Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(10)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/object-tag-expected.txt

Issue 2428473004: Remove the 'reflected-xss' directive from CSP. (Closed)
Patch Set: Test. Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 CONSOLE ERROR: line 8: The XSS Auditor refused to execute a script in 'http://lo calhost:8000/security/xssAuditor/resources/echo-intertag.pl?wait-for-load=1&q=%3 Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-blink-test -plugin%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/securi ty/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source cod e was found within the request. The auditor was enabled as the server sent neith er an 'X-XSS-Protection' nor 'Content-Security-Policy' header. 1 CONSOLE ERROR: line 8: The XSS Auditor refused to execute a script in 'http://lo calhost:8000/security/xssAuditor/resources/echo-intertag.pl?wait-for-load=1&q=%3 Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-blink-test -plugin%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/securi ty/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source cod e was found within the request. The auditor was enabled as the server did not se nd an 'X-XSS-Protection' header.
2 CONSOLE ERROR: line 8: The XSS Auditor refused to execute a script in 'http://lo calhost:8000/security/xssAuditor/resources/echo-intertag.pl?wait-for-load=1&q=%3 Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-blink-test -plugin%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/securi ty/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source cod e was found within the request. The auditor was enabled as the server sent neith er an 'X-XSS-Protection' nor 'Content-Security-Policy' header. 2 CONSOLE ERROR: line 8: The XSS Auditor refused to execute a script in 'http://lo calhost:8000/security/xssAuditor/resources/echo-intertag.pl?wait-for-load=1&q=%3 Cobject%20id=%27object%27%20name=%27plugin%27%20type=%27application/x-blink-test -plugin%27%3E%3Cparam%20name=%27movie%27%20value=%27http://127.0.0.1:8000/securi ty/xssAuditor/resources/dummy.swf%27%20/%3E%3C/object%3E' because its source cod e was found within the request. The auditor was enabled as the server did not se nd an 'X-XSS-Protection' header.
3 3
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698