Variations on type attribute of script tag

These scripts should execute

  1. no type attribute
  2. empty string
  3. text/javascript
  4. text/JAVASCRIPT
  5. TEXT/JAVASCRIPT
  6. 'text/javascript '
  7. ' text/javascript '
  8. text/jscript
  9. text/ecmascript
  10. text/livescript
  11. text/javascript1.1
  12. text/javascript1.2
  13. text/javascript1.3
  14. application/javascript
  15. application/ecmascript
  16. application/x-javascript

These scripts should not execute

  1. one space
  2. text/
  3. text/vbscript
  4. text/vbs
  5. text/xml
  6. text/javascript1
  7. text/javascript1.0
  8. text/javascript1.4
  9. text/javascript1.5
  10. text/javascript1.6
  11. application/jscript
  12. application/x-jscript
  13. application/livescript
  14. application/x-livescript
  15. application/x-ecmascript
  16. application/javascript1.2
  17. application/x-javascript1.2
  18. javascript
  19. jscript
  20. ecmascript
  21. livescript
  22. livescript1.1
  23. JAVASCRIPT
  24. JavaScript
  25. JavaScript 1
  26. JavaScript 1.0
  27. JavaScript 1.1
  28. JavaScript 1.1.1
  29. JavaScript 1.2
  30. JavaScript 1.3
  31. JavaScript 1.4
  32. JavaScript 1.5
  33. JavaScript 1.6
  34. JavaScript 1.7
  35. JavaScript 1.8
  36. JavaScript 1.9
  37. JavaScript 2
  38. JavaScript 2.1
  39. JavaScript 10
  40. JavaScript 10.0
  41. _javascript
  42. javascript_
  43. javascript_1.0
  44. javascript 1.0 x
  45. JavaScript1
  46. JavaScript1.0
  47. JavaScript1.1
  48. JavaScript1.2
  49. JavaScript1.3
  50. JavaScript1.4
  51. JavaScript1.4.1
  52. JavaScript1.5
  53. JavaScript1.6
  54. JavaScript1.7
  55. 1.0 javascript
  56. ' javascript '
  57. ' javascript1.1 '
  58. '   javascript   '
  59. ' javascript 1.0 '
  60. ' javascript  1.0 '
  61. jscript 1
  62. jscript 1.0
  63. ecmascript 1
  64. ecmascript 1.0
  65. livescript 1
  66. livescript 1.0
  67. ' jscript  1.0 '
  68. disabled_javascript
  69. xxxjavascriptxxx
  70. bogus

Variations on language attribute of script tag

These scripts should execute

  1. no language attribute
  2. empty string
  3. jscript
  4. ecmascript
  5. livescript
  6. javascript
  7. JAVASCRIPT
  8. JavaScript
  9. JavaScript1.0
  10. JavaScript1.1
  11. JavaScript1.2
  12. JavaScript1.3
  13. JavaScript1.4
  14. JavaScript1.5
  15. JavaScript1.6
  16. JavaScript1.7

These scripts should not execute

  1. one space
  2. vbscript
  3. livescript1.1
  4. JavaScript 1
  5. JavaScript 1.0
  6. JavaScript 1.1
  7. JavaScript 1.1.1
  8. JavaScript 1.2
  9. JavaScript 1.3
  10. JavaScript 1.4
  11. JavaScript 1.5
  12. JavaScript 1.6
  13. JavaScript 1.7
  14. JavaScript 1.8
  15. JavaScript 1.9
  16. JavaScript 2
  17. JavaScript 2.1
  18. JavaScript 10
  19. JavaScript 10.0
  20. _javascript
  21. javascript_
  22. javascript_1.0
  23. javascript 1.0 x
  24. JavaScript1
  25. JavaScript1.8
  26. JavaScript1.9
  27. JavaScript1.4.1
  28. 1.0 javascript
  29. ' javascript '
  30. ' javascript1.1 '
  31. '   javascript   '
  32. ' javascript 1.0 '
  33. ' javascript  1.0 '
  34. jscript 1
  35. jscript 1.0
  36. ecmascript 1
  37. ecmascript 1.0
  38. livescript 1
  39. livescript 1.0
  40. ' jscript  1.0 '
  41. disabled_javascript
  42. xxxjavascriptxxx
  43. bogus

Variations on combined type and language attributes of script tag

These scripts should execute

  1. empty string type, "javascript" language
  2. empty string language, "text/javascript" type
  3. "javascript" language, "text/javascript" type
  4. "bogus" language, "text/javascript" type
  5. "livescript" language, "text/javascript" type
  6. "javascript1.2" language, "text/javascript" type

These scripts should not execute

  1. "javascript" language, "bogus" type
  2. empty string type, "bogus" language
  3. empty string language, "bogus" type