OLD | NEW |
1 CONSOLE MESSAGE: line 4: The XSS Auditor blocked access to 'http://127.0.0.1:800
0/security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q=%3Ca%20on
click='alert(String.fromCharCode(0x58,0x53,0x53))'%3EClick%3C/a%3E' because the
source code of a script was found within the request. The server sent an 'X-XSS-
Protection' header requesting this behavior. | 1 CONSOLE MESSAGE: line 4: The XSS Auditor blocked access to 'http://127.0.0.1:800
0/security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q=%3Ca%20on
click=%27alert(String.fromCharCode(0x58,0x53,0x53))%27%3EClick%3C/a%3E' because
the source code of a script was found within the request. The server sent an 'X-
XSS-Protection' header requesting this behavior. |
2 ALERT: URL mismatch: '[Location object access threw exception]' vs. 'http://127.
0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q=
%3Ca%20onclick='alert(String.fromCharCode(0x58,0x53,0x53))'%3EClick%3C/a%3E' | 2 ALERT: URL mismatch: '[Location object access threw exception]' vs. 'http://127.
0.0.1:8000/security/xssAuditor/resources/echo-intertag.pl?enable-full-block=1&q=
%3Ca%20onclick=%27alert(String.fromCharCode(0x58,0x53,0x53))%27%3EClick%3C/a%3E' |
3 There should be no content in the iframe below: | 3 There should be no content in the iframe below: |
4 | 4 |
5 | 5 |
6 | 6 |
7 -------- | 7 -------- |
8 Frame: 'frame' | 8 Frame: 'frame' |
9 -------- | 9 -------- |
10 | 10 |
OLD | NEW |