OLD | NEW |
1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://lo
calhost:8000/security/xssAuditor/resources/echo-intertag.pl?clutter=%3Cscript%3E
alert(1)%3C/script%3E&q=%3Csvg%3E%3Cscript%3E&q2=alert(0)%3C/script%3E%3C/svg%3E
' because its source code was found within the request. The auditor was enabled
as the server did not send an 'X-XSS-Protection' header. | 1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://lo
calhost:8000/security/xssAuditor/resources/echo-intertag.pl?clutter=%3Cscript%3E
alert(1)%3C/script%3E&q=%3Csvg%3E%3Cscript%3E&q2=alert(0)%3C/script%3E%3C/svg%3E
' because its source code was found within the request. The server sent an 'X-XS
S-Protection' header requesting this behavior. |
2 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://lo
calhost:8000/security/xssAuditor/resources/echo-intertag.pl?clutter=%3Cscript%3E
alert(1)%3C/script%3E&q=%3Csvg%3E%3Cscript%3E&q2=alert(0)%3C/script%3E%3C/svg%3E
' because its source code was found within the request. The auditor was enabled
as the server did not send an 'X-XSS-Protection' header. | 2 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://lo
calhost:8000/security/xssAuditor/resources/echo-intertag.pl?clutter=%3Cscript%3E
alert(1)%3C/script%3E&q=%3Csvg%3E%3Cscript%3E&q2=alert(0)%3C/script%3E%3C/svg%3E
' because its source code was found within the request. The server sent an 'X-XS
S-Protection' header requesting this behavior. |
3 Ensures HTML entities are recognized in script blocks in a context where CDATA
is allowed even with nested script blocks. | 3 Ensures HTML entities are recognized in script blocks in a context where CDATA
is allowed even with nested script blocks. |
OLD | NEW |