| OLD | NEW |
| 1 <?php | 1 <?php |
| 2 header("X-XSS-Protection: 1; mode=block"); | 2 header("X-XSS-Protection: 1; mode=block"); |
| 3 ?> | 3 ?> |
| 4 <!DOCTYPE html> | 4 <!DOCTYPE html> |
| 5 <html> | 5 <html> |
| 6 <head> | 6 <head> |
| 7 <script src="http://127.0.0.1:8000/security/xssAuditor/resources/utilities.js"><
/script> | 7 <script src="http://127.0.0.1:8000/security/xssAuditor/resources/utilities.js"><
/script> |
| 8 <script> | 8 <script> |
| 9 if (window.testRunner) { | 9 if (window.testRunner) { |
| 10 testRunner.dumpAsText(); | 10 testRunner.dumpAsText(); |
| 11 testRunner.dumpChildFramesAsText(); | 11 testRunner.dumpChildFramesAsText(); |
| 12 testRunner.waitUntilDone(); | 12 testRunner.waitUntilDone(); |
| 13 testRunner.setXSSAuditorEnabled(true); | 13 testRunner.setXSSAuditorEnabled(true); |
| 14 } | 14 } |
| 15 </script> | 15 </script> |
| 16 </head> | 16 </head> |
| 17 <body> | 17 <body> |
| 18 <p>This tests that the header X-XSS-Protection is not inherited by the iframe be
low:</p> | 18 <p>This tests that the header X-XSS-Protection is not inherited by the iframe be
low:</p> |
| 19 <iframe id="frame" name="frame" onload="checkIfFrameLocationMatchesSrcAndCallDon
e('frame')" src="http://127.0.0.1:8000/security/xssAuditor/resources/echo-intert
ag.pl?q=<script>alert(/XSS/)</script><p>If you see this message and no JavaScrip
t alert() then the test PASSED.</p>"> | 19 <iframe id="frame" onload="checkIfFrameLocationMatchesSrcAndCallDone('frame')" s
rc="http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?q=<scri
pt>alert(/XSS/)</script><p>If you see this message and no JavaScript alert() the
n the test PASSED.</p>"> |
| 20 </iframe> | 20 </iframe> |
| 21 </body> | 21 </body> |
| 22 </html> | 22 </html> |
| OLD | NEW |