browser/components/sessionstore/test/browser_911547_sample.html

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 <!DOCTYPE html>
     2 <html>
     3   <head>
     4     <title>Test 911547</title>
     5   </head>
     6 <body>
     8   <!--
     9    this element gets modified by an injected script;
    10    that script should be blocked by CSP.
    11    Inline scripts can modify it, but not data uris.
    12   -->
    13   <input type="text" id="test_id" value="ok">
    15   <a id="test_data_link" href="data:text/html,<input type='text' id='test_id2' value='ok'/> <script>document.getElementById('test_id2').value = 'fail';</script>">Test Link</a>
    17 </body>
    18 </html>

mercurial