Google Git
Sign in
chromium/external/github.com/WebKit/webkit/refs/heads/webkitgtk/2.4/./LayoutTests/http/tests/security
tree: c898cba1bc74340e5f28220231881dbe6364c3f2 [path history] [tgz]
  1. 401-logout/
  2. aboutBlank/
  3. clipboard/
  4. contentSecurityPolicy/
  5. contentTypeOptions/
  6. cookies/
  7. dataURL/
  8. frameNavigation/
  9. isolatedWorld/
  10. javascriptURL/
  11. listener/
  12. MessagePort/
  13. mixedContent/
  14. originHeader/
  15. postMessage/
  16. resources/
  17. seamless/
  18. XFrameOptions/
  19. xssAuditor/
  20. beforeload-iframe-client-redirect-expected.txt
  21. beforeload-iframe-client-redirect.html
  22. beforeload-iframe-server-redirect-expected.txt
  23. beforeload-iframe-server-redirect.html
  24. calling-versus-current-expected.txt
  25. calling-versus-current.html
  26. cannot-read-cssrules-expected.txt
  27. cannot-read-cssrules-redirect-expected.txt
  28. cannot-read-cssrules-redirect.html
  29. cannot-read-cssrules.html
  30. canvas-cors-with-two-hosts-expected.txt
  31. canvas-cors-with-two-hosts.html
  32. canvas-remote-read-data-url-image-expected.txt
  33. canvas-remote-read-data-url-image.html
  34. canvas-remote-read-redirect-to-remote-image-expected.txt
  35. canvas-remote-read-redirect-to-remote-image.html
  36. canvas-remote-read-remote-image-allowed-expected.txt
  37. canvas-remote-read-remote-image-allowed-with-credentials-expected.txt
  38. canvas-remote-read-remote-image-allowed-with-credentials.html
  39. canvas-remote-read-remote-image-allowed.html
  40. canvas-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  41. canvas-remote-read-remote-image-blocked-no-crossorigin.html
  42. canvas-remote-read-remote-image-blocked-then-allowed-expected.txt
  43. canvas-remote-read-remote-image-blocked-then-allowed.html
  44. canvas-remote-read-remote-image-document-domain-expected.txt
  45. canvas-remote-read-remote-image-document-domain.html
  46. canvas-remote-read-remote-image-expected.txt
  47. canvas-remote-read-remote-image-redirect-expected.txt
  48. canvas-remote-read-remote-image-redirect.html
  49. canvas-remote-read-remote-image.html
  50. cors-post-redirect-301-expected.txt
  51. cors-post-redirect-301.html
  52. cors-post-redirect-302-expected.txt
  53. cors-post-redirect-302.html
  54. cors-post-redirect-307-expected.txt
  55. cors-post-redirect-307.html
  56. cors-post-redirect-308-expected.txt
  57. cors-post-redirect-308.html
  58. credentials-in-referer-expected.txt
  59. credentials-in-referer.html
  60. cross-frame-access-call-expected.txt
  61. cross-frame-access-call.html
  62. cross-frame-access-callback-explicit-domain-ALLOW-expected.txt
  63. cross-frame-access-callback-explicit-domain-ALLOW.html
  64. cross-frame-access-callback-explicit-domain-DENY-expected.txt
  65. cross-frame-access-callback-explicit-domain-DENY.html
  66. cross-frame-access-child-explicit-domain-expected.txt
  67. cross-frame-access-child-explicit-domain.html
  68. cross-frame-access-custom-expected.txt
  69. cross-frame-access-custom.html
  70. cross-frame-access-delete-expected.txt
  71. cross-frame-access-delete.html
  72. cross-frame-access-document-direct-expected.txt
  73. cross-frame-access-document-direct.html
  74. cross-frame-access-DOMImplementation-expected.txt
  75. cross-frame-access-DOMImplementation.html
  76. cross-frame-access-enumeration-expected.txt
  77. cross-frame-access-enumeration.html
  78. cross-frame-access-first-time-expected.txt
  79. cross-frame-access-first-time.html
  80. cross-frame-access-frameelement-expected.txt
  81. cross-frame-access-frameelement.html
  82. cross-frame-access-frames-expected.txt
  83. cross-frame-access-frames.html
  84. cross-frame-access-get-custom-property-cached-expected.txt
  85. cross-frame-access-get-custom-property-cached.html
  86. cross-frame-access-get-expected.txt
  87. cross-frame-access-get-override-expected.txt
  88. cross-frame-access-get-override.html
  89. cross-frame-access-get.html
  90. cross-frame-access-getOwnPropertyDescriptor-expected.txt
  91. cross-frame-access-getOwnPropertyDescriptor.html
  92. cross-frame-access-history-get-expected.txt
  93. cross-frame-access-history-get-override-expected.txt
  94. cross-frame-access-history-get-override.html
  95. cross-frame-access-history-get.html
  96. cross-frame-access-history-prototype-expected.txt
  97. cross-frame-access-history-prototype.html
  98. cross-frame-access-history-put-expected.txt
  99. cross-frame-access-history-put.html
  100. cross-frame-access-location-get-expected.txt
  101. cross-frame-access-location-get-override-expected.txt
  102. cross-frame-access-location-get-override.html
  103. cross-frame-access-location-get.html
  104. cross-frame-access-location-prototype-expected.txt
  105. cross-frame-access-location-prototype.html
  106. cross-frame-access-location-put-expected.txt
  107. cross-frame-access-location-put.html
  108. cross-frame-access-name-getter-expected.txt
  109. cross-frame-access-name-getter.html
  110. cross-frame-access-object-getPrototypeOf-expected.txt
  111. cross-frame-access-object-getPrototypeOf.html
  112. cross-frame-access-object-prototype-expected.txt
  113. cross-frame-access-object-prototype.html
  114. cross-frame-access-parent-explicit-domain-expected.txt
  115. cross-frame-access-parent-explicit-domain.html
  116. cross-frame-access-port-expected.txt
  117. cross-frame-access-port-explicit-domain-expected.txt
  118. cross-frame-access-port-explicit-domain.html
  119. cross-frame-access-port.html
  120. cross-frame-access-private-browsing-expected.txt
  121. cross-frame-access-private-browsing.html
  122. cross-frame-access-protocol-expected.txt
  123. cross-frame-access-protocol-explicit-domain-expected.txt
  124. cross-frame-access-protocol-explicit-domain.html
  125. cross-frame-access-protocol.html
  126. cross-frame-access-put-expected.txt
  127. cross-frame-access-put.html
  128. cross-frame-access-selection-expected.txt
  129. cross-frame-access-selection.html
  130. cross-origin-appcache-allowed-expected.txt
  131. cross-origin-appcache-allowed.html
  132. cross-origin-appcache-expected.txt
  133. cross-origin-appcache.html
  134. cross-origin-css-expected.txt
  135. cross-origin-css-in-xml-expected.txt
  136. cross-origin-css-in-xml.xml
  137. cross-origin-css-primitive-expected.txt
  138. cross-origin-css-primitive.html
  139. cross-origin-css.html
  140. cross-origin-getMatchedCSSRules-expected.txt
  141. cross-origin-getMatchedCSSRules.html
  142. cross-origin-getMatchedCSSRules2-expected.txt
  143. cross-origin-getMatchedCSSRules2.html
  144. cross-origin-indexeddb-allowed-expected.txt
  145. cross-origin-indexeddb-allowed.html
  146. cross-origin-indexeddb-expected.txt
  147. cross-origin-indexeddb.html
  148. cross-origin-local-storage-allowed-expected.txt
  149. cross-origin-local-storage-allowed.html
  150. cross-origin-local-storage-expected.txt
  151. cross-origin-local-storage-wk1-expected.txt
  152. cross-origin-local-storage-wk1.html
  153. cross-origin-local-storage.html
  154. cross-origin-plugin-allowed-expected.txt
  155. cross-origin-plugin-allowed.html
  156. cross-origin-plugin-expected.txt
  157. cross-origin-plugin-private-browsing-toggled-allowed-expected.txt
  158. cross-origin-plugin-private-browsing-toggled-allowed.html
  159. cross-origin-plugin-private-browsing-toggled-expected.txt
  160. cross-origin-plugin-private-browsing-toggled.html
  161. cross-origin-plugin.html
  162. cross-origin-script-window-onerror-expected.txt
  163. cross-origin-script-window-onerror-redirected-expected.txt
  164. cross-origin-script-window-onerror-redirected.html
  165. cross-origin-script-window-onerror.html
  166. cross-origin-session-storage-allowed-expected.txt
  167. cross-origin-session-storage-allowed.html
  168. cross-origin-session-storage-third-party-blocked-expected.txt
  169. cross-origin-session-storage-third-party-blocked.html
  170. cross-origin-shared-worker-allowed-expected.txt
  171. cross-origin-shared-worker-allowed.html
  172. cross-origin-shared-worker-expected.txt
  173. cross-origin-shared-worker.html
  174. cross-origin-websql-allowed-expected.txt
  175. cross-origin-websql-allowed.html
  176. cross-origin-websql-expected.txt
  177. cross-origin-websql.html
  178. cross-origin-worker-indexeddb-allowed-expected.txt
  179. cross-origin-worker-indexeddb-allowed.html
  180. cross-origin-worker-indexeddb-expected.txt
  181. cross-origin-worker-indexeddb.html
  182. cross-origin-worker-websql-allowed-expected.txt
  183. cross-origin-worker-websql-allowed.html
  184. cross-origin-worker-websql-expected.txt
  185. cross-origin-worker-websql.html
  186. cross-origin-xsl-BLOCKED-expected.txt
  187. cross-origin-xsl-BLOCKED.html
  188. cross-origin-xsl-redirect-BLOCKED-expected.txt
  189. cross-origin-xsl-redirect-BLOCKED.html
  190. data-url-inline.css-expected.txt
  191. data-url-inline.css.html
  192. dataTransfer-set-data-file-url-expected.txt
  193. dataTransfer-set-data-file-url.html
  194. detached-sandboxed-frame-access-expected.txt
  195. detached-sandboxed-frame-access.html
  196. document-all-expected.txt
  197. document-all.html
  198. drag-drop-different-origin-expected.txt
  199. drag-drop-different-origin.html
  200. drag-drop-same-unique-origin-expected.txt
  201. drag-drop-same-unique-origin.html
  202. drag-over-remote-content-iframe-expected.txt
  203. drag-over-remote-content-iframe.html
  204. escape-form-data-field-names-expected.txt
  205. escape-form-data-field-names.html
  206. feed-urls-from-remote-expected.txt
  207. feed-urls-from-remote.html
  208. frame-loading-via-document-write-expected.txt
  209. frame-loading-via-document-write.html
  210. host-compare-case-insensitive-expected.txt
  211. host-compare-case-insensitive.html
  212. img-crossorigin-loads-same-origin-expected.txt
  213. img-crossorigin-loads-same-origin.html
  214. img-with-failed-cors-check-fails-to-load-expected.txt
  215. img-with-failed-cors-check-fails-to-load.html
  216. inactive-document-with-empty-security-origin-expected.txt
  217. inactive-document-with-empty-security-origin.html
  218. local-CSS-from-remote-expected.txt
  219. local-CSS-from-remote.html
  220. local-iFrame-from-remote-expected.txt
  221. local-iFrame-from-remote.html
  222. local-image-from-remote-expected.txt
  223. local-image-from-remote-whitelisted-expected.txt
  224. local-image-from-remote-whitelisted.html
  225. local-image-from-remote.html
  226. local-JavaScript-from-remote-expected.txt
  227. local-JavaScript-from-remote.html
  228. local-user-CSS-from-remote-expected.txt
  229. local-user-CSS-from-remote.html
  230. local-video-poster-from-remote-expected.txt
  231. local-video-poster-from-remote.html
  232. local-video-source-from-remote-expected.txt
  233. local-video-source-from-remote.html
  234. local-video-src-from-remote-expected.txt
  235. local-video-src-from-remote.html
  236. location-prototype-expected.txt
  237. location-prototype.html
  238. no-indexeddb-from-sandbox-expected.txt
  239. no-indexeddb-from-sandbox.html
  240. no-javascript-location-expected.txt
  241. no-javascript-location-percent-escaped-expected.txt
  242. no-javascript-location-percent-escaped.html
  243. no-javascript-location.html
  244. no-javascript-refresh-expected.txt
  245. no-javascript-refresh-percent-escaped-expected.txt
  246. no-javascript-refresh-percent-escaped.php
  247. no-javascript-refresh-spaces-expected.txt
  248. no-javascript-refresh-spaces.php
  249. no-javascript-refresh-static-expected.txt
  250. no-javascript-refresh-static-percent-escaped-expected.txt
  251. no-javascript-refresh-static-percent-escaped.html
  252. no-javascript-refresh-static-spaces-expected.txt
  253. no-javascript-refresh-static-spaces.html
  254. no-javascript-refresh-static.html
  255. no-javascript-refresh.php
  256. no-popup-from-sandbox-expected.txt
  257. no-popup-from-sandbox-top-expected.txt
  258. no-popup-from-sandbox-top.html
  259. no-popup-from-sandbox.html
  260. no-referrer-expected.txt
  261. no-referrer.html
  262. object-literals-expected.txt
  263. object-literals.html
  264. popup-allowed-by-sandbox-is-sandboxed-control-expected.txt
  265. popup-allowed-by-sandbox-is-sandboxed-control.html
  266. popup-allowed-by-sandbox-is-sandboxed-expected.txt
  267. popup-allowed-by-sandbox-is-sandboxed.html
  268. popup-allowed-by-sandbox-when-allowed-expected.txt
  269. popup-allowed-by-sandbox-when-allowed.html
  270. popup-blocked-from-fake-event-expected.txt
  271. popup-blocked-from-fake-event.html
  272. popup-blocked-from-window-open-expected.txt
  273. popup-blocked-from-window-open.html
  274. protocol-compare-case-insensitive-expected.txt
  275. protocol-compare-case-insensitive.html
  276. redirect-BLOCKED-to-localURL-expected.txt
  277. redirect-BLOCKED-to-localURL.html
  278. referrer-policy-always-expected.txt
  279. referrer-policy-always.html
  280. referrer-policy-default-expected.txt
  281. referrer-policy-default.html
  282. referrer-policy-https-always-expected.txt
  283. referrer-policy-https-always.html
  284. referrer-policy-https-default-expected.txt
  285. referrer-policy-https-default.html
  286. referrer-policy-https-never-expected.txt
  287. referrer-policy-https-never.html
  288. referrer-policy-https-origin-expected.txt
  289. referrer-policy-https-origin.html
  290. referrer-policy-never-expected.txt
  291. referrer-policy-never.html
  292. referrer-policy-origin-expected.txt
  293. referrer-policy-origin.html
  294. referrer-policy-redirect-expected.txt
  295. referrer-policy-redirect-link-expected.txt
  296. referrer-policy-redirect-link.html
  297. referrer-policy-redirect.html
  298. referrer-policy-rel-noreferrer-expected.txt
  299. referrer-policy-rel-noreferrer.html
  300. referrer-policy-window-open-expected.txt
  301. referrer-policy-window-open.html
  302. same-origin-appcache-blocked-expected.txt
  303. same-origin-appcache-blocked.html
  304. same-origin-document-domain-storage-allowed-expected.txt
  305. same-origin-document-domain-storage-allowed.html
  306. same-origin-shared-worker-blocked-expected.txt
  307. same-origin-shared-worker-blocked.html
  308. same-origin-storage-blocked-expected.txt
  309. same-origin-storage-blocked.html
  310. same-origin-websql-blocked-expected.txt
  311. same-origin-websql-blocked.html
  312. sandbox-inherit-to-initial-document-2-expected.txt
  313. sandbox-inherit-to-initial-document-2.html
  314. sandbox-inherit-to-initial-document-expected.txt
  315. sandbox-inherit-to-initial-document.html
  316. sandboxed-iframe-blocks-access-from-parent-expected.txt
  317. sandboxed-iframe-blocks-access-from-parent.html
  318. sandboxed-iframe-document-cookie-expected.txt
  319. sandboxed-iframe-document-cookie.html
  320. sandboxed-iframe-form-top-expected.txt
  321. sandboxed-iframe-form-top.html
  322. sandboxed-iframe-invalid-expected.txt
  323. sandboxed-iframe-invalid.html
  324. sandboxed-iframe-modify-self-expected.txt
  325. sandboxed-iframe-modify-self.html
  326. sandboxed-iframe-origin-add-expected.txt
  327. sandboxed-iframe-origin-add.html
  328. sandboxed-iframe-origin-remove-expected.txt
  329. sandboxed-iframe-origin-remove.html
  330. script-crossorigin-loads-correctly-expected.txt
  331. script-crossorigin-loads-correctly.html
  332. script-crossorigin-loads-same-origin-expected.txt
  333. script-crossorigin-loads-same-origin.html
  334. script-crossorigin-onerror-information-expected.txt
  335. script-crossorigin-onerror-information.html
  336. script-no-crossorigin-onerror-should-be-sanitized-expected.txt
  337. script-no-crossorigin-onerror-should-be-sanitized.html
  338. script-with-failed-cors-check-fails-to-load-expected.txt
  339. script-with-failed-cors-check-fails-to-load.html
  340. setDomainRelaxationForbiddenForURLScheme-expected.txt
  341. setDomainRelaxationForbiddenForURLScheme.html
  342. shape-image-cors-expected.html
  343. shape-image-cors.html
  344. srcdoc-can-access-parent-expected.txt
  345. srcdoc-can-access-parent.html
  346. srcdoc-in-sandbox-cannot-access-parent-expected.txt
  347. srcdoc-in-sandbox-cannot-access-parent.html
  348. srcdoc-inherits-referrer-expected.txt
  349. srcdoc-inherits-referrer-for-forms-expected.txt
  350. srcdoc-inherits-referrer-for-forms.html
  351. srcdoc-inherits-referrer.html
  352. storage-blocking-loosened-local-storage-expected.txt
  353. storage-blocking-loosened-local-storage.html
  354. storage-blocking-loosened-plugin-expected.txt
  355. storage-blocking-loosened-plugin.html
  356. storage-blocking-loosened-private-browsing-plugin-expected.txt
  357. storage-blocking-loosened-private-browsing-plugin.html
  358. storage-blocking-loosened-shared-worker-expected.txt
  359. storage-blocking-loosened-shared-worker.html
  360. storage-blocking-loosened-websql-expected.txt
  361. storage-blocking-loosened-websql.html
  362. storage-blocking-strengthened-local-storage-expected.txt
  363. storage-blocking-strengthened-local-storage.html
  364. storage-blocking-strengthened-plugin-expected.txt
  365. storage-blocking-strengthened-plugin.html
  366. storage-blocking-strengthened-private-browsing-plugin-expected.txt
  367. storage-blocking-strengthened-private-browsing-plugin.html
  368. storage-blocking-strengthened-shared-worker-expected.txt
  369. storage-blocking-strengthened-shared-worker.html
  370. storage-blocking-strengthened-websql-expected.txt
  371. storage-blocking-strengthened-websql.html
  372. stylesheet-href-redirect-expected.txt
  373. stylesheet-href-redirect.html
  374. svg-image-leak-expected.txt
  375. svg-image-leak.html
  376. svg-image-with-cached-remote-image-expected.html
  377. svg-image-with-cached-remote-image.html
  378. svg-image-with-css-cross-domain-expected.html
  379. svg-image-with-css-cross-domain.css
  380. svg-image-with-css-cross-domain.html
  381. text-track-crossorigin-expected.txt
  382. text-track-crossorigin.html
  383. video-cross-origin-accessfailure-expected.txt
  384. video-cross-origin-accessfailure.html
  385. video-cross-origin-accesssameorigin-expected.txt
  386. video-cross-origin-accesssameorigin.html
  387. video-cross-origin-readback-expected.txt
  388. video-cross-origin-readback.html
  389. video-poster-cross-origin-crash-expected.txt
  390. video-poster-cross-origin-crash.html
  391. video-poster-cross-origin-crash2-expected.txt
  392. video-poster-cross-origin-crash2.html
  393. webgl-remote-read-remote-image-allowed-expected.txt
  394. webgl-remote-read-remote-image-allowed-with-credentials-expected.txt
  395. webgl-remote-read-remote-image-allowed-with-credentials.html
  396. webgl-remote-read-remote-image-allowed.html
  397. webgl-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  398. webgl-remote-read-remote-image-blocked-no-crossorigin.html
  399. window-events-clear-domain-expected.txt
  400. window-events-clear-domain.html
  401. window-events-clear-port-expected.txt
  402. window-events-clear-port.html
  403. window-events-pass-expected.txt
  404. window-events-pass.html
  405. window-named-proto-expected.txt
  406. window-named-proto.html
  407. window-named-valueOf-expected.txt
  408. window-named-valueOf.html
  409. window-onerror-exception-in-iframe-expected.txt
  410. window-onerror-exception-in-iframe.html
  411. window-properties-clear-domain-expected.txt
  412. window-properties-clear-domain.html
  413. window-properties-clear-port-expected.txt
  414. window-properties-clear-port.html
  415. window-properties-pass-expected.txt
  416. window-properties-pass.html
  417. xhr-cors-redirect-expected.txt
  418. xss-DENIED-assign-location-hash-expected.txt
  419. xss-DENIED-assign-location-hash.html
  420. xss-DENIED-assign-location-host-expected.txt
  421. xss-DENIED-assign-location-host.html
  422. xss-DENIED-assign-location-hostname-expected.txt
  423. xss-DENIED-assign-location-hostname.html
  424. xss-DENIED-assign-location-href-javascript-expected.txt
  425. xss-DENIED-assign-location-href-javascript.html
  426. xss-DENIED-assign-location-nonstandardProperty-expected.txt
  427. xss-DENIED-assign-location-nonstandardProperty.html
  428. xss-DENIED-assign-location-pathname-expected.txt
  429. xss-DENIED-assign-location-pathname.html
  430. xss-DENIED-assign-location-protocol-expected.txt
  431. xss-DENIED-assign-location-protocol.html
  432. xss-DENIED-assign-location-reload-expected.txt
  433. xss-DENIED-assign-location-reload.html
  434. xss-DENIED-assign-location-search-expected.txt
  435. xss-DENIED-assign-location-search.html
  436. xss-DENIED-contentWindow-eval-expected.txt
  437. xss-DENIED-contentWindow-eval.html
  438. xss-DENIED-defineProperty-expected.txt
  439. xss-DENIED-defineProperty.html
  440. xss-DENIED-frame-name-expected.txt
  441. xss-DENIED-frame-name.html
  442. xss-DENIED-getSelection-from-inactive-domwindow-expected.txt
  443. xss-DENIED-getSelection-from-inactive-domwindow.html
  444. xss-DENIED-getSVGDocument-iframe-expected.txt
  445. xss-DENIED-getSVGDocument-iframe.html
  446. xss-DENIED-getSVGDocument-object-expected.txt
  447. xss-DENIED-getSVGDocument-object.html
  448. xss-DENIED-htmlelelment-with-iframe-proto-expected.txt
  449. xss-DENIED-htmlelelment-with-iframe-proto.html
  450. xss-DENIED-iframe-src-alias-expected.txt
  451. xss-DENIED-iframe-src-alias.html
  452. xss-DENIED-invalid-domain-change-expected.txt
  453. xss-DENIED-invalid-domain-change.html
  454. xss-DENIED-javascript-with-spaces-expected.txt
  455. xss-DENIED-javascript-with-spaces.html
  456. xss-DENIED-method-with-iframe-proto-expected.txt
  457. xss-DENIED-method-with-iframe-proto.html
  458. xss-DENIED-mime-type-execute-as-html-expected.txt
  459. xss-DENIED-mime-type-execute-as-html.html
  460. xss-DENIED-non-shadowable-propterty-with-iframe-proto-expected.txt
  461. xss-DENIED-non-shadowable-propterty-with-iframe-proto.html
  462. xss-DENIED-object-element-expected.txt
  463. xss-DENIED-object-element.html
  464. xss-DENIED-regular-propterty-with-iframe-proto-expected.txt
  465. xss-DENIED-regular-propterty-with-iframe-proto.html
  466. xss-DENIED-sandboxed-iframe-expected.txt
  467. xss-DENIED-sandboxed-iframe.html
  468. xss-DENIED-synchronous-form-expected.txt
  469. xss-DENIED-synchronous-form.html
  470. xss-DENIED-synchronous-frame-load-in-javascript-url-expected.txt
  471. xss-DENIED-synchronous-frame-load-in-javascript-url.html
  472. xss-DENIED-window-index-assign-expected.txt
  473. xss-DENIED-window-index-assign.html
  474. xss-DENIED-window-name-alert-expected.txt
  475. xss-DENIED-window-name-alert.html
  476. xss-DENIED-window-name-navigator-expected.txt
  477. xss-DENIED-window-name-navigator.html
  478. xss-DENIED-window-open-javascript-url-expected.txt
  479. xss-DENIED-window-open-javascript-url-with-spaces-expected.txt
  480. xss-DENIED-window-open-javascript-url-with-spaces.html
  481. xss-DENIED-window-open-javascript-url.html
  482. xss-DENIED-window-open-parent-expected.txt
  483. xss-DENIED-window-open-parent.html
  484. xss-DENIED-xml-external-entity-expected.txt
  485. xss-DENIED-xml-external-entity.xhtml
  486. xss-DENIED-xsl-document-expected.txt
  487. xss-DENIED-xsl-document-redirect-expected.txt
  488. xss-DENIED-xsl-document-redirect.xml
  489. xss-DENIED-xsl-document-securityOrigin-expected.txt
  490. xss-DENIED-xsl-document-securityOrigin.xml
  491. xss-DENIED-xsl-document.xml
  492. xss-DENIED-xsl-external-entity-expected.txt
  493. xss-DENIED-xsl-external-entity-redirect-expected.txt
  494. xss-DENIED-xsl-external-entity-redirect.xml
  495. xss-DENIED-xsl-external-entity.xml
  496. xss-eval-expected.txt
  497. xss-eval.html