Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(115)

Unified Diff: LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode.html

Issue 1310153004: Off by one in XSSAuditor::canonicalizedSnippetForJavaScript() (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 5 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode-expected.txt » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode.html
diff --git a/LayoutTests/http/tests/security/xssAuditor/link-onclick-ampersand.html b/LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode.html
similarity index 79%
copy from LayoutTests/http/tests/security/xssAuditor/link-onclick-ampersand.html
copy to LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode.html
index 73735304aa369efcc63b96e7e17d6983ab32af7f..5c013b68d8c46805bdef804f6d866a971dee5491 100644
--- a/LayoutTests/http/tests/security/xssAuditor/link-onclick-ampersand.html
+++ b/LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode.html
@@ -9,7 +9,7 @@ if (window.testRunner) {
</script>
</head>
<body>
-<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=<a%20onclick='alert(1%261)'>Click</a>">
+<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=<script>alert(/xss/)-1%2502<script</script>">
</iframe>
</body>
</html>
« no previous file with comments | « no previous file | LayoutTests/http/tests/security/xssAuditor/script-tag-with-trailing-script-and-urlencode-expected.txt » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698