Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(751)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/svg-animate-href-expected.txt

Issue 1681553002: Add support for 'href' (w/o XLink NS) for various SVG elements (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Rebase; update comment Created 4 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://lo calhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%20xmlns:xli nk=%27http://www.w3.org/1999/xlink%27%3E%3Ca%3E%3Ccircle%20r=100%20/%3E%3Canimat e%20attributeName=xlink:href%20values=%3Bjavascript%3Aalert(1)%20begin=0s%20end= 0.1s%20fill=freeze%20/%3E%3C/a%3E%3C/svg%3E&notifyDone=1&dumpElementBySelector=a nimate' because its source code was found within the request. The auditor was en abled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Pol icy' header. 1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://lo calhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%3E%3Ca%3E%3 Ccircle%20r=100%20/%3E%3Canimate%20attributeName=href%20values=%3Bjavascript%3Aa lert(1)%20begin=0s%20end=0.1s%20fill=freeze%20/%3E%3C/a%3E%3C/svg%3E&notifyDone= 1&dumpElementBySelector=animate' because its source code was found within the re quest. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.
2 CONSOLE WARNING: SVG's SMIL animations (<animate>, <set>, etc.) are deprecated a nd will be removed. Please use CSS animations or Web animations instead. 2 CONSOLE WARNING: SVG's SMIL animations (<animate>, <set>, etc.) are deprecated a nd will be removed. Please use CSS animations or Web animations instead.
3 This test passes if the element displayed in the frame below has a 'values' attr ibute containing only 'javascript:void(0)'. 3 This test passes if the element displayed in the frame below has a 'values' attr ibute containing only 'javascript:void(0)'.
4 4
5 5
6 6
7 -------- 7 --------
8 Frame: '<!--framePath //<!--frame0-->-->' 8 Frame: '<!--framePath //<!--frame0-->-->'
9 -------- 9 --------
10 animate => animate 10 animate => animate
11 * attributeName: xlink:href 11 * attributeName: href
12 * values: javascript:void(0) 12 * values: javascript:void(0)
13 * begin: 0s 13 * begin: 0s
14 * end: 0.1s 14 * end: 0.1s
15 * fill: freeze 15 * fill: freeze
16 Page rendered here. 16 Page rendered here.
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698