0f1229 [path history] [tgz]
  1. aboutBlank/
  2. clipboard/
  3. contentSecurityPolicy/
  4. contentTypeOptions/
  5. cookies/
  6. dataURL/
  7. frameNavigation/
  8. isolatedWorld/
  9. javascriptURL/
  10. listener/
  11. MessagePort/
  12. mixedContent/
  13. originHeader/
  14. postMessage/
  15. resources/
  16. seamless/
  17. XFrameOptions/
  18. xssAuditor/
  19. beforeload-iframe-client-redirect-expected.txt
  20. beforeload-iframe-client-redirect.html
  21. beforeload-iframe-server-redirect-expected.txt
  22. beforeload-iframe-server-redirect.html
  23. calling-versus-current-expected.txt
  24. calling-versus-current.html
  25. cannot-read-cssrules-expected.txt
  26. cannot-read-cssrules-redirect-expected.txt
  27. cannot-read-cssrules-redirect.html
  28. cannot-read-cssrules.html
  29. canvas-cors-with-two-hosts-expected.txt
  30. canvas-cors-with-two-hosts.html
  31. canvas-remote-read-data-url-image-expected.txt
  32. canvas-remote-read-data-url-image.html
  33. canvas-remote-read-data-url-svg-image-expected.txt
  34. canvas-remote-read-redirect-to-remote-image-expected.txt
  35. canvas-remote-read-redirect-to-remote-image.html
  36. canvas-remote-read-remote-image-allowed-expected.txt
  37. canvas-remote-read-remote-image-allowed-with-credentials-expected.txt
  38. canvas-remote-read-remote-image-allowed-with-credentials.html
  39. canvas-remote-read-remote-image-allowed.html
  40. canvas-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  41. canvas-remote-read-remote-image-blocked-no-crossorigin.html
  42. canvas-remote-read-remote-image-blocked-then-allowed-expected.txt
  43. canvas-remote-read-remote-image-blocked-then-allowed.html
  44. canvas-remote-read-remote-image-document-domain-expected.txt
  45. canvas-remote-read-remote-image-document-domain.html
  46. canvas-remote-read-remote-image-expected.txt
  47. canvas-remote-read-remote-image-redirect-expected.txt
  48. canvas-remote-read-remote-image-redirect.html
  49. canvas-remote-read-remote-image.html
  50. canvas-remote-read-svg-image-expected.txt
  51. create-document-change-domain-expected.txt
  52. create-document-change-domain.html
  53. cross-frame-access-call-expected.txt
  54. cross-frame-access-call.html
  55. cross-frame-access-callback-explicit-domain-ALLOW-expected.txt
  56. cross-frame-access-callback-explicit-domain-ALLOW.html
  57. cross-frame-access-callback-explicit-domain-DENY-expected.txt
  58. cross-frame-access-callback-explicit-domain-DENY.html
  59. cross-frame-access-child-explicit-domain-expected.txt
  60. cross-frame-access-child-explicit-domain.html
  61. cross-frame-access-custom-expected.txt
  62. cross-frame-access-custom.html
  63. cross-frame-access-delete-expected.txt
  64. cross-frame-access-delete.html
  65. cross-frame-access-document-direct-expected.txt
  66. cross-frame-access-document-direct.html
  67. cross-frame-access-DOMImplementation-expected.txt
  68. cross-frame-access-DOMImplementation.html
  69. cross-frame-access-enumeration-expected.txt
  70. cross-frame-access-enumeration.html
  71. cross-frame-access-first-time-expected.txt
  72. cross-frame-access-first-time.html
  73. cross-frame-access-frameelement-expected.txt
  74. cross-frame-access-frameelement.html
  75. cross-frame-access-frames-expected.txt
  76. cross-frame-access-frames.html
  77. cross-frame-access-get-custom-property-cached-expected.txt
  78. cross-frame-access-get-custom-property-cached.html
  79. cross-frame-access-get-expected.txt
  80. cross-frame-access-get-override-expected.txt
  81. cross-frame-access-get-override.html
  82. cross-frame-access-get.html
  83. cross-frame-access-getOwnPropertyDescriptor-expected.txt
  84. cross-frame-access-getOwnPropertyDescriptor.html
  85. cross-frame-access-location-get-expected.txt
  86. cross-frame-access-location-get-override-expected.txt
  87. cross-frame-access-location-get-override.html
  88. cross-frame-access-location-get.html
  89. cross-frame-access-location-prototype-expected.txt
  90. cross-frame-access-location-prototype.html
  91. cross-frame-access-location-put-expected.txt
  92. cross-frame-access-location-put.html
  93. cross-frame-access-name-getter-expected.txt
  94. cross-frame-access-name-getter.html
  95. cross-frame-access-object-getPrototypeOf-expected.txt
  96. cross-frame-access-object-getPrototypeOf.html
  97. cross-frame-access-object-prototype-expected.txt
  98. cross-frame-access-object-prototype.html
  99. cross-frame-access-parent-explicit-domain-expected.txt
  100. cross-frame-access-parent-explicit-domain.html
  101. cross-frame-access-port-expected.txt
  102. cross-frame-access-port-explicit-domain-expected.txt
  103. cross-frame-access-port-explicit-domain.html
  104. cross-frame-access-port.html
  105. cross-frame-access-protocol-expected.txt
  106. cross-frame-access-protocol-explicit-domain-expected.txt
  107. cross-frame-access-protocol-explicit-domain.html
  108. cross-frame-access-protocol.html
  109. cross-frame-access-put-expected.txt
  110. cross-frame-access-put.html
  111. cross-frame-access-selection-expected.txt
  112. cross-frame-access-selection.html
  113. cross-frame-access-set-window-properties-expected.txt
  114. cross-frame-access-set-window-properties.html
  115. cross-origin-appcache-allowed-expected.txt
  116. cross-origin-appcache-allowed.html
  117. cross-origin-createImageBitmap-expected.txt
  118. cross-origin-createImageBitmap.html
  119. cross-origin-css-expected.txt
  120. cross-origin-css-in-xml-expected.txt
  121. cross-origin-css-in-xml.xml
  122. cross-origin-css-primitive-expected.txt
  123. cross-origin-css-primitive.html
  124. cross-origin-css.html
  125. cross-origin-getMatchedCSSRules-expected.txt
  126. cross-origin-getMatchedCSSRules.html
  127. cross-origin-getMatchedCSSRules2-expected.txt
  128. cross-origin-getMatchedCSSRules2.html
  129. cross-origin-indexeddb-allowed-expected.txt
  130. cross-origin-indexeddb-allowed.html
  131. cross-origin-local-storage-allowed-expected.txt
  132. cross-origin-local-storage-allowed.html
  133. cross-origin-local-storage-wk1-expected.txt
  134. cross-origin-local-storage-wk1.html
  135. cross-origin-script-window-onerror-expected.txt
  136. cross-origin-script-window-onerror-redirected-expected.txt
  137. cross-origin-script-window-onerror-redirected.html
  138. cross-origin-script-window-onerror.html
  139. cross-origin-session-storage-allowed-expected.txt
  140. cross-origin-session-storage-allowed.html
  141. cross-origin-shared-worker-allowed-expected.txt
  142. cross-origin-shared-worker-allowed.html
  143. cross-origin-websql-allowed-expected.txt
  144. cross-origin-websql-allowed.html
  145. cross-origin-window-event-exception-expected.txt
  146. cross-origin-window-event-exception.html
  147. cross-origin-window-open-exception-expected.txt
  148. cross-origin-window-open-exception.html
  149. cross-origin-worker-indexeddb-allowed-expected.txt
  150. cross-origin-worker-indexeddb-allowed.html
  151. cross-origin-worker-websql-allowed-expected.txt
  152. cross-origin-worker-websql-allowed.html
  153. cross-origin-xsl-BLOCKED-expected.txt
  154. cross-origin-xsl-BLOCKED.html
  155. cross-origin-xsl-redirect-BLOCKED-expected.txt
  156. cross-origin-xsl-redirect-BLOCKED.html
  157. data-url-inline.css-expected.txt
  158. data-url-inline.css.html
  159. dataTransfer-set-data-file-url-expected.txt
  160. dataTransfer-set-data-file-url.html
  161. detached-sandboxed-frame-access-expected.txt
  162. detached-sandboxed-frame-access.html
  163. document-all-expected.txt
  164. document-all.html
  165. document-clone-node-change-domain-expected.txt
  166. document-clone-node-change-domain.html
  167. drag-drop-different-origin-expected.txt
  168. drag-drop-different-origin.html
  169. drag-drop-same-unique-origin-expected.txt
  170. drag-drop-same-unique-origin.html
  171. drag-over-remote-content-iframe-expected.txt
  172. drag-over-remote-content-iframe.html
  173. escape-form-data-field-names-expected.txt
  174. escape-form-data-field-names.html
  175. feed-urls-from-remote-expected.txt
  176. feed-urls-from-remote.html
  177. filesystem-iframe-from-remote-expected.txt
  178. filesystem-iframe-from-remote.html
  179. frame-loading-via-document-write-expected.txt
  180. frame-loading-via-document-write.html
  181. host-compare-case-insensitive-expected.txt
  182. host-compare-case-insensitive.html
  183. img-crossorigin-loads-same-origin-expected.txt
  184. img-crossorigin-loads-same-origin.html
  185. img-with-failed-cors-check-fails-to-load-expected.txt
  186. img-with-failed-cors-check-fails-to-load.html
  187. inactive-document-with-empty-security-origin-expected.txt
  188. inactive-document-with-empty-security-origin.html
  189. local-CSS-from-remote-expected.txt
  190. local-CSS-from-remote.html
  191. local-iFrame-from-remote-expected.txt
  192. local-iFrame-from-remote.html
  193. local-image-from-remote-expected.txt
  194. local-image-from-remote-whitelisted-expected.txt
  195. local-image-from-remote-whitelisted.html
  196. local-image-from-remote.html
  197. local-JavaScript-from-remote-expected.txt
  198. local-JavaScript-from-remote.html
  199. local-user-CSS-from-remote-expected.txt
  200. local-user-CSS-from-remote.html
  201. local-video-poster-from-remote-expected.txt
  202. local-video-poster-from-remote.html
  203. local-video-source-from-remote-expected.txt
  204. local-video-source-from-remote.html
  205. local-video-src-from-remote-expected.txt
  206. local-video-src-from-remote.html
  207. location-prototype-expected.txt
  208. location-prototype.html
  209. mime-type-execute-as-html-01-expected.txt
  210. mime-type-execute-as-html-01.html
  211. mime-type-execute-as-html-02-expected.txt
  212. mime-type-execute-as-html-02.html
  213. mime-type-execute-as-html-03-expected.txt
  214. mime-type-execute-as-html-03.html
  215. mime-type-execute-as-html-04-expected.txt
  216. mime-type-execute-as-html-04.html
  217. mime-type-execute-as-html-05-expected.txt
  218. mime-type-execute-as-html-05.html
  219. mime-type-execute-as-html-06-expected.txt
  220. mime-type-execute-as-html-06.html
  221. mime-type-execute-as-html-07-expected.txt
  222. mime-type-execute-as-html-07.html
  223. mime-type-execute-as-html-08-expected.txt
  224. mime-type-execute-as-html-08.html
  225. mime-type-execute-as-html-09-expected.txt
  226. mime-type-execute-as-html-09.html
  227. mime-type-execute-as-html-10-expected.txt
  228. mime-type-execute-as-html-10.html
  229. mime-type-execute-as-html-11-expected.txt
  230. mime-type-execute-as-html-11.html
  231. mime-type-execute-as-html-12-expected.txt
  232. mime-type-execute-as-html-12.html
  233. mime-type-execute-as-html-13-expected.txt
  234. mime-type-execute-as-html-13.html
  235. mime-type-execute-as-html-14-expected.txt
  236. mime-type-execute-as-html-14.html
  237. mime-type-execute-as-html-15-expected.txt
  238. mime-type-execute-as-html-15.html
  239. no-indexeddb-from-sandbox-expected.txt
  240. no-indexeddb-from-sandbox.html
  241. no-javascript-refresh-expected.txt
  242. no-javascript-refresh-static-expected.txt
  243. no-javascript-refresh-static.html
  244. no-javascript-refresh.php
  245. no-popup-from-sandbox-expected.txt
  246. no-popup-from-sandbox-top-expected.txt
  247. no-popup-from-sandbox-top.html
  248. no-popup-from-sandbox.html
  249. no-referrer-expected.txt
  250. no-referrer.html
  251. object-literals-expected.txt
  252. object-literals.html
  253. popup-allowed-by-sandbox-is-sandboxed-control-expected.txt
  254. popup-allowed-by-sandbox-is-sandboxed-control.html
  255. popup-allowed-by-sandbox-is-sandboxed-expected.txt
  256. popup-allowed-by-sandbox-is-sandboxed.html
  257. popup-allowed-by-sandbox-when-allowed-expected.txt
  258. popup-allowed-by-sandbox-when-allowed.html
  259. popup-blocked-from-fake-event-expected.txt
  260. popup-blocked-from-fake-event.html
  261. popup-blocked-from-window-open-expected.txt
  262. popup-blocked-from-window-open.html
  263. protocol-compare-case-insensitive-expected.txt
  264. protocol-compare-case-insensitive.html
  265. redirect-BLOCKED-to-localURL-expected.txt
  266. redirect-BLOCKED-to-localURL.html
  267. referrer-policy-always-expected.txt
  268. referrer-policy-always.html
  269. referrer-policy-default-expected.txt
  270. referrer-policy-default.html
  271. referrer-policy-https-always-expected.txt
  272. referrer-policy-https-always.html
  273. referrer-policy-https-default-expected.txt
  274. referrer-policy-https-default.html
  275. referrer-policy-https-never-expected.txt
  276. referrer-policy-https-never.html
  277. referrer-policy-https-origin-expected.txt
  278. referrer-policy-https-origin.html
  279. referrer-policy-never-expected.txt
  280. referrer-policy-never.html
  281. referrer-policy-origin-expected.txt
  282. referrer-policy-origin.html
  283. referrer-policy-redirect-expected.txt
  284. referrer-policy-redirect-link-expected.txt
  285. referrer-policy-redirect-link.html
  286. referrer-policy-redirect.html
  287. referrer-policy-rel-noreferrer-expected.txt
  288. referrer-policy-rel-noreferrer.html
  289. referrer-policy-window-open-expected.txt
  290. referrer-policy-window-open.html
  291. sandbox-inherit-to-initial-document-2-expected.txt
  292. sandbox-inherit-to-initial-document-2.html
  293. sandbox-inherit-to-initial-document-expected.txt
  294. sandbox-inherit-to-initial-document.html
  295. sandboxed-iframe-blocks-access-from-parent-expected.txt
  296. sandboxed-iframe-blocks-access-from-parent.html
  297. sandboxed-iframe-document-cookie-expected.txt
  298. sandboxed-iframe-document-cookie.html
  299. sandboxed-iframe-form-top-expected.txt
  300. sandboxed-iframe-form-top.html
  301. sandboxed-iframe-invalid-expected.txt
  302. sandboxed-iframe-invalid.html
  303. sandboxed-iframe-meta-refresh-expected.txt
  304. sandboxed-iframe-meta-refresh.html
  305. sandboxed-iframe-modify-self-expected.txt
  306. sandboxed-iframe-modify-self.html
  307. sandboxed-iframe-origin-add-expected.txt
  308. sandboxed-iframe-origin-add.html
  309. sandboxed-iframe-origin-remove-expected.txt
  310. sandboxed-iframe-origin-remove.html
  311. script-crossorigin-loads-correctly-expected.txt
  312. script-crossorigin-loads-correctly.html
  313. script-crossorigin-loads-same-origin-expected.txt
  314. script-crossorigin-loads-same-origin.html
  315. script-onerror-crossorigin-cors-expected.txt
  316. script-onerror-crossorigin-cors.html
  317. script-onerror-crossorigin-no-cors-expected.txt
  318. script-onerror-crossorigin-no-cors.html
  319. script-onerror-no-crossorigin-cors-expected.txt
  320. script-onerror-no-crossorigin-cors.html
  321. script-onerror-no-crossorigin-no-cors-expected.txt
  322. script-onerror-no-crossorigin-no-cors.html
  323. script-with-failed-cors-check-fails-to-load-expected.txt
  324. script-with-failed-cors-check-fails-to-load.html
  325. setDomainRelaxationForbiddenForURLScheme-expected.txt
  326. setDomainRelaxationForbiddenForURLScheme.html
  327. shape-image-cors-expected.html
  328. shape-image-cors.html
  329. srcdoc-can-access-parent-expected.txt
  330. srcdoc-can-access-parent.html
  331. srcdoc-in-sandbox-cannot-access-parent-expected.txt
  332. srcdoc-in-sandbox-cannot-access-parent.html
  333. srcdoc-inherits-referrer-expected.txt
  334. srcdoc-inherits-referrer-for-forms-expected.txt
  335. srcdoc-inherits-referrer-for-forms.html
  336. srcdoc-inherits-referrer.html
  337. stylesheet-href-redirect-expected.txt
  338. stylesheet-href-redirect.html
  339. text-track-crossorigin-expected.txt
  340. text-track-crossorigin.html
  341. video-cross-origin-readback-expected.txt
  342. video-cross-origin-readback.html
  343. video-poster-cross-origin-crash-expected.txt
  344. video-poster-cross-origin-crash.html
  345. video-poster-cross-origin-crash2-expected.txt
  346. video-poster-cross-origin-crash2.html
  347. webgl-remote-read-remote-image-allowed-expected.txt
  348. webgl-remote-read-remote-image-allowed-with-credentials-expected.txt
  349. webgl-remote-read-remote-image-allowed-with-credentials.html
  350. webgl-remote-read-remote-image-allowed.html
  351. webgl-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  352. webgl-remote-read-remote-image-blocked-no-crossorigin.html
  353. window-events-clear-domain-expected.txt
  354. window-events-clear-domain.html
  355. window-events-clear-port-expected.txt
  356. window-events-clear-port.html
  357. window-events-pass-expected.txt
  358. window-events-pass.html
  359. window-named-proto-expected.txt
  360. window-named-proto.html
  361. window-named-valueOf-expected.txt
  362. window-named-valueOf.html
  363. window-onerror-exception-in-iframe-expected.txt
  364. window-onerror-exception-in-iframe.html
  365. window-properties-clear-domain-expected.txt
  366. window-properties-clear-domain.html
  367. window-properties-clear-port-expected.txt
  368. window-properties-clear-port.html
  369. window-properties-pass-expected.txt
  370. window-properties-pass.html
  371. xss-DENIED-assign-location-hash-expected.txt
  372. xss-DENIED-assign-location-hash.html
  373. xss-DENIED-assign-location-host-expected.txt
  374. xss-DENIED-assign-location-host.html
  375. xss-DENIED-assign-location-hostname-expected.txt
  376. xss-DENIED-assign-location-hostname.html
  377. xss-DENIED-assign-location-href-javascript-expected.txt
  378. xss-DENIED-assign-location-href-javascript.html
  379. xss-DENIED-assign-location-nonstandardProperty-expected.txt
  380. xss-DENIED-assign-location-nonstandardProperty.html
  381. xss-DENIED-assign-location-pathname-expected.txt
  382. xss-DENIED-assign-location-pathname.html
  383. xss-DENIED-assign-location-protocol-expected.txt
  384. xss-DENIED-assign-location-protocol.html
  385. xss-DENIED-assign-location-reload-expected.txt
  386. xss-DENIED-assign-location-reload.html
  387. xss-DENIED-assign-location-search-expected.txt
  388. xss-DENIED-assign-location-search.html
  389. xss-DENIED-contentWindow-eval-expected.txt
  390. xss-DENIED-contentWindow-eval.html
  391. xss-DENIED-defineProperty-expected.txt
  392. xss-DENIED-defineProperty.html
  393. xss-DENIED-frame-name-expected.txt
  394. xss-DENIED-frame-name.html
  395. xss-DENIED-getSelection-from-inactive-domwindow-expected.txt
  396. xss-DENIED-getSelection-from-inactive-domwindow.html
  397. xss-DENIED-getSVGDocument-iframe-expected.txt
  398. xss-DENIED-getSVGDocument-iframe.html
  399. xss-DENIED-getSVGDocument-object-expected.txt
  400. xss-DENIED-getSVGDocument-object.html
  401. xss-DENIED-htmlelelment-with-iframe-proto-expected.txt
  402. xss-DENIED-htmlelelment-with-iframe-proto.html
  403. xss-DENIED-iframe-src-alias-expected.txt
  404. xss-DENIED-iframe-src-alias.html
  405. xss-DENIED-invalid-domain-change-expected.txt
  406. xss-DENIED-invalid-domain-change.html
  407. xss-DENIED-javascript-with-spaces-expected.txt
  408. xss-DENIED-javascript-with-spaces.html
  409. xss-DENIED-method-with-iframe-proto-expected.txt
  410. xss-DENIED-method-with-iframe-proto.html
  411. xss-DENIED-non-shadowable-propterty-with-iframe-proto-expected.txt
  412. xss-DENIED-non-shadowable-propterty-with-iframe-proto.html
  413. xss-DENIED-object-element-expected.txt
  414. xss-DENIED-object-element.html
  415. xss-DENIED-regular-propterty-with-iframe-proto-expected.txt
  416. xss-DENIED-regular-propterty-with-iframe-proto.html
  417. xss-DENIED-sandboxed-iframe-expected.txt
  418. xss-DENIED-sandboxed-iframe.html
  419. xss-DENIED-synchronous-form-expected.txt
  420. xss-DENIED-synchronous-form.html
  421. xss-DENIED-synchronous-frame-load-in-javascript-url-expected.txt
  422. xss-DENIED-synchronous-frame-load-in-javascript-url.html
  423. xss-DENIED-window-index-assign-expected.txt
  424. xss-DENIED-window-index-assign.html
  425. xss-DENIED-window-name-alert-expected.txt
  426. xss-DENIED-window-name-alert.html
  427. xss-DENIED-window-name-navigator-expected.txt
  428. xss-DENIED-window-name-navigator.html
  429. xss-DENIED-window-open-javascript-url-expected.txt
  430. xss-DENIED-window-open-javascript-url-with-spaces-expected.txt
  431. xss-DENIED-window-open-javascript-url-with-spaces.html
  432. xss-DENIED-window-open-javascript-url.html
  433. xss-DENIED-window-open-parent-expected.txt
  434. xss-DENIED-window-open-parent.html
  435. xss-DENIED-xml-external-entity-expected.txt
  436. xss-DENIED-xml-external-entity.xhtml
  437. xss-DENIED-xsl-document-expected.txt
  438. xss-DENIED-xsl-document-redirect-expected.txt
  439. xss-DENIED-xsl-document-redirect.xml
  440. xss-DENIED-xsl-document-securityOrigin-expected.txt
  441. xss-DENIED-xsl-document-securityOrigin.xml
  442. xss-DENIED-xsl-document.xml
  443. xss-DENIED-xsl-external-entity-expected.txt
  444. xss-DENIED-xsl-external-entity-redirect-expected.txt
  445. xss-DENIED-xsl-external-entity-redirect.xml
  446. xss-DENIED-xsl-external-entity.xml
  447. xss-eval-expected.txt
  448. xss-eval.html