OLD | NEW |
1 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http://
localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%20xmlns:x
link='http://www.w3.org/1999/xlink'%3E%3Ca%3E%3Ccircle%20r=100%20/%3E%3Canimate%
20attributeName=xlink:href%20values=%3Bjavascript%3Aalert(1)%20begin=0s%20end=0.
1s%20fill=freeze%20/%3E%3C/a%3E%3C/svg%3E¬ifyDone=1&dumpElementBySelector=ani
mate' because its source code was found within the request. The auditor was enab
led as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Polic
y' header. | 1 CONSOLE MESSAGE: line 4: The XSS Auditor refused to execute a script in 'http://
localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%20xmlns:x
link=%27http://www.w3.org/1999/xlink%27%3E%3Ca%3E%3Ccircle%20r=100%20/%3E%3Canim
ate%20attributeName=xlink:href%20values=%3Bjavascript%3Aalert(1)%20begin=0s%20en
d=0.1s%20fill=freeze%20/%3E%3C/a%3E%3C/svg%3E¬ifyDone=1&dumpElementBySelector
=animate' because its source code was found within the request. The auditor was
enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-P
olicy' header. |
2 This test passes if the element displayed in the frame below has a 'values' attr
ibute containing only 'javascript:void(0)'. | 2 This test passes if the element displayed in the frame below has a 'values' attr
ibute containing only 'javascript:void(0)'. |
3 | 3 |
4 | 4 |
5 | 5 |
6 -------- | 6 -------- |
7 Frame: '<!--framePath //<!--frame0-->-->' | 7 Frame: '<!--framePath //<!--frame0-->-->' |
8 -------- | 8 -------- |
9 animate => animate | 9 animate => animate |
10 * attributeName: xlink:href | 10 * attributeName: xlink:href |
11 * values: javascript:void(0) | 11 * values: javascript:void(0) |
12 * begin: 0s | 12 * begin: 0s |
13 * end: 0.1s | 13 * end: 0.1s |
14 * fill: freeze | 14 * fill: freeze |
15 | 15 |
OLD | NEW |