Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(123)

Side by Side Diff: LayoutTests/http/tests/security/xssAuditor/svg-animate-expected.txt

Issue 24255018: Side three of two-sided patch for URL encoding. Restores tests expectations. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Missing two platform origin-exact-matching-expected.txt files Created 7 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http:// localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%20xmlns:x link='http://www.w3.org/1999/xlink'%3E%3Ca%3E%3Ccircle%20r=100%20/%3E%3Canimate% 20attributeName=xlink:href%20values=%3Bjavascript%3Aalert(1)%20begin=0s%20end=0. 1s%20fill=freeze%20/%3E%3C/a%3E%3C/svg%3E&notifyDone=1&dumpElementBySelector=ani mate' because its source code was found within the request. The auditor was enab led as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Polic y' header. 1 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http:// localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%20xmlns:x link=%27http://www.w3.org/1999/xlink%27%3E%3Ca%3E%3Ccircle%20r=100%20/%3E%3Canim ate%20attributeName=xlink:href%20values=%3Bjavascript%3Aalert(1)%20begin=0s%20en d=0.1s%20fill=freeze%20/%3E%3C/a%3E%3C/svg%3E&notifyDone=1&dumpElementBySelector =animate' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-P olicy' header.
2 This test passes if the element displayed in the frame below has a 'values' attr ibute containing only 'javascript:void(0)'. 2 This test passes if the element displayed in the frame below has a 'values' attr ibute containing only 'javascript:void(0)'.
3 3
4 4
5 5
6 -------- 6 --------
7 Frame: '<!--framePath //<!--frame0-->-->' 7 Frame: '<!--framePath //<!--frame0-->-->'
8 -------- 8 --------
9 animate => animate 9 animate => animate
10 * attributeName: xlink:href 10 * attributeName: xlink:href
11 * values: javascript:void(0) 11 * values: javascript:void(0)
12 * begin: 0s 12 * begin: 0s
13 * end: 0.1s 13 * end: 0.1s
14 * fill: freeze 14 * fill: freeze
15 15
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698