Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(6)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/dom-write-location-javascript-URL.html

Issue 2524013002: XSS Auditor: Block by default. (Closed)
Patch Set: Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 <!DOCTYPE html> 1 <!DOCTYPE html>
2 <html> 2 <html>
3 <head> 3 <head>
4 <script> 4 <script>
5 if (window.testRunner) { 5 if (window.testRunner) {
6 testRunner.dumpAsText(); 6 testRunner.dumpAsText();
7 testRunner.waitUntilDone(); 7 testRunner.waitUntilDone();
8 testRunner.setXSSAuditorEnabled(true); 8 testRunner.setXSSAuditorEnabled(true);
9 } 9 }
10 </script> 10 </script>
11 </head> 11 </head>
12 <body> 12 <body>
13 <iframe src='http://localhost:8000/security/xssAuditor/resources/anchor-url-dom- write-location-click.html?%3Ca%20id=%22anchorLink%22%20href=%22javascript:alert( String.fromCharCode(0x58,0x53,0x53))%22%3EClick%3C/a%3E'> 13 <iframe src='http://localhost:8000/security/xssAuditor/resources/anchor-url-dom- write-location-click.php?%3Ca%20id=%22anchorLink%22%20href=%22javascript:alert(S tring.fromCharCode(0x58,0x53,0x53))%22%3EClick%3C/a%3E'>
14 </iframe> 14 </iframe>
15 </body> 15 </body>
16 </html> 16 </html>
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698