third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/report-script-tag-replace-state-expected.txt - Issue 2717463006: Change XSS Auditor report's MIME type.

Side by Side Diff: third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/report-script-tag-replace-state-expected.txt

Issue 2717463006: Change XSS Auditor report's MIME type. (Closed)

Patch Set: tests Created 3 years, 9 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

« no previous file with comments | « third_party/WebKit/LayoutTests/http/tests/security/xssAuditor/report-script-tag-full-block-expected.txt ('k') | third_party/WebKit/Source/core/loader/PingLoader.cpp » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 CONSOLE ERROR: line 5: The XSS Auditor refused to execute a script in 'http://12 7.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?test=report-script-t ag.html&echo-report=1&enable-report=1&replaceState=1&q=%3Cscript%3Ealert(String. fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you%20see%20this%20message ,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20the%20report%20below,%20t hen%20the%20test%20PASSED.%3C/p%3E' because its source code was found within the request. The server sent an 'X-XSS-Protection' header requesting this behavior.	1 CONSOLE ERROR: line 5: The XSS Auditor refused to execute a script in 'http://12 7.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?test=report-script-t ag.html&echo-report=1&enable-report=1&replaceState=1&q=%3Cscript%3Ealert(String. fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you%20see%20this%20message ,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20the%20report%20below,%20t hen%20the%20test%20PASSED.%3C/p%3E' because its source code was found within the request. The server sent an 'X-XSS-Protection' header requesting this behavior.

2 This tests that the X-XSS-Protection reports are sent out properly with the orig inal, unmodified URL even when a history.replaceState() changes it.	2 This tests that the X-XSS-Protection reports are sent out properly with the orig inal, unmodified URL even when a history.replaceState() changes it.

3	3

4	4

5	5

6 --------	6 --------

7 Frame: 'frame'	7 Frame: 'frame'

8 --------	8 --------

9 CSP report received:	9 CSP report received:

10 CONTENT_TYPE: application/json	10 CONTENT_TYPE: application/xss-auditor-report

11 HTTP_REFERER: http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?test=report-script-tag.html&echo-report=1&enable-report=1&replaceState=1&q=%3 Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you %20see%20this%20message,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20th e%20report%20below,%20then%20the%20test%20PASSED.%3C/p%3E	11 HTTP_REFERER: http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?test=report-script-tag.html&echo-report=1&enable-report=1&replaceState=1&q=%3 Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E%3Cp%3EIf%20you %20see%20this%20message,%20no%20JavaScript%20alert(),%20and%20a%20dump%20of%20th e%20report%20below,%20then%20the%20test%20PASSED.%3C/p%3E

12 REQUEST_METHOD: POST	12 REQUEST_METHOD: POST

13 === POST DATA ===	13 === POST DATA ===

14 {"xss-report":{"request-url":"http://127.0.0.1:8000/security/xssAuditor/resource s/echo-intertag.pl?test=report-script-tag.html&echo-report=1&enable-report=1&rep laceState=1&q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3 E%3Cp%3EIf%20you%20see%20this%20message,%20no%20JavaScript%20alert(),%20and%20a% 20dump%20of%20the%20report%20below,%20then%20the%20test%20PASSED.%3C/p%3E","requ est-body":""}}	14 {"xss-report":{"request-url":"http://127.0.0.1:8000/security/xssAuditor/resource s/echo-intertag.pl?test=report-script-tag.html&echo-report=1&enable-report=1&rep laceState=1&q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3 E%3Cp%3EIf%20you%20see%20this%20message,%20no%20JavaScript%20alert(),%20and%20a% 20dump%20of%20the%20report%20below,%20then%20the%20test%20PASSED.%3C/p%3E","requ est-body":""}}

OLD	NEW