Variations on type attribute of script tag
These scripts should execute
- no type attribute
- empty string
- text/javascript
- text/JAVASCRIPT
- TEXT/JAVASCRIPT
- 'text/javascript '
- ' text/javascript '
- text/jscript
- text/ecmascript
- text/livescript
- text/javascript1.1
- text/javascript1.2
- text/javascript1.3
- application/javascript
- application/ecmascript
- application/x-javascript
These scripts should not execute
- one space
- text/
- text/vbscript
- text/vbs
- text/xml
- text/javascript1
- text/javascript1.0
- text/javascript1.4
- text/javascript1.5
- text/javascript1.6
- application/jscript
- application/x-jscript
- application/livescript
- application/x-livescript
- application/x-ecmascript
- application/javascript1.2
- application/x-javascript1.2
- javascript
- jscript
- ecmascript
- livescript
- livescript1.1
- JAVASCRIPT
- JavaScript
- JavaScript 1
- JavaScript 1.0
- JavaScript 1.1
- JavaScript 1.1.1
- JavaScript 1.2
- JavaScript 1.3
- JavaScript 1.4
- JavaScript 1.5
- JavaScript 1.6
- JavaScript 1.7
- JavaScript 1.8
- JavaScript 1.9
- JavaScript 2
- JavaScript 2.1
- JavaScript 10
- JavaScript 10.0
- _javascript
- javascript_
- javascript_1.0
- javascript 1.0 x
- JavaScript1
- JavaScript1.0
- JavaScript1.1
- JavaScript1.2
- JavaScript1.3
- JavaScript1.4
- JavaScript1.4.1
- JavaScript1.5
- JavaScript1.6
- JavaScript1.7
- 1.0 javascript
- ' javascript '
- ' javascript1.1 '
- ' javascript '
- ' javascript 1.0 '
- ' javascript 1.0 '
- jscript 1
- jscript 1.0
- ecmascript 1
- ecmascript 1.0
- livescript 1
- livescript 1.0
- ' jscript 1.0 '
- disabled_javascript
- xxxjavascriptxxx
- bogus
Variations on language attribute of script tag
These scripts should execute
- no language attribute
- empty string
- jscript
- ecmascript
- livescript
- javascript
- JAVASCRIPT
- JavaScript
- JavaScript1.0
- JavaScript1.1
- JavaScript1.2
- JavaScript1.3
- JavaScript1.4
- JavaScript1.5
- JavaScript1.6
- JavaScript1.7
These scripts should not execute
- one space
- vbscript
- livescript1.1
- JavaScript 1
- JavaScript 1.0
- JavaScript 1.1
- JavaScript 1.1.1
- JavaScript 1.2
- JavaScript 1.3
- JavaScript 1.4
- JavaScript 1.5
- JavaScript 1.6
- JavaScript 1.7
- JavaScript 1.8
- JavaScript 1.9
- JavaScript 2
- JavaScript 2.1
- JavaScript 10
- JavaScript 10.0
- _javascript
- javascript_
- javascript_1.0
- javascript 1.0 x
- JavaScript1
- JavaScript1.8
- JavaScript1.9
- JavaScript1.4.1
- 1.0 javascript
- ' javascript '
- ' javascript1.1 '
- ' javascript '
- ' javascript 1.0 '
- ' javascript 1.0 '
- jscript 1
- jscript 1.0
- ecmascript 1
- ecmascript 1.0
- livescript 1
- livescript 1.0
- ' jscript 1.0 '
- disabled_javascript
- xxxjavascriptxxx
- bogus
Variations on combined type and language attributes of script tag
These scripts should execute
- empty string type, "javascript" language
- empty string language, "text/javascript" type
- "javascript" language, "text/javascript" type
- "bogus" language, "text/javascript" type
- "livescript" language, "text/javascript" type
- "javascript1.2" language, "text/javascript" type
These scripts should not execute
- "javascript" language, "bogus" type
- empty string type, "bogus" language
- empty string language, "bogus" type