Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(43)

Side by Side Diff: LayoutTests/http/tests/security/xssAuditor/malformed-xss-protection-header-4-expected.txt

Issue 20890003: Limit console messages' automatic collection of parser state. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: rebaseline "fast/frames/sandboxed-iframe-autofocus-denied.html" Created 7 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE MESSAGE: line 1: Error parsing header X-XSS-Protection: 1; mode=block-a- block-block: expected semicolon at character position 14. The default protection s will be applied. 1 CONSOLE MESSAGE: Error parsing header X-XSS-Protection: 1; mode=block-a-block-bl ock: expected semicolon at character position 14. The default protections will b e applied.
2 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http:// 127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?notifyDone=1&malfo rmed-header=4&q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script %3E%3Cp%3EIf%20you%20see%20this%20message%20and%20no%20JavaScript%20alert()%20th en%20the%20test%20PASSED.%3C/p%3E' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection ' nor 'Content-Security-Policy' header. 2 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http:// 127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?notifyDone=1&malfo rmed-header=4&q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script %3E%3Cp%3EIf%20you%20see%20this%20message%20and%20no%20JavaScript%20alert()%20th en%20the%20test%20PASSED.%3C/p%3E' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection ' nor 'Content-Security-Policy' header.
3 This tests that the X-XSS-Protection header is not ignored when there is a trail ing garbage after mode=block, and we issue an error 3 This tests that the X-XSS-Protection header is not ignored when there is a trail ing garbage after mode=block, and we issue an error
4 4
5 5
6 6
7 -------- 7 --------
8 Frame: 'frame' 8 Frame: 'frame'
9 -------- 9 --------
10 If you see this message and no JavaScript alert() then the test PASSED. 10 If you see this message and no JavaScript alert() then the test PASSED.
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698