| OLD | NEW |
| 1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
| 2 <html> | 2 <html> |
| 3 <head> | 3 <head> |
| 4 <script src="/js-test-resources/js-test-pre.js"></script> | 4 <script src="/js-test-resources/js-test-pre.js"></script> |
| 5 <script> | 5 <script> |
| 6 if (window.testRunner) | 6 if (window.testRunner) |
| 7 testRunner.setXSSAuditorEnabled(true); | 7 testRunner.setXSSAuditorEnabled(true); |
| 8 | 8 |
| 9 description('Check that an X-XSS-Protection header added by a 304 respon
se does not override one from the original request.'); | 9 description('Check that an X-XSS-Protection header added by a 304 respon
se does not override one from the original request.'); |
| 10 debug('Two console messages should be generated, noting that JavaScript
was blocked.'); | 10 debug('Two console messages should be generated, noting that JavaScript
was blocked.'); |
| (...skipping 10 matching lines...) Expand all Loading... |
| 21 frame2.src = frame1.src; | 21 frame2.src = frame1.src; |
| 22 } | 22 } |
| 23 | 23 |
| 24 function checkState() { | 24 function checkState() { |
| 25 debug('Check that the nonce is the same, meaning that the document w
as only generated once:'); | 25 debug('Check that the nonce is the same, meaning that the document w
as only generated once:'); |
| 26 | 26 |
| 27 shouldBeTrue('frame1.contentDocument.querySelector("input").value ==
frame2.contentDocument.querySelector("input").value'); | 27 shouldBeTrue('frame1.contentDocument.querySelector("input").value ==
frame2.contentDocument.querySelector("input").value'); |
| 28 finishJSTest(); | 28 finishJSTest(); |
| 29 } | 29 } |
| 30 </script> | 30 </script> |
| 31 <script src="/js-test-resources/js-test-post.js"></script> | |
| 32 </head> | 31 </head> |
| 33 <body> | 32 <body> |
| 34 <iframe src="http://127.0.0.1:8000/security/xssAuditor/resources/nph-cached.
pl?q=%3cscript%3ealert(/XSS/);%3c/script%3e" onload="frameLoaded()"></iframe> | 33 <iframe src="http://127.0.0.1:8000/security/xssAuditor/resources/nph-cached.
pl?q=%3cscript%3ealert(/XSS/);%3c/script%3e" onload="frameLoaded()"></iframe> |
| 35 </body> | 34 </body> |
| 36 </html> | 35 </html> |
| OLD | NEW |