OLD | NEW |
1 <!DOCTYPE html><html><head></head><body><iframe id="x" name="x" src="/security/x
ssAuditor/resources/echo-intertag.pl?q=%3cdiv%20onmouseover=%22alert(/xss/)%22%%
3e%3c/div%3e"></iframe> | 1 <!DOCTYPE html><html><head></head><body><iframe id="x" name="x" src="/security/x
ssAuditor/resources/echo-intertag.pl?q=%3cdiv%20onmouseover=%22alert(/xss/)%22%%
3e%3c/div%3e"></iframe> |
2 <script> | 2 <script> |
3 var frame = document.getElementById('x'); | 3 var frame = document.getElementById('x'); |
4 if (window.testRunner) { | 4 if (window.testRunner) { |
5 testRunner.waitUntilDone(); | 5 testRunner.waitUntilDone(); |
6 testRunner.setXSSAuditorEnabled(true); | 6 testRunner.setXSSAuditorEnabled(true); |
7 testRunner.dumpAsMarkup(); | 7 testRunner.dumpAsMarkup(); |
8 testRunner.dumpChildFramesAsMarkup(); | 8 testRunner.dumpChildFramesAsMarkup(); |
9 testRunner.setViewSourceForFrame('x', true); | 9 testRunner.setViewSourceForFrame('x', true); |
10 frame.onload = testRunner.notifyDone.bind(testRunner); | 10 frame.onload = testRunner.notifyDone.bind(testRunner); |
11 } | 11 } |
12 frame.src = '/security/xssAuditor/resources/echo-intertag.pl?q=%3cdiv%20onmouseo
ver=%22alert(/xss/)%22%%3e%3c/div%3e'; | 12 frame.src = '/security/xssAuditor/resources/echo-intertag.pl?q=%3cdiv%20onmouseo
ver=%22alert(/xss/)%22%%3e%3c/div%3e'; |
13 </script> | 13 </script> |
14 <p>This test passes if the iframe is rendered in view-source mode and the div wi
th the | 14 <p>This test passes if the iframe is rendered in view-source mode and the div wi
th the |
15 onmouseover handler is in a highlighted span.</p> | 15 onmouseover handler is in a highlighted span.</p> |
16 | 16 |
17 </body></html> | 17 </body></html> |
18 | 18 |
19 -------- | 19 -------- |
20 Frame: 'x' | 20 Frame: 'x' |
21 -------- | 21 -------- |
22 <html><head></head><body><div class="webkit-line-gutter-backdrop"></div><table><
tbody><tr><td class="webkit-line-number" value="1"></td><td class="webkit-line-c
ontent"><span class="webkit-html-doctype"><!DOCTYPE html></span></td></tr>
<tr><td class="webkit-line-number" value="2"></td><td class="webkit-line-content
"><span class="webkit-html-tag"><html></span></td></tr><tr><td class="webk
it-line-number" value="3"></td><td class="webkit-line-content"><span class="webk
it-html-tag"><body></span></td></tr><tr><td class="webkit-line-number" val
ue="4"></td><td class="webkit-line-content"><span class="webkit-highlight" title
="Token contains a reflected XSS vector"><span class="webkit-html-tag"><div <
span class="webkit-html-attribute-name">onmouseover</span>="<span class="webkit-
html-attribute-value">alert(/xss/)</span>"<span class="webkit-html-attribute-nam
e">%</span>></span></span><span class="webkit-html-tag"></div></span><s
pan class="webkit-html-tag"></body></span></td></tr><tr><td class="webkit-
line-number" value="5"></td><td class="webkit-line-content"><span class="webkit-
html-tag"></html></span></td></tr><tr><td class="webkit-line-number" value
="6"></td><td class="webkit-line-content"><span class="webkit-html-end-of-file">
</span></td></tr></tbody></table></body></html> | 22 <html><head></head><body><div class="line-gutter-backdrop"></div><table><tbody><
tr><td class="line-number" value="1"></td><td class="line-content"><span class="
html-doctype"><!DOCTYPE html></span></td></tr><tr><td class="line-number"
value="2"></td><td class="line-content"><span class="html-tag"><html></spa
n></td></tr><tr><td class="line-number" value="3"></td><td class="line-content">
<span class="html-tag"><body></span></td></tr><tr><td class="line-number"
value="4"></td><td class="line-content"><span class="highlight" title="Token con
tains a reflected XSS vector"><span class="html-tag"><div <span class="html-a
ttribute-name">onmouseover</span>="<span class="html-attribute-value">alert(/xss
/)</span>"<span class="html-attribute-name">%</span>></span></span><span clas
s="html-tag"></div></span><span class="html-tag"></body></span></td>
</tr><tr><td class="line-number" value="5"></td><td class="line-content"><span c
lass="html-tag"></html></span></td></tr><tr><td class="line-number" value=
"6"></td><td class="line-content"><span class="html-end-of-file"></span></td></t
r></tbody></table></body></html> |
OLD | NEW |