Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(132)

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/report-script-tag-expected.txt

Issue 2717463006: Change XSS Auditor report's MIME type. (Closed)
Patch Set: tests Created 3 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/report-script-tag-full-block-expected.txt » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://12 7.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?test=report-script-t ag.html&echo-report=1&enable-report=1&q=%3Cscript%3Ealert(String.fromCharCode(0x 58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you%20see%20this%20message,%20no%20JavaSc ript%20alert(),%20and%20a%20dump%20of%20the%20report%20below,%20then%20the%20tes t%20PASSED.%3C/p%3E' because its source code was found within the request. The s erver sent an 'X-XSS-Protection' header requesting this behavior. 1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://12 7.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?test=report-script-t ag.html&echo-report=1&enable-report=1&q=%3Cscript%3Ealert(String.fromCharCode(0x 58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you%20see%20this%20message,%20no%20JavaSc ript%20alert(),%20and%20a%20dump%20of%20the%20report%20below,%20then%20the%20tes t%20PASSED.%3C/p%3E' because its source code was found within the request. The s erver sent an 'X-XSS-Protection' header requesting this behavior.
2 This tests that the X-XSS-Protection reports are sent out properly 2 This tests that the X-XSS-Protection reports are sent out properly
3 3
4 4
5 5
6 -------- 6 --------
7 Frame: 'frame' 7 Frame: 'frame'
8 -------- 8 --------
9 CSP report received: 9 CSP report received:
10 CONTENT_TYPE: application/json 10 CONTENT_TYPE: application/xss-auditor-report
11 HTTP_REFERER: http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?test=report-script-tag.html&echo-report=1&enable-report=1&q=%3Cscript%3Ealert (String.fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you%20see%20this%2 0message,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20the%20report%20be low,%20then%20the%20test%20PASSED.%3C/p%3E 11 HTTP_REFERER: http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?test=report-script-tag.html&echo-report=1&enable-report=1&q=%3Cscript%3Ealert (String.fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you%20see%20this%2 0message,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20the%20report%20be low,%20then%20the%20test%20PASSED.%3C/p%3E
12 REQUEST_METHOD: POST 12 REQUEST_METHOD: POST
13 === POST DATA === 13 === POST DATA ===
14 {"xss-report":{"request-url":"http://127.0.0.1:8000/security/xssAuditor/resource s/echo-intertag.pl?test=report-script-tag.html&echo-report=1&enable-report=1&q=% 3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20yo u%20see%20this%20message,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20t he%20report%20below,%20then%20the%20test%20PASSED.%3C/p%3E","request-body":""}} 14 {"xss-report":{"request-url":"http://127.0.0.1:8000/security/xssAuditor/resource s/echo-intertag.pl?test=report-script-tag.html&echo-report=1&enable-report=1&q=% 3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20yo u%20see%20this%20message,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20t he%20report%20below,%20then%20the%20test%20PASSED.%3C/p%3E","request-body":""}}
OLDNEW
« no previous file with comments | « no previous file | third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/report-script-tag-full-block-expected.txt » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698