Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(221)

Side by Side Diff: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/reflected-xss-and-xss-protection-invalid-invalid-expected.txt

Issue 20890003: Limit console messages' automatic collection of parser state. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: rebaseline "fast/frames/sandboxed-iframe-autofocus-denied.html" Created 7 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE MESSAGE: The 'reflected-xss' Content Security Policy directive has the i nvalid value "invalid". Valid values are "allow", "filter", and "block". 1 CONSOLE MESSAGE: The 'reflected-xss' Content Security Policy directive has the i nvalid value "invalid". Valid values are "allow", "filter", and "block".
2 CONSOLE MESSAGE: line 1: Error parsing header X-XSS-Protection: 1234567890123456 7: expected semicolon at character position 2. The default protections will be a pplied. 2 CONSOLE MESSAGE: Error parsing header X-XSS-Protection: 12345678901234567: expec ted semicolon at character position 2. The default protections will be applied.
3 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http:// 127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Cscript%3Ealer t(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=invalid&malformed-header =1' because its source code was found within the request. The auditor was enable d as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header. 3 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http:// 127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Cscript%3Ealer t(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=invalid&malformed-header =1' because its source code was found within the request. The auditor was enable d as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.
4 ALERT: Loaded http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=inv alid&malformed-header=1 into the IFrame. 4 ALERT: Loaded http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=inv alid&malformed-header=1 into the IFrame.
5 Testing behavior when "reflected-xss" is set to invalid, and "X-XSS-Protection" is set to invalid. 5 Testing behavior when "reflected-xss" is set to invalid, and "X-XSS-Protection" is set to invalid.
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698