Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(137)

Side by Side Diff: LayoutTests/http/tests/security/xssAuditor/full-block-script-tag-expected.txt

Issue 414223004: Implement NavigationScheduler::schedulePageBlock() as a redirect to empty substitute data. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 6 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE ERROR: line 4: The XSS Auditor blocked access to 'http://127.0.0.1:8000/ security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q=%3Cscript%3 Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E' because the source cod e of a script was found within the request. The server sent an 'X-XSS-Protection ' header requesting this behavior. 1 CONSOLE ERROR: line 4: The XSS Auditor blocked access to 'http://127.0.0.1:8000/ security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q=%3Cscript%3 Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E' because the source cod e of a script was found within the request. The server sent an 'X-XSS-Protection ' header requesting this behavior.
2 CONSOLE MESSAGE: line 19: PASS: Cross-origin access threw: 'SecurityError: Faile d to read the 'contentDocument' property from 'HTMLIFrameElement': Blocked a fra me with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.'. 2 CONSOLE MESSAGE: line 17: PASS: Referrer is "http://127.0.0.1:8000/security/xssA uditor/resources/echo-intertag.pl?enable-full-block=1&q=%3Cscript%3Ealert(String .fromCharCode(0x58,0x53,0x53))%3C/script%3E"
3 ALERT: URL mismatch: '[Location object access threw exception]' vs. 'http://127. 0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q= %3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E'
4 There should be no content in the iframe below: 3 There should be no content in the iframe below:
5 4
6 5
7 6
8 -------- 7 --------
9 Frame: 'frame' 8 Frame: 'frame'
10 -------- 9 --------
11 10
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698