Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(855)

Unified Diff: LayoutTests/http/tests/security/xssAuditor/html5-import-expected.txt

Issue 644663003: Apply XSSAuditor to html5 import (i.e. <link rel="import">) tags. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: Remove parameter name. Created 6 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: LayoutTests/http/tests/security/xssAuditor/html5-import-expected.txt
diff --git a/LayoutTests/http/tests/security/xssAuditor/base-href-control-char-expected.txt b/LayoutTests/http/tests/security/xssAuditor/html5-import-expected.txt
similarity index 59%
copy from LayoutTests/http/tests/security/xssAuditor/base-href-control-char-expected.txt
copy to LayoutTests/http/tests/security/xssAuditor/html5-import-expected.txt
index fc61c8bacd8f4b479755fa750cd1958e2f66d44c..6dcde2c8116c94fafaae95a18ae480f86e845b50 100644
--- a/LayoutTests/http/tests/security/xssAuditor/base-href-control-char-expected.txt
+++ b/LayoutTests/http/tests/security/xssAuditor/html5-import-expected.txt
@@ -1,3 +1,2 @@
-CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-head-base-href.pl?q=%3Cbase%20href=%27http://127.0.0.1:8000/sec%01urity/xssAuditor/resources/base-href/%27%3E' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.
-ALERT: This is a safe script.
+CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3clink%20rel=%22import%22%20href=%22http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%253cscript%253ealert(/XSS/)%253c/script%253e%22%3e' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.

Powered by Google App Engine
This is Rietveld 408576698