Upstream version 9.38.198.0
[platform/framework/web/crosswalk.git] / src / third_party / WebKit / LayoutTests / http / tests / security / xssAuditor / svg-animate-clutter-2-expected.txt
1 CONSOLE ERROR: line 4: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/resources/echo-intertag.pl?q=%3Csvg%20xmlns:xlink=%27http://www.w3.org/1999/xlink%27%3E%3Ca%3E%3Ccircle%20r=100%20/%3E%3Canimate%20attributeName=xlink:href%20values=javascript%3Aalert(1)%3B%3B&clutter=blah%27%3E&notifyDone=1&dumpElementBySelector=animate' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.
2 This test passes if the element displayed in the frame below has a 'values' attribute containing only 'javascript:void(0)'.
3
4
5
6 --------
7 Frame: '<!--framePath //<!--frame0-->-->'
8 --------
9 animate => animate
10 * attributeName: xlink:href
11 * values: javascript:void(0)
12 Page rendered here.