Index: LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl |
diff --git a/LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl b/LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl |
index 61b60373a15821de589286f1b5726b7f8defb6fc..8e3a5f01792953111e95fa98bd85ad5d178cd20e 100755 |
--- a/LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl |
+++ b/LayoutTests/http/tests/security/xssAuditor/resources/echo-intertag.pl |
@@ -92,7 +92,10 @@ if ($cgi->param('inHead')) { |
if ($cgi->param('replaceState')) { |
print "<script>history.replaceState({}, '', '#must-not-appear');</script>\n"; |
} |
-print $cgi->param('q'); |
+print $cgi->param('q'); # XSS reflected here. |
+if ($cgi->param('script-expression-follows')) { |
+ print "\n <script>42;</script>\n"; |
+} |
if ($cgi->param('clutter')) { |
print $cgi->param('clutter'); |
} |