tree: 86fddda43b303da9865657b210607bc2000bf849 [path history] [tgz]
  1. resources/
  2. anchor-url-dom-write-location-expected.txt
  3. anchor-url-dom-write-location-inline-event-expected.txt
  4. anchor-url-dom-write-location-inline-event-null-char-expected.txt
  5. anchor-url-dom-write-location-inline-event-null-char.html
  6. anchor-url-dom-write-location-inline-event.html
  7. anchor-url-dom-write-location-javascript-URL-expected.txt
  8. anchor-url-dom-write-location-javascript-URL.html
  9. anchor-url-dom-write-location.html
  10. anchor-url-dom-write-location2-expected.txt
  11. anchor-url-dom-write-location2.html
  12. base-href-control-char-expected.txt
  13. base-href-control-char.html
  14. base-href-direct-expected.txt
  15. base-href-direct.html
  16. base-href-expected.txt
  17. base-href-null-char-expected.txt
  18. base-href-null-char.html
  19. base-href-safe-expected.txt
  20. base-href-safe.html
  21. base-href-safe2-expected.txt
  22. base-href-safe2.html
  23. base-href-safe3-expected.txt
  24. base-href-safe3.html
  25. base-href-scheme-relative-expected.txt
  26. base-href-scheme-relative.html
  27. base-href.html
  28. cookie-injection-expected.txt
  29. cookie-injection.html
  30. crash-while-loading-tag-with-pause-expected.txt
  31. crash-while-loading-tag-with-pause.html
  32. data-urls-work-expected.txt
  33. data-urls-work.html
  34. dom-write-innerHTML-expected.txt
  35. dom-write-innerHTML.html
  36. dom-write-location-expected.txt
  37. dom-write-location-inline-event-expected.txt
  38. dom-write-location-inline-event.html
  39. dom-write-location-javascript-URL-expected.txt
  40. dom-write-location-javascript-URL.html
  41. dom-write-location.html
  42. dom-write-URL-expected.txt
  43. dom-write-URL.html
  44. embed-tag-code-attribute-2-expected.txt
  45. embed-tag-code-attribute-2.html
  46. embed-tag-code-attribute-expected.txt
  47. embed-tag-code-attribute.html
  48. embed-tag-control-char-expected.txt
  49. embed-tag-control-char.html
  50. embed-tag-expected.txt
  51. embed-tag-javascript-url-expected.txt
  52. embed-tag-javascript-url.html
  53. embed-tag-null-char-expected.txt
  54. embed-tag-null-char.html
  55. embed-tag.html
  56. faux-script1-expected.txt
  57. faux-script1.html
  58. faux-script2-expected.txt
  59. faux-script2.html
  60. faux-script3-expected.txt
  61. faux-script3.html
  62. form-action-expected.txt
  63. form-action.html
  64. full-block-base-href-expected.txt
  65. full-block-base-href.html
  66. full-block-get-from-iframe-expected.txt
  67. full-block-get-from-iframe.html
  68. full-block-iframe-javascript-url-expected.txt
  69. full-block-iframe-javascript-url.html
  70. full-block-iframe-no-inherit-expected.txt
  71. full-block-iframe-no-inherit.php
  72. full-block-javascript-link-expected.txt
  73. full-block-javascript-link.html
  74. full-block-link-onclick-expected.txt
  75. full-block-link-onclick.html
  76. full-block-object-tag-expected.txt
  77. full-block-object-tag.html
  78. full-block-post-from-iframe-expected.txt
  79. full-block-post-from-iframe.html
  80. full-block-script-tag-expected.txt
  81. full-block-script-tag-with-source-expected.txt
  82. full-block-script-tag-with-source.html
  83. full-block-script-tag.html
  84. get-from-iframe-expected.txt
  85. get-from-iframe.html
  86. iframe-injection-expected.txt
  87. iframe-injection.html
  88. iframe-javascript-url-expected.txt
  89. iframe-javascript-url-more-encoding-expected.txt
  90. iframe-javascript-url-more-encoding.html
  91. iframe-javascript-url-twice-url-encode-expected.txt
  92. iframe-javascript-url-twice-url-encode.html
  93. iframe-javascript-url-twice-url-encode2-expected.txt
  94. iframe-javascript-url-twice-url-encode2.html
  95. iframe-javascript-url-twice-url-encode3-expected.txt
  96. iframe-javascript-url-twice-url-encode3.html
  97. iframe-javascript-url-url-encoded-expected.txt
  98. iframe-javascript-url-url-encoded.html
  99. iframe-javascript-url.html
  100. iframe-onload-GBK-char-expected.txt
  101. iframe-onload-GBK-char.html
  102. iframe-onload-in-svg-tag-expected.txt
  103. iframe-onload-in-svg-tag.html
  104. iframe-srcdoc-expected.txt
  105. iframe-srcdoc.html
  106. img-onerror-accented-char-expected.txt
  107. img-onerror-accented-char.html
  108. img-onerror-GBK-char-expected.txt
  109. img-onerror-GBK-char.html
  110. img-onerror-non-ASCII-char-default-encoding-expected.txt
  111. img-onerror-non-ASCII-char-default-encoding.html
  112. img-onerror-non-ASCII-char-expected.txt
  113. img-onerror-non-ASCII-char.html
  114. img-onerror-non-ASCII-char2-default-encoding-expected.txt
  115. img-onerror-non-ASCII-char2-default-encoding.html
  116. img-onerror-non-ASCII-char2-expected.txt
  117. img-onerror-non-ASCII-char2.html
  118. img-onerror-tricky-expected.txt
  119. img-onerror-tricky.html
  120. inline-event-HTML-entities-expected.txt
  121. inline-event-HTML-entities.html
  122. javascript-link-ampersand-expected.txt
  123. javascript-link-ampersand.html
  124. javascript-link-control-char-expected.txt
  125. javascript-link-control-char.html
  126. javascript-link-control-char2-expected.txt
  127. javascript-link-control-char2.html
  128. javascript-link-expected.txt
  129. javascript-link-HTML-entities-control-char-expected.txt
  130. javascript-link-HTML-entities-control-char.html
  131. javascript-link-HTML-entities-expected.txt
  132. javascript-link-HTML-entities-named-expected.txt
  133. javascript-link-HTML-entities-named.html
  134. javascript-link-HTML-entities-null-char-expected.txt
  135. javascript-link-HTML-entities-null-char.html
  136. javascript-link-HTML-entities.html
  137. javascript-link-null-char-expected.txt
  138. javascript-link-null-char.html
  139. javascript-link-one-plus-one-expected.txt
  140. javascript-link-one-plus-one.html
  141. javascript-link-safe-expected.txt
  142. javascript-link-safe.html
  143. javascript-link-url-encoded-expected.txt
  144. javascript-link-url-encoded.html
  145. javascript-link.html
  146. link-onclick-ampersand-expected.txt
  147. link-onclick-ampersand.html
  148. link-onclick-control-char-expected.txt
  149. link-onclick-control-char.html
  150. link-onclick-entities-expected.txt
  151. link-onclick-entities.html
  152. link-onclick-expected.txt
  153. link-onclick-null-char-expected.txt
  154. link-onclick-null-char.html
  155. link-onclick.html
  156. link-opens-new-window-expected.txt
  157. link-opens-new-window.html
  158. malformed-HTML-expected.txt
  159. malformed-HTML.html
  160. malformed-xss-protection-header-expected.txt
  161. malformed-xss-protection-header.html
  162. meta-tag-http-refresh-javascript-url-expected.txt
  163. meta-tag-http-refresh-javascript-url.html
  164. meta-tag-http-refresh-x-frame-options-expected.txt
  165. meta-tag-http-refresh-x-frame-options.html
  166. no-protection-script-tag-expected.txt
  167. no-protection-script-tag.html
  168. non-block-javascript-url-frame-expected.txt
  169. non-block-javascript-url-frame.html
  170. object-embed-tag-control-char-expected.txt
  171. object-embed-tag-control-char.html
  172. object-embed-tag-expected.txt
  173. object-embed-tag-null-char-expected.txt
  174. object-embed-tag-null-char.html
  175. object-embed-tag.html
  176. object-src-inject-expected.txt
  177. object-src-inject.html
  178. object-tag-expected.txt
  179. object-tag-javascript-url-expected.txt
  180. object-tag-javascript-url.html
  181. object-tag.html
  182. open-attribute-body-expected.txt
  183. open-attribute-body.html
  184. open-event-handler-iframe-expected.txt
  185. open-event-handler-iframe.html
  186. open-iframe-src-expected.txt
  187. open-iframe-src.html
  188. open-script-src-expected.txt
  189. open-script-src.html
  190. post-from-iframe-expected.txt
  191. post-from-iframe.html
  192. property-escape-comment-expected.txt
  193. property-escape-comment.html
  194. property-escape-entity-expected.txt
  195. property-escape-entity.html
  196. property-escape-expected.txt
  197. property-escape-long-expected.txt
  198. property-escape-long.html
  199. property-escape-noquotes-expected.txt
  200. property-escape-noquotes-tab-slash-chars-expected.txt
  201. property-escape-noquotes-tab-slash-chars.html
  202. property-escape-noquotes.html
  203. property-escape-quote-expected.txt
  204. property-escape-quote.html
  205. property-escape.html
  206. property-inject-expected.txt
  207. property-inject.html
  208. script-tag-addslashes-backslash-expected.txt
  209. script-tag-addslashes-backslash.html
  210. script-tag-addslashes-double-quote-expected.txt
  211. script-tag-addslashes-double-quote.html
  212. script-tag-addslashes-null-char-expected.txt
  213. script-tag-addslashes-null-char.html
  214. script-tag-addslashes-single-quote-expected.txt
  215. script-tag-addslashes-single-quote.html
  216. script-tag-Big5-char-expected.txt
  217. script-tag-Big5-char-twice-url-encode-16bit-unicode-expected.txt
  218. script-tag-Big5-char-twice-url-encode-16bit-unicode.html
  219. script-tag-Big5-char-twice-url-encode-expected.txt
  220. script-tag-Big5-char-twice-url-encode.html
  221. script-tag-Big5-char.html
  222. script-tag-Big5-char2-expected.txt
  223. script-tag-Big5-char2.html
  224. script-tag-control-char-expected.txt
  225. script-tag-control-char.html
  226. script-tag-convoluted-expected.txt
  227. script-tag-convoluted.html
  228. script-tag-entities-expected.txt
  229. script-tag-entities.html
  230. script-tag-expected.txt
  231. script-tag-inside-svg-tag-expected.txt
  232. script-tag-inside-svg-tag.html
  233. script-tag-inside-svg-tag2-expected.txt
  234. script-tag-inside-svg-tag2.html
  235. script-tag-inside-svg-tag3-expected.txt
  236. script-tag-inside-svg-tag3.html
  237. script-tag-null-char-expected.txt
  238. script-tag-null-char.html
  239. script-tag-open-redirect-expected.txt
  240. script-tag-open-redirect.html
  241. script-tag-post-control-char-expected.txt
  242. script-tag-post-control-char.html
  243. script-tag-post-expected.txt
  244. script-tag-post-null-char-expected.txt
  245. script-tag-post-null-char.html
  246. script-tag-post.html
  247. script-tag-redirect-expected.txt
  248. script-tag-redirect.html
  249. script-tag-safe-expected.txt
  250. script-tag-safe.html
  251. script-tag-safe2-expected.txt
  252. script-tag-safe2.html
  253. script-tag-safe3-expected.txt
  254. script-tag-safe3.html
  255. script-tag-safe4-expected.txt
  256. script-tag-safe4.html
  257. script-tag-src-redirect-safe-expected.txt
  258. script-tag-src-redirect-safe.html
  259. script-tag-with-16bit-unicode-expected.txt
  260. script-tag-with-16bit-unicode-surrogate-pair-expected.txt
  261. script-tag-with-16bit-unicode-surrogate-pair.html
  262. script-tag-with-16bit-unicode.html
  263. script-tag-with-16bit-unicode2-expected.txt
  264. script-tag-with-16bit-unicode2.html
  265. script-tag-with-16bit-unicode3-expected.txt
  266. script-tag-with-16bit-unicode3.html
  267. script-tag-with-16bit-unicode4-expected.txt
  268. script-tag-with-16bit-unicode4.html
  269. script-tag-with-16bit-unicode5-expected.txt
  270. script-tag-with-16bit-unicode5.html
  271. script-tag-with-callbacks-expected.txt
  272. script-tag-with-callbacks.html
  273. script-tag-with-comma-expected.txt
  274. script-tag-with-comma.html
  275. script-tag-with-fancy-unicode-expected.txt
  276. script-tag-with-fancy-unicode.html
  277. script-tag-with-invalid-closing-tag-expected.txt
  278. script-tag-with-invalid-closing-tag.html
  279. script-tag-with-invalid-url-encoding-expected.txt
  280. script-tag-with-invalid-url-encoding.html
  281. script-tag-with-source-control-char-expected.txt
  282. script-tag-with-source-control-char.html
  283. script-tag-with-source-data-url-expected.txt
  284. script-tag-with-source-data-url.html
  285. script-tag-with-source-data-url2-expected.txt
  286. script-tag-with-source-data-url2.html
  287. script-tag-with-source-double-quote-expected.txt
  288. script-tag-with-source-double-quote.html
  289. script-tag-with-source-entities-expected.txt
  290. script-tag-with-source-entities.html
  291. script-tag-with-source-expected.txt
  292. script-tag-with-source-no-quote-expected.txt
  293. script-tag-with-source-no-quote.html
  294. script-tag-with-source-null-char-expected.txt
  295. script-tag-with-source-null-char.html
  296. script-tag-with-source-relative-scheme-expected.txt
  297. script-tag-with-source-relative-scheme.html
  298. script-tag-with-source-same-host-expected.txt
  299. script-tag-with-source-same-host-with-query-expected.txt
  300. script-tag-with-source-same-host-with-query.html
  301. script-tag-with-source-same-host.html
  302. script-tag-with-source-unterminated-expected.txt
  303. script-tag-with-source-unterminated.html
  304. script-tag-with-source.html
  305. script-tag-with-three-times-url-encoded-16bit-unicode-expected.txt
  306. script-tag-with-three-times-url-encoded-16bit-unicode.html
  307. script-tag-with-trailing-comment-expected.txt
  308. script-tag-with-trailing-comment-U2028-expected.txt
  309. script-tag-with-trailing-comment-U2028.html
  310. script-tag-with-trailing-comment.html
  311. script-tag-with-trailing-comment2-expected.txt
  312. script-tag-with-trailing-comment2.html
  313. script-tag-with-trailing-comment3-expected.txt
  314. script-tag-with-trailing-comment3.html
  315. script-tag-with-trailing-comment4-expected.txt
  316. script-tag-with-trailing-comment4.html
  317. script-tag.html
  318. window-open-without-url-should-not-assert-expected.txt
  319. window-open-without-url-should-not-assert.html
  320. xss-filter-bypass-big5-expected.txt
  321. xss-filter-bypass-big5.html
  322. xss-filter-bypass-long-string-expected.txt
  323. xss-filter-bypass-long-string.html
  324. xss-filter-bypass-sjis-expected.txt
  325. xss-filter-bypass-sjis.html
  326. xss-protection-parsing-01-expected.txt
  327. xss-protection-parsing-01.html