Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(161)

Side by Side Diff: LayoutTests/http/tests/security/contentSecurityPolicy/1.1/reflected-xss-and-xss-protection-invalid-invalid-expected.txt

Issue 798963002: Only populate line number in case parsing synchronously. (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: deleted custom mac expectation Created 6 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 CONSOLE ERROR: The 'reflected-xss' Content Security Policy directive has the inv alid value "invalid". Valid values are "allow", "filter", and "block". 1 CONSOLE ERROR: The 'reflected-xss' Content Security Policy directive has the inv alid value "invalid". Valid values are "allow", "filter", and "block".
2 CONSOLE ERROR: line 1: Error parsing header X-XSS-Protection: 12345678901234567: expected semicolon at character position 2. The default protections will be app lied. 2 CONSOLE ERROR: Error parsing header X-XSS-Protection: 12345678901234567: expecte d semicolon at character position 2. The default protections will be applied.
3 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://12 7.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Cscript%3Ealert( String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=invalid&malformed-header=1 ' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' h eader. 3 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://12 7.0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Cscript%3Ealert( String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=invalid&malformed-header=1 ' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' h eader.
4 ALERT: Loaded http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=inv alid&malformed-header=1 into the IFrame. 4 ALERT: Loaded http://127.0.0.1:8000/security/xssAuditor/resources/echo-intertag. pl?q=%3Cscript%3Ealert(String.fromCharCode(0x58,0x53,0x53))%3C/script%3E&csp=inv alid&malformed-header=1 into the IFrame.
5 Testing behavior when "reflected-xss" is set to invalid, and "X-XSS-Protection" is set to invalid. 5 Testing behavior when "reflected-xss" is set to invalid, and "X-XSS-Protection" is set to invalid.
6 6
7 -------- 7 --------
8 Frame: '<!--framePath //<!--frame0-->-->' 8 Frame: '<!--framePath //<!--frame0-->-->'
9 -------- 9 --------
10 Page rendered here. 10 Page rendered here.
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698