OLD | NEW |
1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
2 <html> | 2 <html> |
3 <head> | 3 <head> |
4 <script src="/js-test-resources/js-test-pre.js"></script> | 4 <script src="/js-test-resources/js-test-pre.js"></script> |
5 <script> | 5 <script> |
6 if (window.testRunner) | 6 if (window.testRunner) |
7 testRunner.setXSSAuditorEnabled(true); | 7 testRunner.setXSSAuditorEnabled(true); |
8 | 8 |
9 description('Check that an X-XSS-Protection header added by a 304 respon
se does not override one from the original request.'); | 9 description('Check that an X-XSS-Protection header added by a 304 respon
se does not override one from the original request.'); |
10 debug('Two console messages should be generated, noting that JavaScript
was blocked.'); | 10 debug('Two console messages should be generated, noting that JavaScript
was blocked.'); |
(...skipping 10 matching lines...) Expand all Loading... |
21 frame2.src = frame1.src; | 21 frame2.src = frame1.src; |
22 } | 22 } |
23 | 23 |
24 function checkState() { | 24 function checkState() { |
25 debug('Check that the nonce is the same, meaning that the document w
as only generated once:'); | 25 debug('Check that the nonce is the same, meaning that the document w
as only generated once:'); |
26 | 26 |
27 shouldBeTrue('frame1.contentDocument.querySelector("input").value ==
frame2.contentDocument.querySelector("input").value'); | 27 shouldBeTrue('frame1.contentDocument.querySelector("input").value ==
frame2.contentDocument.querySelector("input").value'); |
28 finishJSTest(); | 28 finishJSTest(); |
29 } | 29 } |
30 </script> | 30 </script> |
31 <script src="/js-test-resources/js-test-post.js"></script> | |
32 </head> | 31 </head> |
33 <body> | 32 <body> |
34 <iframe src="http://127.0.0.1:8000/security/xssAuditor/resources/nph-cached.
pl?q=%3cscript%3ealert(/XSS/);%3c/script%3e" onload="frameLoaded()"></iframe> | 33 <iframe src="http://127.0.0.1:8000/security/xssAuditor/resources/nph-cached.
pl?q=%3cscript%3ealert(/XSS/);%3c/script%3e" onload="frameLoaded()"></iframe> |
35 </body> | 34 </body> |
36 </html> | 35 </html> |
OLD | NEW |