Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(159)

Unified Diff: LayoutTests/http/tests/security/xssAuditor/script-tag-replaced-with-questionmark.html

Issue 421623003: XSSAuditor: treat questionmark as a non-canonical character. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 6 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/xssAuditor/script-tag-replaced-with-questionmark.html
diff --git a/LayoutTests/http/tests/security/xssAuditor/link-onclick-ampersand.html b/LayoutTests/http/tests/security/xssAuditor/script-tag-replaced-with-questionmark.html
similarity index 80%
copy from LayoutTests/http/tests/security/xssAuditor/link-onclick-ampersand.html
copy to LayoutTests/http/tests/security/xssAuditor/script-tag-replaced-with-questionmark.html
index 73735304aa369efcc63b96e7e17d6983ab32af7f..b704bd1c05b9c7270650f3ab853b71c27b7d0484 100644
--- a/LayoutTests/http/tests/security/xssAuditor/link-onclick-ampersand.html
+++ b/LayoutTests/http/tests/security/xssAuditor/script-tag-replaced-with-questionmark.html
@@ -9,7 +9,7 @@ if (window.testRunner) {
</script>
</head>
<body>
-<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=<a%20onclick='alert(1%261)'>Click</a>">
+<iframe src="http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=<script>alert(%22xxx%fexxx%22)</script>">
</iframe>
</body>
</html>

Powered by Google App Engine
This is Rietveld 408576698