security/manager/ssl/tests/mochitest/mixedcontent/bug329869.js

Fri, 16 Jan 2015 04:50:19 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Fri, 16 Jan 2015 04:50:19 +0100
branch
TOR_BUG_9701
changeset 13
44a2da4a2ab2
permissions
-rw-r--r--

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

michael@0 1 document.open();
michael@0 2 document.write("This is insecure XSS script " + document.cookie);
michael@0 3 isSecurityState("broken", "security broken after document write from unsecure script");
michael@0 4 finish();

mercurial