Google Git
Sign in
chromium / chromium / src / 4b7f2d40ed547f844c3b42b712f035e90357e1e5 / . / third_party / WebKit / LayoutTests / http / tests / security / xssAuditor
tree: e43604aba62c46042a4529e5961aa36b159b66d9 [path history] [tgz]
  1. intercept/
  2. resources/
  3. anchor-url-dom-write-location-expected.txt
  4. anchor-url-dom-write-location-inline-event-expected.txt
  5. anchor-url-dom-write-location-inline-event-null-char-expected.txt
  6. anchor-url-dom-write-location-inline-event-null-char.html
  7. anchor-url-dom-write-location-inline-event.html
  8. anchor-url-dom-write-location-javascript-URL-expected.txt
  9. anchor-url-dom-write-location-javascript-URL.html
  10. anchor-url-dom-write-location.html
  11. anchor-url-dom-write-location2-expected.txt
  12. anchor-url-dom-write-location2.html
  13. base-href-control-char-expected.txt
  14. base-href-control-char.html
  15. base-href-direct-expected.txt
  16. base-href-direct.html
  17. base-href-expected.txt
  18. base-href-null-char-expected.txt
  19. base-href-null-char.html
  20. base-href-safe-expected.txt
  21. base-href-safe.html
  22. base-href-safe2-expected.txt
  23. base-href-safe2.html
  24. base-href-safe3-expected.txt
  25. base-href-safe3.html
  26. base-href-scheme-relative-expected.txt
  27. base-href-scheme-relative.html
  28. base-href-unterminated-expected.txt
  29. base-href-unterminated.html
  30. base-href.html
  31. block-does-not-leak-location-expected.txt
  32. block-does-not-leak-location.html
  33. block-does-not-leak-referrer-expected.txt
  34. block-does-not-leak-referrer.html
  35. cached-frame-expected.txt
  36. cached-frame.html
  37. chunked-big-script-expected.txt
  38. chunked-big-script.html
  39. cookie-injection-expected.txt
  40. cookie-injection.html
  41. crash-while-loading-tag-with-pause-expected.txt
  42. crash-while-loading-tag-with-pause.html
  43. data-urls-work-expected.txt
  44. data-urls-work.html
  45. dom-write-innerHTML-expected.txt
  46. dom-write-innerHTML.html
  47. dom-write-location-expected.txt
  48. dom-write-location-inline-event-expected.txt
  49. dom-write-location-inline-event.html
  50. dom-write-location-javascript-URL-expected.txt
  51. dom-write-location-javascript-URL.html
  52. dom-write-location.html
  53. dom-write-URL-expected.txt
  54. dom-write-URL.html
  55. embed-tag-code-attribute-2-expected.txt
  56. embed-tag-code-attribute-2.html
  57. embed-tag-code-attribute-expected.txt
  58. embed-tag-code-attribute.html
  59. embed-tag-control-char-expected.txt
  60. embed-tag-control-char.html
  61. embed-tag-expected.txt
  62. embed-tag-in-path-unterminated-expected.txt
  63. embed-tag-in-path-unterminated.html
  64. embed-tag-javascript-url-expected.txt
  65. embed-tag-javascript-url.html
  66. embed-tag-null-char-expected.txt
  67. embed-tag-null-char.html
  68. embed-tag.html
  69. faux-script1-expected.txt
  70. faux-script1.html
  71. faux-script2-expected.txt
  72. faux-script2.html
  73. faux-script3-expected.txt
  74. faux-script3.html
  75. form-action-expected.txt
  76. form-action-unquoted-empty-expected.txt
  77. form-action-unquoted-empty.html
  78. form-action.html
  79. formaction-on-button-expected.txt
  80. formaction-on-button.html
  81. formaction-on-input-expected.txt
  82. formaction-on-input.html
  83. frameset-injection-expected.txt
  84. frameset-injection.html
  85. full-block-base-href-expected.txt
  86. full-block-base-href.html
  87. full-block-get-from-iframe-expected.txt
  88. full-block-get-from-iframe.html
  89. full-block-iframe-javascript-url-expected.txt
  90. full-block-iframe-javascript-url.html
  91. full-block-iframe-no-inherit-expected.txt
  92. full-block-iframe-no-inherit.php
  93. full-block-javascript-link-expected.txt
  94. full-block-javascript-link.html
  95. full-block-link-onclick-expected.txt
  96. full-block-link-onclick.html
  97. full-block-object-tag-expected.txt
  98. full-block-object-tag.html
  99. full-block-post-from-iframe-expected.txt
  100. full-block-post-from-iframe.html
  101. full-block-script-tag-cross-domain-expected.txt
  102. full-block-script-tag-cross-domain.html
  103. full-block-script-tag-expected.txt
  104. full-block-script-tag-with-source-expected.txt
  105. full-block-script-tag-with-source.html
  106. full-block-script-tag.html
  107. get-from-iframe-expected.txt
  108. get-from-iframe.html
  109. html5-import-CORS-expected.txt
  110. html5-import-CORS.html
  111. html5-import-expected.txt
  112. html5-import-list-expected.txt
  113. html5-import-list.html
  114. html5-import-safe-expected.txt
  115. html5-import-safe.html
  116. html5-import-sol-expected.txt
  117. html5-import-sol.html
  118. html5-import.html
  119. iframe-injection-allowed-2-expected.txt
  120. iframe-injection-allowed-2.html
  121. iframe-injection-allowed-3-expected.txt
  122. iframe-injection-allowed-3.html
  123. iframe-injection-allowed-expected.txt
  124. iframe-injection-allowed.html
  125. iframe-injection-expected.txt
  126. iframe-injection.html
  127. iframe-javascript-url-expected.txt
  128. iframe-javascript-url-more-encoding-expected.txt
  129. iframe-javascript-url-more-encoding.html
  130. iframe-javascript-url-twice-url-encode-expected.txt
  131. iframe-javascript-url-twice-url-encode.html
  132. iframe-javascript-url-twice-url-encode2-expected.txt
  133. iframe-javascript-url-twice-url-encode2.html
  134. iframe-javascript-url-twice-url-encode3-expected.txt
  135. iframe-javascript-url-twice-url-encode3.html
  136. iframe-javascript-url-url-encoded-expected.txt
  137. iframe-javascript-url-url-encoded.html
  138. iframe-javascript-url.html
  139. iframe-onload-GBK-char-expected.txt
  140. iframe-onload-GBK-char.html
  141. iframe-onload-in-svg-tag-expected.txt
  142. iframe-onload-in-svg-tag.html
  143. iframe-srcdoc-expected.txt
  144. iframe-srcdoc-property-blocked-expected.txt
  145. iframe-srcdoc-property-blocked.html
  146. iframe-srcdoc.html
  147. img-onerror-accented-char-expected.txt
  148. img-onerror-accented-char.html
  149. img-onerror-GBK-char-expected.txt
  150. img-onerror-GBK-char.html
  151. img-onerror-non-ASCII-char-default-encoding-expected.txt
  152. img-onerror-non-ASCII-char-default-encoding.html
  153. img-onerror-non-ASCII-char-expected.txt
  154. img-onerror-non-ASCII-char.html
  155. img-onerror-non-ASCII-char2-default-encoding-expected.txt
  156. img-onerror-non-ASCII-char2-default-encoding.html
  157. img-onerror-non-ASCII-char2-expected.txt
  158. img-onerror-non-ASCII-char2.html
  159. img-onerror-tricky-expected.txt
  160. img-onerror-tricky.html
  161. img-tag-with-comma-expected.txt
  162. img-tag-with-comma.html
  163. inline-event-HTML-entities-expected.txt
  164. inline-event-HTML-entities.html
  165. javascript-link-ampersand-expected.txt
  166. javascript-link-ampersand.html
  167. javascript-link-control-char-expected.txt
  168. javascript-link-control-char.html
  169. javascript-link-control-char2-expected.txt
  170. javascript-link-control-char2.html
  171. javascript-link-expected.txt
  172. javascript-link-HTML-entities-control-char-expected.txt
  173. javascript-link-HTML-entities-control-char.html
  174. javascript-link-HTML-entities-expected.txt
  175. javascript-link-HTML-entities-named-expected.txt
  176. javascript-link-HTML-entities-named.html
  177. javascript-link-HTML-entities-null-char-expected.txt
  178. javascript-link-HTML-entities-null-char.html
  179. javascript-link-HTML-entities.html
  180. javascript-link-null-char-expected.txt
  181. javascript-link-null-char.html
  182. javascript-link-one-plus-one-expected.txt
  183. javascript-link-one-plus-one.html
  184. javascript-link-safe-expected.txt
  185. javascript-link-safe.html
  186. javascript-link-url-encoded-expected.txt
  187. javascript-link-url-encoded.html
  188. javascript-link.html
  189. link-onclick-ampersand-expected.txt
  190. link-onclick-ampersand.html
  191. link-onclick-control-char-expected.txt
  192. link-onclick-control-char.html
  193. link-onclick-entities-expected.txt
  194. link-onclick-entities.html
  195. link-onclick-expected.txt
  196. link-onclick-null-char-expected.txt
  197. link-onclick-null-char.html
  198. link-onclick.html
  199. link-opens-new-window-expected.txt
  200. link-opens-new-window.html
  201. malformed-HTML-expected.txt
  202. malformed-HTML.html
  203. malformed-xss-protection-header-1-expected.txt
  204. malformed-xss-protection-header-1.html
  205. malformed-xss-protection-header-2-expected.txt
  206. malformed-xss-protection-header-2.html
  207. malformed-xss-protection-header-3-expected.txt
  208. malformed-xss-protection-header-3.html
  209. malformed-xss-protection-header-4-expected.txt
  210. malformed-xss-protection-header-4.html
  211. malformed-xss-protection-header-5-expected.txt
  212. malformed-xss-protection-header-5.html
  213. malformed-xss-protection-header-6-expected.txt
  214. malformed-xss-protection-header-6.html
  215. malformed-xss-protection-header-7-expected.txt
  216. malformed-xss-protection-header-7.html
  217. malformed-xss-protection-header-8-expected.txt
  218. malformed-xss-protection-header-8.html
  219. malformed-xss-protection-header-9-expected.txt
  220. malformed-xss-protection-header-9.html
  221. meta-tag-http-refresh-javascript-url-expected.txt
  222. meta-tag-http-refresh-javascript-url.html
  223. meta-tag-http-refresh-x-frame-options-expected.txt
  224. no-protection-script-tag-expected.txt
  225. no-protection-script-tag.html
  226. non-block-javascript-url-frame-expected.txt
  227. non-block-javascript-url-frame.html
  228. object-embed-tag-control-char-expected.txt
  229. object-embed-tag-control-char.html
  230. object-embed-tag-expected.txt
  231. object-embed-tag-null-char-expected.txt
  232. object-embed-tag-null-char.html
  233. object-embed-tag.html
  234. object-src-inject-expected.txt
  235. object-src-inject.html
  236. object-tag-javascript-url-expected.txt
  237. object-tag-javascript-url.html
  238. object-tag-param-code-expected.txt
  239. object-tag-param-code.html
  240. object-tag-param-data-expected.txt
  241. object-tag-param-data.html
  242. object-tag-param-movie-expected.txt
  243. object-tag-param-movie.html
  244. object-tag-param-src-expected.txt
  245. object-tag-param-src.html
  246. object-tag-param-url-expected.txt
  247. object-tag-param-url.html
  248. open-attribute-body-expected.txt
  249. open-attribute-body.html
  250. open-event-handler-iframe-expected.txt
  251. open-event-handler-iframe.html
  252. open-iframe-src-01-expected.txt
  253. open-iframe-src-01.html
  254. open-iframe-src-02-expected.txt
  255. open-iframe-src-02.html
  256. open-iframe-src-03-expected.txt
  257. open-iframe-src-03.html
  258. open-script-src-01-expected.txt
  259. open-script-src-01.html
  260. open-script-src-02-expected.txt
  261. open-script-src-02.html
  262. open-script-src-03-expected.txt
  263. open-script-src-03.html
  264. open-script-src-04-expected.txt
  265. open-script-src-04.html
  266. post-from-iframe-expected.txt
  267. post-from-iframe.html
  268. property-escape-comment-01-expected.txt
  269. property-escape-comment-01.html
  270. property-escape-comment-02-expected.txt
  271. property-escape-comment-02.html
  272. property-escape-comment-03-expected.txt
  273. property-escape-comment-03.html
  274. property-escape-entity-01-expected.txt
  275. property-escape-entity-01.html
  276. property-escape-entity-02-expected.txt
  277. property-escape-entity-02.html
  278. property-escape-entity-03-expected.txt
  279. property-escape-entity-03.html
  280. property-escape-expected.txt
  281. property-escape-long-expected.txt
  282. property-escape-long.html
  283. property-escape-noquotes-expected.txt
  284. property-escape-noquotes-tab-slash-chars-expected.txt
  285. property-escape-noquotes-tab-slash-chars.html
  286. property-escape-noquotes.html
  287. property-escape-quote-01-expected.txt
  288. property-escape-quote-01.html
  289. property-escape-quote-02-expected.txt
  290. property-escape-quote-02.html
  291. property-escape-quote-03-expected.txt
  292. property-escape-quote-03.html
  293. property-escape.html
  294. property-inject-expected.txt
  295. property-inject.html
  296. reflection-in-path-expected.txt
  297. reflection-in-path.html
  298. report-script-tag-cross-origin-expected.txt
  299. report-script-tag-cross-origin.html
  300. report-script-tag-expected.txt
  301. report-script-tag-full-block-expected.txt
  302. report-script-tag-full-block.html
  303. report-script-tag-replace-state-expected.txt
  304. report-script-tag-replace-state.html
  305. report-script-tag.html
  306. script-tag-addslashes-backslash-expected.txt
  307. script-tag-addslashes-backslash.html
  308. script-tag-addslashes-double-quote-expected.txt
  309. script-tag-addslashes-double-quote.html
  310. script-tag-addslashes-null-char-expected.txt
  311. script-tag-addslashes-null-char.html
  312. script-tag-addslashes-single-quote-expected.txt
  313. script-tag-addslashes-single-quote.html
  314. script-tag-Big5-char-expected.txt
  315. script-tag-Big5-char-twice-url-encode-16bit-unicode-expected.txt
  316. script-tag-Big5-char-twice-url-encode-16bit-unicode.html
  317. script-tag-Big5-char-twice-url-encode-expected.txt
  318. script-tag-Big5-char-twice-url-encode.html
  319. script-tag-Big5-char.html
  320. script-tag-Big5-char2-expected.txt
  321. script-tag-Big5-char2.html
  322. script-tag-control-char-expected.txt
  323. script-tag-control-char.html
  324. script-tag-convoluted-expected.txt
  325. script-tag-convoluted.html
  326. script-tag-entities-expected.txt
  327. script-tag-entities.html
  328. script-tag-expected.txt
  329. script-tag-expression-follows-expected.txt
  330. script-tag-expression-follows.html
  331. script-tag-inside-svg-tag-expected.txt
  332. script-tag-inside-svg-tag.html
  333. script-tag-inside-svg-tag2-expected.txt
  334. script-tag-inside-svg-tag2.html
  335. script-tag-inside-svg-tag3-expected.txt
  336. script-tag-inside-svg-tag3.html
  337. script-tag-inside-svg-tag4-expected.txt
  338. script-tag-inside-svg-tag4.html
  339. script-tag-near-start-expected.txt
  340. script-tag-near-start.html
  341. script-tag-null-char-expected.txt
  342. script-tag-null-char.html
  343. script-tag-open-redirect-expected.txt
  344. script-tag-open-redirect.html
  345. script-tag-post-control-char-expected.txt
  346. script-tag-post-control-char.html
  347. script-tag-post-expected.txt
  348. script-tag-post-null-char-expected.txt
  349. script-tag-post-null-char.html
  350. script-tag-post-redirect-expected.txt
  351. script-tag-post-redirect.html
  352. script-tag-post.html
  353. script-tag-redirect-expected.txt
  354. script-tag-redirect.html
  355. script-tag-replaced-with-questionmark-expected.txt
  356. script-tag-replaced-with-questionmark.html
  357. script-tag-safe-expected.txt
  358. script-tag-safe.html
  359. script-tag-safe2-expected.txt
  360. script-tag-safe2.html
  361. script-tag-safe3-expected.txt
  362. script-tag-safe3.html
  363. script-tag-safe4-expected.txt
  364. script-tag-safe4.html
  365. script-tag-src-redirect-safe-expected.txt
  366. script-tag-src-redirect-safe.html
  367. script-tag-with-16bit-unicode-expected.txt
  368. script-tag-with-16bit-unicode-surrogate-pair-expected.txt
  369. script-tag-with-16bit-unicode-surrogate-pair.html
  370. script-tag-with-16bit-unicode.html
  371. script-tag-with-16bit-unicode2-expected.txt
  372. script-tag-with-16bit-unicode2.html
  373. script-tag-with-16bit-unicode3-expected.txt
  374. script-tag-with-16bit-unicode3.html
  375. script-tag-with-16bit-unicode4-expected.txt
  376. script-tag-with-16bit-unicode4.html
  377. script-tag-with-16bit-unicode5-expected.txt
  378. script-tag-with-16bit-unicode5.html
  379. script-tag-with-actual-comma-expected.txt
  380. script-tag-with-actual-comma.html
  381. script-tag-with-callbacks-expected.txt
  382. script-tag-with-callbacks.html
  383. script-tag-with-comma-01-expected.txt
  384. script-tag-with-comma-01.html
  385. script-tag-with-comma-02-expected.txt
  386. script-tag-with-comma-02.html
  387. script-tag-with-fancy-unicode-expected.txt
  388. script-tag-with-fancy-unicode.html
  389. script-tag-with-injected-comment-expected.txt
  390. script-tag-with-injected-comment.html
  391. script-tag-with-injected-template-string-expected.txt
  392. script-tag-with-injected-template-string.html
  393. script-tag-with-invalid-closing-tag-expected.txt
  394. script-tag-with-invalid-closing-tag.html
  395. script-tag-with-invalid-url-encoding-expected.txt
  396. script-tag-with-invalid-url-encoding.html
  397. script-tag-with-partial-close-expected.txt
  398. script-tag-with-partial-close.html
  399. script-tag-with-source-control-char-expected.txt
  400. script-tag-with-source-control-char.html
  401. script-tag-with-source-data-url-expected.txt
  402. script-tag-with-source-data-url.html
  403. script-tag-with-source-data-url2-expected.txt
  404. script-tag-with-source-data-url2.html
  405. script-tag-with-source-data-url3-expected.txt
  406. script-tag-with-source-data-url3.html
  407. script-tag-with-source-data-url4-expected.txt
  408. script-tag-with-source-data-url4.html
  409. script-tag-with-source-data-url5-expected.txt
  410. script-tag-with-source-data-url5.html
  411. script-tag-with-source-double-quote-expected.txt
  412. script-tag-with-source-double-quote.html
  413. script-tag-with-source-entities-expected.txt
  414. script-tag-with-source-entities.html
  415. script-tag-with-source-expected.txt
  416. script-tag-with-source-implied-host-expected.txt
  417. script-tag-with-source-implied-host.html
  418. script-tag-with-source-no-quote-expected.txt
  419. script-tag-with-source-no-quote.html
  420. script-tag-with-source-null-char-expected.txt
  421. script-tag-with-source-null-char.html
  422. script-tag-with-source-relative-scheme-expected.txt
  423. script-tag-with-source-relative-scheme.html
  424. script-tag-with-source-same-host-expected.txt
  425. script-tag-with-source-same-host-with-query-expected.txt
  426. script-tag-with-source-same-host-with-query.html
  427. script-tag-with-source-same-host.html
  428. script-tag-with-source-unterminated-01-expected.txt
  429. script-tag-with-source-unterminated-01.html
  430. script-tag-with-source-unterminated-02-expected.txt
  431. script-tag-with-source-unterminated-02.html
  432. script-tag-with-source-unterminated-03-expected.txt
  433. script-tag-with-source-unterminated-03.html
  434. script-tag-with-source.html
  435. script-tag-with-three-times-url-encoded-16bit-unicode-expected.txt
  436. script-tag-with-three-times-url-encoded-16bit-unicode.html
  437. script-tag-with-trailing-comment-expected.txt
  438. script-tag-with-trailing-comment-U2028-expected.txt
  439. script-tag-with-trailing-comment-U2028.html
  440. script-tag-with-trailing-comment.html
  441. script-tag-with-trailing-comment2-expected.txt
  442. script-tag-with-trailing-comment2.html
  443. script-tag-with-trailing-comment3-expected.txt
  444. script-tag-with-trailing-comment3.html
  445. script-tag-with-trailing-comment4-expected.txt
  446. script-tag-with-trailing-comment4.html
  447. script-tag-with-trailing-comment5-expected.txt
  448. script-tag-with-trailing-comment5.html
  449. script-tag-with-trailing-comment6-expected.txt
  450. script-tag-with-trailing-comment6.html
  451. script-tag-with-trailing-script-and-urlencode-expected.txt
  452. script-tag-with-trailing-script-and-urlencode.html
  453. script-tag.html
  454. svg-animate-clutter-2-expected.txt
  455. svg-animate-clutter-2.html
  456. svg-animate-clutter-expected.txt
  457. svg-animate-clutter.html
  458. svg-animate-expected.txt
  459. svg-animate-href-expected.txt
  460. svg-animate-href.html
  461. svg-animate.html
  462. svg-script-tag-expected.txt
  463. svg-script-tag-href-expected.txt
  464. svg-script-tag-href.html
  465. svg-script-tag.html
  466. viewsource-onmouseover-expected.txt
  467. viewsource-onmouseover.html
  468. viewsource-script-tag-expected.txt
  469. viewsource-script-tag.html
  470. window-open-without-url-should-not-assert-expected.txt
  471. window-open-without-url-should-not-assert.html
  472. xss-filter-bypass-big5-expected.txt
  473. xss-filter-bypass-big5.html
  474. xss-filter-bypass-long-string-expected.txt
  475. xss-filter-bypass-long-string.html
  476. xss-filter-bypass-sjis-expected.txt
  477. xss-filter-bypass-sjis.html
  478. xss-protection-parsing-01-expected.txt
  479. xss-protection-parsing-01.html
  480. xss-protection-parsing-02-expected.txt
  481. xss-protection-parsing-02.html
  482. xss-protection-parsing-03-expected.txt
  483. xss-protection-parsing-03.html
  484. xss-protection-parsing-04-expected.txt
  485. xss-protection-parsing-04.html