Google Git
Sign in
chromium / chromium / src.git / dea8b2608dd5d95e3869febc8b13d425291c19ef / . / third_party / blink / web_tests / http / tests / security / xssAuditor
tree: c7a2fcd3d5df59a63cb1f271cc598f9323bdb31e [path history] [tgz]
  1. intercept/
  2. resources/
  3. anchor-url-dom-write-location2-expected.txt
  4. anchor-url-dom-write-location2.html
  5. base-href-control-char-expected.txt
  6. base-href-control-char.html
  7. base-href-direct-expected.txt
  8. base-href-direct.html
  9. base-href-expected.txt
  10. base-href-null-char-expected.txt
  11. base-href-null-char.html
  12. base-href-safe-expected.txt
  13. base-href-safe.html
  14. base-href-safe2-expected.txt
  15. base-href-safe2.html
  16. base-href-safe3-expected.txt
  17. base-href-safe3.html
  18. base-href-scheme-relative-expected.txt
  19. base-href-scheme-relative.html
  20. base-href-unterminated-expected.txt
  21. base-href-unterminated.html
  22. base-href.html
  23. block-does-not-leak-location-expected.txt
  24. block-does-not-leak-location.html
  25. block-does-not-leak-referrer-expected.txt
  26. block-does-not-leak-referrer.html
  27. cached-frame-expected.txt
  28. cached-frame.html
  29. chunked-big-script-expected.txt
  30. chunked-big-script.html
  31. cookie-injection-expected.txt
  32. cookie-injection.html
  33. crash-while-loading-tag-with-pause-expected.txt
  34. crash-while-loading-tag-with-pause.html
  35. data-urls-work-expected.txt
  36. data-urls-work.html
  37. dom-write-innerHTML-expected.txt
  38. dom-write-innerHTML.html
  39. dom-write-location-expected.txt
  40. dom-write-location-inline-event-expected.txt
  41. dom-write-location-inline-event.html
  42. dom-write-location-javascript-URL-expected.txt
  43. dom-write-location-javascript-URL.html
  44. dom-write-location.html
  45. dom-write-URL-expected.txt
  46. dom-write-URL.html
  47. embed-tag-code-attribute-2-expected.txt
  48. embed-tag-code-attribute-2.html
  49. embed-tag-code-attribute-expected.txt
  50. embed-tag-code-attribute.html
  51. embed-tag-control-char-expected.txt
  52. embed-tag-control-char.html
  53. embed-tag-expected.txt
  54. embed-tag-in-path-unterminated-expected.txt
  55. embed-tag-in-path-unterminated.html
  56. embed-tag-javascript-url-expected.txt
  57. embed-tag-javascript-url.html
  58. embed-tag-null-char-expected.txt
  59. embed-tag-null-char.html
  60. embed-tag.html
  61. faux-script1-expected.txt
  62. faux-script1.html
  63. faux-script2-expected.txt
  64. faux-script2.html
  65. faux-script3-expected.txt
  66. faux-script3.html
  67. form-action-expected.txt
  68. form-action-unquoted-empty-expected.txt
  69. form-action-unquoted-empty.html
  70. form-action.html
  71. formaction-on-button-expected.txt
  72. formaction-on-button.html
  73. formaction-on-input-expected.txt
  74. formaction-on-input.html
  75. frameset-injection-expected.txt
  76. frameset-injection.html
  77. full-block-base-href-expected.txt
  78. full-block-base-href.html
  79. full-block-get-from-iframe-expected.txt
  80. full-block-get-from-iframe.html
  81. full-block-iframe-javascript-url-expected.txt
  82. full-block-iframe-javascript-url.html
  83. full-block-iframe-no-inherit-expected.txt
  84. full-block-iframe-no-inherit.php
  85. full-block-javascript-link-expected.txt
  86. full-block-javascript-link.html
  87. full-block-link-onclick-expected.txt
  88. full-block-link-onclick.html
  89. full-block-object-tag-expected.txt
  90. full-block-object-tag.html
  91. full-block-post-from-iframe-expected.txt
  92. full-block-post-from-iframe.html
  93. full-block-script-tag-cross-domain-expected.txt
  94. full-block-script-tag-cross-domain.html
  95. full-block-script-tag-expected.txt
  96. full-block-script-tag-with-source-expected.txt
  97. full-block-script-tag-with-source.html
  98. full-block-script-tag.html
  99. get-from-iframe-expected.txt
  100. get-from-iframe.html
  101. html5-import-CORS-expected.txt
  102. html5-import-CORS.html
  103. html5-import-expected.txt
  104. html5-import-list-expected.txt
  105. html5-import-list.html
  106. html5-import-safe-expected.txt
  107. html5-import-safe.html
  108. html5-import-sol-expected.txt
  109. html5-import-sol.html
  110. html5-import.html
  111. iframe-injection-allowed-2-expected.txt
  112. iframe-injection-allowed-2.html
  113. iframe-injection-allowed-3-expected.txt
  114. iframe-injection-allowed-3.html
  115. iframe-injection-allowed-expected.txt
  116. iframe-injection-allowed.html
  117. iframe-injection-expected.txt
  118. iframe-injection.html
  119. iframe-javascript-url-expected.txt
  120. iframe-javascript-url-more-encoding-expected.txt
  121. iframe-javascript-url-more-encoding.html
  122. iframe-javascript-url-twice-url-encode-expected.txt
  123. iframe-javascript-url-twice-url-encode.html
  124. iframe-javascript-url-twice-url-encode2-expected.txt
  125. iframe-javascript-url-twice-url-encode2.html
  126. iframe-javascript-url-twice-url-encode3-expected.txt
  127. iframe-javascript-url-twice-url-encode3.html
  128. iframe-javascript-url-url-encoded-expected.txt
  129. iframe-javascript-url-url-encoded.html
  130. iframe-javascript-url.html
  131. iframe-onload-GBK-char-expected.txt
  132. iframe-onload-GBK-char.html
  133. iframe-onload-in-svg-tag-expected.txt
  134. iframe-onload-in-svg-tag.html
  135. iframe-srcdoc-expected.txt
  136. iframe-srcdoc-property-blocked-expected.txt
  137. iframe-srcdoc-property-blocked.html
  138. iframe-srcdoc.html
  139. img-onerror-accented-char-expected.txt
  140. img-onerror-accented-char.html
  141. img-onerror-GBK-char-expected.txt
  142. img-onerror-GBK-char.html
  143. img-onerror-non-ASCII-char-default-encoding-expected.txt
  144. img-onerror-non-ASCII-char-default-encoding.html
  145. img-onerror-non-ASCII-char-expected.txt
  146. img-onerror-non-ASCII-char.html
  147. img-onerror-non-ASCII-char2-default-encoding-expected.txt
  148. img-onerror-non-ASCII-char2-default-encoding.html
  149. img-onerror-non-ASCII-char2-expected.txt
  150. img-onerror-non-ASCII-char2.html
  151. img-onerror-tricky-expected.txt
  152. img-onerror-tricky.html
  153. img-tag-with-comma-expected.txt
  154. img-tag-with-comma.html
  155. inline-event-HTML-entities-expected.txt
  156. inline-event-HTML-entities.html
  157. javascript-link-ampersand-expected.txt
  158. javascript-link-ampersand.html
  159. javascript-link-control-char-expected.txt
  160. javascript-link-control-char.html
  161. javascript-link-control-char2-expected.txt
  162. javascript-link-control-char2.html
  163. javascript-link-expected.txt
  164. javascript-link-HTML-entities-control-char-expected.txt
  165. javascript-link-HTML-entities-control-char.html
  166. javascript-link-HTML-entities-expected.txt
  167. javascript-link-HTML-entities-named-expected.txt
  168. javascript-link-HTML-entities-named.html
  169. javascript-link-HTML-entities-null-char-expected.txt
  170. javascript-link-HTML-entities-null-char.html
  171. javascript-link-HTML-entities.html
  172. javascript-link-null-char-expected.txt
  173. javascript-link-null-char.html
  174. javascript-link-one-plus-one-expected.txt
  175. javascript-link-one-plus-one.html
  176. javascript-link-safe-expected.txt
  177. javascript-link-safe.html
  178. javascript-link-url-encoded-expected.txt
  179. javascript-link-url-encoded.html
  180. javascript-link.html
  181. link-onclick-ampersand-expected.txt
  182. link-onclick-ampersand.html
  183. link-onclick-control-char-expected.txt
  184. link-onclick-control-char.html
  185. link-onclick-entities-expected.txt
  186. link-onclick-entities.html
  187. link-onclick-expected.txt
  188. link-onclick-null-char-expected.txt
  189. link-onclick-null-char.html
  190. link-onclick.html
  191. link-opens-new-window-expected.txt
  192. link-opens-new-window.html
  193. malformed-HTML-expected.txt
  194. malformed-HTML.html
  195. malformed-xss-protection-header-1-expected.txt
  196. malformed-xss-protection-header-1.html
  197. meta-tag-http-refresh-javascript-url-expected.txt
  198. meta-tag-http-refresh-javascript-url.html
  199. meta-tag-http-refresh-x-frame-options-expected.txt
  200. no-protection-script-tag-expected.txt
  201. no-protection-script-tag.html
  202. non-block-javascript-url-frame-expected.txt
  203. non-block-javascript-url-frame.html
  204. object-embed-tag-control-char-expected.txt
  205. object-embed-tag-control-char.html
  206. object-embed-tag-expected.txt
  207. object-embed-tag-null-char-expected.txt
  208. object-embed-tag-null-char.html
  209. object-embed-tag.html
  210. object-src-inject-expected.txt
  211. object-src-inject.html
  212. object-tag-javascript-url-expected.txt
  213. object-tag-javascript-url.html
  214. object-tag-param-code-expected.txt
  215. object-tag-param-code.html
  216. object-tag-param-data-expected.txt
  217. object-tag-param-data.html
  218. object-tag-param-movie-expected.txt
  219. object-tag-param-movie.html
  220. object-tag-param-src-expected.txt
  221. object-tag-param-src.html
  222. object-tag-param-url-expected.txt
  223. object-tag-param-url.html
  224. open-attribute-body-expected.txt
  225. open-attribute-body.html
  226. open-event-handler-iframe-expected.txt
  227. open-event-handler-iframe.html
  228. open-iframe-src-01-expected.txt
  229. open-iframe-src-01.html
  230. open-iframe-src-02-expected.txt
  231. open-iframe-src-02.html
  232. open-iframe-src-03-expected.txt
  233. open-iframe-src-03.html
  234. open-script-src-01-expected.txt
  235. open-script-src-01.html
  236. open-script-src-02-expected.txt
  237. open-script-src-02.html
  238. open-script-src-03-expected.txt
  239. open-script-src-03.html
  240. open-script-src-04-expected.txt
  241. open-script-src-04.html
  242. post-from-iframe-expected.txt
  243. post-from-iframe.html
  244. property-escape-comment-01-expected.txt
  245. property-escape-comment-01.html
  246. property-escape-comment-02-expected.txt
  247. property-escape-comment-02.html
  248. property-escape-comment-03-expected.txt
  249. property-escape-comment-03.html
  250. property-escape-entity-01-expected.txt
  251. property-escape-entity-01.html
  252. property-escape-entity-02-expected.txt
  253. property-escape-entity-02.html
  254. property-escape-entity-03-expected.txt
  255. property-escape-entity-03.html
  256. property-escape-expected.txt
  257. property-escape-long-expected.txt
  258. property-escape-long.html
  259. property-escape-noquotes-expected.txt
  260. property-escape-noquotes-tab-slash-chars-expected.txt
  261. property-escape-noquotes-tab-slash-chars.html
  262. property-escape-noquotes.html
  263. property-escape-quote-01-expected.txt
  264. property-escape-quote-01.html
  265. property-escape-quote-02-expected.txt
  266. property-escape-quote-02.html
  267. property-escape-quote-03-expected.txt
  268. property-escape-quote-03.html
  269. property-escape.html
  270. property-inject-expected.txt
  271. property-inject.html
  272. reflection-in-path-expected.txt
  273. reflection-in-path.html
  274. report-script-tag-cross-origin-expected.txt
  275. report-script-tag-cross-origin-https-expected.txt
  276. report-script-tag-cross-origin-https.html
  277. report-script-tag-cross-origin.html
  278. report-script-tag-expected.txt
  279. report-script-tag-full-block-expected.txt
  280. report-script-tag-full-block.html
  281. report-script-tag-replace-state-expected.txt
  282. report-script-tag-replace-state.html
  283. report-script-tag.html
  284. script-tag-addslashes-backslash-expected.txt
  285. script-tag-addslashes-backslash.html
  286. script-tag-addslashes-double-quote-expected.txt
  287. script-tag-addslashes-double-quote.html
  288. script-tag-addslashes-null-char-expected.txt
  289. script-tag-addslashes-null-char.html
  290. script-tag-addslashes-single-quote-expected.txt
  291. script-tag-addslashes-single-quote.html
  292. script-tag-Big5-char-expected.txt
  293. script-tag-Big5-char-twice-url-encode-16bit-unicode-expected.txt
  294. script-tag-Big5-char-twice-url-encode-16bit-unicode.html
  295. script-tag-Big5-char-twice-url-encode-expected.txt
  296. script-tag-Big5-char-twice-url-encode.html
  297. script-tag-Big5-char.html
  298. script-tag-Big5-char2-expected.txt
  299. script-tag-Big5-char2.html
  300. script-tag-control-char-expected.txt
  301. script-tag-control-char.html
  302. script-tag-convoluted-expected.txt
  303. script-tag-convoluted.html
  304. script-tag-entities-expected.txt
  305. script-tag-entities.html
  306. script-tag-expected.txt
  307. script-tag-expression-follows-expected.txt
  308. script-tag-expression-follows.html
  309. script-tag-inside-svg-tag-expected.txt
  310. script-tag-inside-svg-tag.html
  311. script-tag-inside-svg-tag2-expected.txt
  312. script-tag-inside-svg-tag2.html
  313. script-tag-inside-svg-tag3-expected.txt
  314. script-tag-inside-svg-tag3.html
  315. script-tag-inside-svg-tag4-expected.txt
  316. script-tag-inside-svg-tag4.html
  317. script-tag-inside-svg-tag5-expected.txt
  318. script-tag-inside-svg-tag5.html
  319. script-tag-inside-svg-tag6-expected.txt
  320. script-tag-inside-svg-tag6.html
  321. script-tag-near-start-expected.txt
  322. script-tag-near-start.html
  323. script-tag-null-char-expected.txt
  324. script-tag-null-char.html
  325. script-tag-open-redirect-expected.txt
  326. script-tag-open-redirect.html
  327. script-tag-post-control-char-expected.txt
  328. script-tag-post-control-char.html
  329. script-tag-post-expected.txt
  330. script-tag-post-null-char-expected.txt
  331. script-tag-post-null-char.html
  332. script-tag-post-redirect-expected.txt
  333. script-tag-post-redirect.html
  334. script-tag-post.html
  335. script-tag-redirect-expected.txt
  336. script-tag-redirect.html
  337. script-tag-replaced-with-questionmark-expected.txt
  338. script-tag-replaced-with-questionmark.html
  339. script-tag-safe-expected.txt
  340. script-tag-safe.html
  341. script-tag-safe2-expected.txt
  342. script-tag-safe2.html
  343. script-tag-safe3-expected.txt
  344. script-tag-safe3.html
  345. script-tag-safe4-expected.txt
  346. script-tag-safe4.html
  347. script-tag-src-redirect-safe-expected.txt
  348. script-tag-src-redirect-safe.html
  349. script-tag-with-16bit-unicode-expected.txt
  350. script-tag-with-16bit-unicode-surrogate-pair-expected.txt
  351. script-tag-with-16bit-unicode-surrogate-pair.html
  352. script-tag-with-16bit-unicode.html
  353. script-tag-with-16bit-unicode2-expected.txt
  354. script-tag-with-16bit-unicode2.html
  355. script-tag-with-16bit-unicode3-expected.txt
  356. script-tag-with-16bit-unicode3.html
  357. script-tag-with-16bit-unicode4-expected.txt
  358. script-tag-with-16bit-unicode4.html
  359. script-tag-with-16bit-unicode5-expected.txt
  360. script-tag-with-16bit-unicode5.html
  361. script-tag-with-actual-comma-expected.txt
  362. script-tag-with-actual-comma.html
  363. script-tag-with-callbacks-expected.txt
  364. script-tag-with-callbacks.html
  365. script-tag-with-comma-01-expected.txt
  366. script-tag-with-comma-01.html
  367. script-tag-with-comma-02-expected.txt
  368. script-tag-with-comma-02.html
  369. script-tag-with-fancy-unicode-expected.txt
  370. script-tag-with-fancy-unicode.html
  371. script-tag-with-injected-comment-expected.txt
  372. script-tag-with-injected-comment.html
  373. script-tag-with-injected-template-string-expected.txt
  374. script-tag-with-injected-template-string.html
  375. script-tag-with-invalid-closing-tag-expected.txt
  376. script-tag-with-invalid-closing-tag.html
  377. script-tag-with-invalid-url-encoding-expected.txt
  378. script-tag-with-invalid-url-encoding.html
  379. script-tag-with-partial-close-expected.txt
  380. script-tag-with-partial-close.html
  381. script-tag-with-source-control-char-expected.txt
  382. script-tag-with-source-control-char.html
  383. script-tag-with-source-data-url-expected.txt
  384. script-tag-with-source-data-url.html
  385. script-tag-with-source-data-url2-expected.txt
  386. script-tag-with-source-data-url2.html
  387. script-tag-with-source-data-url3-expected.txt
  388. script-tag-with-source-data-url3.html
  389. script-tag-with-source-data-url4-expected.txt
  390. script-tag-with-source-data-url4.html
  391. script-tag-with-source-data-url5-expected.txt
  392. script-tag-with-source-data-url5.html
  393. script-tag-with-source-double-quote-expected.txt
  394. script-tag-with-source-double-quote.html
  395. script-tag-with-source-entities-expected.txt
  396. script-tag-with-source-entities.html
  397. script-tag-with-source-expected.txt
  398. script-tag-with-source-implied-host-expected.txt
  399. script-tag-with-source-implied-host.html
  400. script-tag-with-source-no-quote-expected.txt
  401. script-tag-with-source-no-quote.html
  402. script-tag-with-source-null-char-expected.txt
  403. script-tag-with-source-null-char.html
  404. script-tag-with-source-relative-scheme-expected.txt
  405. script-tag-with-source-relative-scheme.html
  406. script-tag-with-source-same-host-expected.txt
  407. script-tag-with-source-same-host-with-query-expected.txt
  408. script-tag-with-source-same-host-with-query.html
  409. script-tag-with-source-same-host.html
  410. script-tag-with-source-unterminated-01-expected.txt
  411. script-tag-with-source-unterminated-01.html
  412. script-tag-with-source-unterminated-02-expected.txt
  413. script-tag-with-source-unterminated-02.html
  414. script-tag-with-source-unterminated-03-expected.txt
  415. script-tag-with-source-unterminated-03.html
  416. script-tag-with-source.html
  417. script-tag-with-three-times-url-encoded-16bit-unicode-expected.txt
  418. script-tag-with-three-times-url-encoded-16bit-unicode.html
  419. script-tag-with-trailing-comment-expected.txt
  420. script-tag-with-trailing-comment-U2028-expected.txt
  421. script-tag-with-trailing-comment-U2028.html
  422. script-tag-with-trailing-comment.html
  423. script-tag-with-trailing-comment2-expected.txt
  424. script-tag-with-trailing-comment2.html
  425. script-tag-with-trailing-comment3-expected.txt
  426. script-tag-with-trailing-comment3.html
  427. script-tag-with-trailing-comment4-expected.txt
  428. script-tag-with-trailing-comment4.html
  429. script-tag-with-trailing-comment5-expected.txt
  430. script-tag-with-trailing-comment5.html
  431. script-tag-with-trailing-comment6-expected.txt
  432. script-tag-with-trailing-comment6.html
  433. script-tag-with-trailing-script-and-urlencode-expected.txt
  434. script-tag-with-trailing-script-and-urlencode.html
  435. script-tag.html
  436. style-attribute-expected.txt
  437. style-attribute.html
  438. svg-animate-clutter-2-expected.txt
  439. svg-animate-clutter-2.html
  440. svg-animate-clutter-expected.txt
  441. svg-animate-clutter.html
  442. svg-animate-expected.txt
  443. svg-animate-href-expected.txt
  444. svg-animate-href.html
  445. svg-animate.html
  446. svg-script-tag-expected.txt
  447. svg-script-tag-href-expected.txt
  448. svg-script-tag-href.html
  449. svg-script-tag.html
  450. viewsource-onmouseover-expected.txt
  451. viewsource-onmouseover.html
  452. viewsource-script-tag-expected.txt
  453. viewsource-script-tag.html
  454. window-open-without-url-should-not-assert-expected.txt
  455. window-open-without-url-should-not-assert.html
  456. xss-filter-bypass-big5-expected.txt
  457. xss-filter-bypass-big5.html
  458. xss-filter-bypass-long-string-expected.txt
  459. xss-filter-bypass-long-string.html
  460. xss-filter-bypass-sjis-expected.txt
  461. xss-filter-bypass-sjis.html
  462. xss-protection-parsing-01-expected.txt
  463. xss-protection-parsing-01.html
  464. xss-protection-parsing-02-expected.txt
  465. xss-protection-parsing-02.html
  466. xss-protection-parsing-03-expected.txt
  467. xss-protection-parsing-03.html
  468. xss-protection-parsing-04-expected.txt
  469. xss-protection-parsing-04.html