Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(618)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/xss-protection-parsing-04.html

Issue 2425663002: Add an error page for resources blocked via XSS Auditor. (Closed)
Patch Set: Test. Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <!DOCTYPE html> 1 <!DOCTYPE html>
2 <html> 2 <html>
3 <head> 3 <head>
4 <script src="http://localhost:8000/security/xssAuditor/resources/utilities.js">< /script> 4 <script src="http://localhost:8000/security/xssAuditor/resources/utilities.js">< /script>
5 <script> 5 <script>
6 if (window.testRunner) { 6 if (window.testRunner) {
7 testRunner.dumpAsText(); 7 testRunner.dumpAsText();
8 testRunner.dumpChildFramesAsText(); 8 testRunner.dumpChildFramesAsText();
9 testRunner.waitUntilDone(); 9 testRunner.waitUntilDone();
10 testRunner.setXSSAuditorEnabled(true); 10 testRunner.setXSSAuditorEnabled(true);
11 } 11 }
12 </script> 12 </script>
13 </head> 13 </head>
14 <body> 14 <body>
15 <p>This tests that the X-XSS-Protection header is not ignored when the report an d mode directives are swapped.</p> 15 <p>This tests that the X-XSS-Protection header is not ignored when the report an d mode directives are swapped.</p>
16 <iframe id="frame" name="frame" onload="checkIfFrameLocationMatchesSrcAndCallDon e('frame')" src="http://127.0.0.1:8000/security/xssAuditor/resources/echo-intert ag.pl?notifyDone=1&valid-header=4&q=<script>alert(String.fromCharCode(0x58,0x53, 0x53))</script><p>If you see this message and no JavaScript alert() then the tes t PASSED.</p>"> 16 <iframe id="frame" name="frame" onload="checkFrameIsCrossOriginAndCallDone('fram e')" src="http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?n otifyDone=1&valid-header=4&q=<script>alert(String.fromCharCode(0x58,0x53,0x53))< /script><p>If you see this message and no JavaScript alert() then the test PASSE D.</p>">
17 </iframe> 17 </iframe>
18 </body> 18 </body>
19 </html> 19 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698