Google Git
Sign in
chromium/external/github.com/WebKit/webkit/refs/heads/webkitgtk/2.8/./LayoutTests/http/tests/security
tree: 1bcf5e37aee75adf08681a316fe18ff09ec38d70
  1. 401-logout/
  2. aboutBlank/
  3. clipboard/
  4. contentSecurityPolicy/
  5. contentTypeOptions/
  6. cookies/
  7. dataURL/
  8. frameNavigation/
  9. isolatedWorld/
  10. javascriptURL/
  11. listener/
  12. MessagePort/
  13. mixedContent/
  14. originHeader/
  15. postMessage/
  16. resources/
  17. XFrameOptions/
  18. xssAuditor/
  19. appcache-in-private-browsing-expected.txt
  20. appcache-in-private-browsing.html
  21. appcache-switching-private-browsing-expected.txt
  22. appcache-switching-private-browsing.html
  23. beforeload-iframe-client-redirect-expected.txt
  24. beforeload-iframe-client-redirect.html
  25. beforeload-iframe-server-redirect-expected.txt
  26. beforeload-iframe-server-redirect.html
  27. calling-versus-current-expected.txt
  28. calling-versus-current.html
  29. cannot-read-cssrules-expected.txt
  30. cannot-read-cssrules-redirect-expected.txt
  31. cannot-read-cssrules-redirect.html
  32. cannot-read-cssrules.html
  33. canvas-cors-with-two-hosts-expected.txt
  34. canvas-cors-with-two-hosts.html
  35. canvas-remote-read-data-url-image-expected.txt
  36. canvas-remote-read-data-url-image-redirect-expected.txt
  37. canvas-remote-read-data-url-image-redirect.html
  38. canvas-remote-read-data-url-image.html
  39. canvas-remote-read-redirect-to-remote-image-expected.txt
  40. canvas-remote-read-redirect-to-remote-image.html
  41. canvas-remote-read-remote-image-allowed-expected.txt
  42. canvas-remote-read-remote-image-allowed-with-credentials-expected.txt
  43. canvas-remote-read-remote-image-allowed-with-credentials.html
  44. canvas-remote-read-remote-image-allowed.html
  45. canvas-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  46. canvas-remote-read-remote-image-blocked-no-crossorigin.html
  47. canvas-remote-read-remote-image-blocked-then-allowed-expected.txt
  48. canvas-remote-read-remote-image-blocked-then-allowed.html
  49. canvas-remote-read-remote-image-document-domain-expected.txt
  50. canvas-remote-read-remote-image-document-domain.html
  51. canvas-remote-read-remote-image-expected.txt
  52. canvas-remote-read-remote-image-redirect-expected.txt
  53. canvas-remote-read-remote-image-redirect.html
  54. canvas-remote-read-remote-image.html
  55. cors-post-redirect-301-expected.txt
  56. cors-post-redirect-301.html
  57. cors-post-redirect-302-expected.txt
  58. cors-post-redirect-302.html
  59. cors-post-redirect-307-expected.txt
  60. cors-post-redirect-307.html
  61. cors-post-redirect-308-expected.txt
  62. cors-post-redirect-308.html
  63. credentials-in-referer-expected.txt
  64. credentials-in-referer.html
  65. cross-frame-access-call-expected.txt
  66. cross-frame-access-call.html
  67. cross-frame-access-callback-explicit-domain-ALLOW-expected.txt
  68. cross-frame-access-callback-explicit-domain-ALLOW.html
  69. cross-frame-access-callback-explicit-domain-DENY-expected.txt
  70. cross-frame-access-callback-explicit-domain-DENY.html
  71. cross-frame-access-child-explicit-domain-expected.txt
  72. cross-frame-access-child-explicit-domain.html
  73. cross-frame-access-custom-expected.txt
  74. cross-frame-access-custom.html
  75. cross-frame-access-delete-expected.txt
  76. cross-frame-access-delete.html
  77. cross-frame-access-document-direct-expected.txt
  78. cross-frame-access-document-direct.html
  79. cross-frame-access-DOMImplementation-expected.txt
  80. cross-frame-access-DOMImplementation.html
  81. cross-frame-access-enumeration-expected.txt
  82. cross-frame-access-enumeration.html
  83. cross-frame-access-first-time-expected.txt
  84. cross-frame-access-first-time.html
  85. cross-frame-access-frameelement-expected.txt
  86. cross-frame-access-frameelement.html
  87. cross-frame-access-frames-expected.txt
  88. cross-frame-access-frames.html
  89. cross-frame-access-get-custom-property-cached-expected.txt
  90. cross-frame-access-get-custom-property-cached.html
  91. cross-frame-access-get-expected.txt
  92. cross-frame-access-get-override-expected.txt
  93. cross-frame-access-get-override.html
  94. cross-frame-access-get.html
  95. cross-frame-access-getOwnPropertyDescriptor-expected.txt
  96. cross-frame-access-getOwnPropertyDescriptor.html
  97. cross-frame-access-history-get-expected.txt
  98. cross-frame-access-history-get-override-expected.txt
  99. cross-frame-access-history-get-override.html
  100. cross-frame-access-history-get.html
  101. cross-frame-access-history-prototype-expected.txt
  102. cross-frame-access-history-prototype.html
  103. cross-frame-access-history-put-expected.txt
  104. cross-frame-access-history-put.html
  105. cross-frame-access-location-get-expected.txt
  106. cross-frame-access-location-get-override-expected.txt
  107. cross-frame-access-location-get-override.html
  108. cross-frame-access-location-get.html
  109. cross-frame-access-location-prototype-expected.txt
  110. cross-frame-access-location-prototype.html
  111. cross-frame-access-location-put-expected.txt
  112. cross-frame-access-location-put.html
  113. cross-frame-access-name-getter-expected.txt
  114. cross-frame-access-name-getter.html
  115. cross-frame-access-object-getPrototypeOf-expected.txt
  116. cross-frame-access-object-getPrototypeOf.html
  117. cross-frame-access-object-prototype-expected.txt
  118. cross-frame-access-object-prototype.html
  119. cross-frame-access-parent-explicit-domain-expected.txt
  120. cross-frame-access-parent-explicit-domain.html
  121. cross-frame-access-port-expected.txt
  122. cross-frame-access-port-explicit-domain-expected.txt
  123. cross-frame-access-port-explicit-domain.html
  124. cross-frame-access-port.html
  125. cross-frame-access-private-browsing-expected.txt
  126. cross-frame-access-private-browsing.html
  127. cross-frame-access-protocol-expected.txt
  128. cross-frame-access-protocol-explicit-domain-expected.txt
  129. cross-frame-access-protocol-explicit-domain.html
  130. cross-frame-access-protocol.html
  131. cross-frame-access-put-expected.txt
  132. cross-frame-access-put.html
  133. cross-frame-access-selection-expected.txt
  134. cross-frame-access-selection.html
  135. cross-origin-appcache-allowed-expected.txt
  136. cross-origin-appcache-allowed.html
  137. cross-origin-appcache-expected.txt
  138. cross-origin-appcache.html
  139. cross-origin-css-expected.txt
  140. cross-origin-css-in-xml-expected.txt
  141. cross-origin-css-in-xml.xml
  142. cross-origin-css-primitive-expected.txt
  143. cross-origin-css-primitive.html
  144. cross-origin-css.html
  145. cross-origin-getMatchedCSSRules-expected.txt
  146. cross-origin-getMatchedCSSRules.html
  147. cross-origin-getMatchedCSSRules2-expected.txt
  148. cross-origin-getMatchedCSSRules2.html
  149. cross-origin-indexeddb-allowed-expected.txt
  150. cross-origin-indexeddb-allowed.html
  151. cross-origin-indexeddb-expected.txt
  152. cross-origin-indexeddb.html
  153. cross-origin-local-storage-allowed-expected.txt
  154. cross-origin-local-storage-allowed.html
  155. cross-origin-local-storage-expected.txt
  156. cross-origin-local-storage-wk1-expected.txt
  157. cross-origin-local-storage-wk1.html
  158. cross-origin-local-storage.html
  159. cross-origin-plugin-allowed-expected.txt
  160. cross-origin-plugin-allowed.html
  161. cross-origin-plugin-expected.txt
  162. cross-origin-plugin-private-browsing-toggled-allowed-expected.txt
  163. cross-origin-plugin-private-browsing-toggled-allowed.html
  164. cross-origin-plugin-private-browsing-toggled-expected.txt
  165. cross-origin-plugin-private-browsing-toggled.html
  166. cross-origin-plugin.html
  167. cross-origin-script-window-onerror-expected.txt
  168. cross-origin-script-window-onerror-redirected-expected.txt
  169. cross-origin-script-window-onerror-redirected.html
  170. cross-origin-script-window-onerror.html
  171. cross-origin-session-storage-allowed-expected.txt
  172. cross-origin-session-storage-allowed.html
  173. cross-origin-session-storage-third-party-blocked-expected.txt
  174. cross-origin-session-storage-third-party-blocked.html
  175. cross-origin-websql-allowed-expected.txt
  176. cross-origin-websql-allowed.html
  177. cross-origin-websql-expected.txt
  178. cross-origin-websql.html
  179. cross-origin-worker-indexeddb-allowed-expected.txt
  180. cross-origin-worker-indexeddb-allowed.html
  181. cross-origin-worker-indexeddb-expected.txt
  182. cross-origin-worker-indexeddb.html
  183. cross-origin-xsl-BLOCKED-expected.txt
  184. cross-origin-xsl-BLOCKED.html
  185. cross-origin-xsl-redirect-BLOCKED-expected.txt
  186. cross-origin-xsl-redirect-BLOCKED.html
  187. data-url-inline.css-expected.txt
  188. data-url-inline.css.html
  189. dataTransfer-set-data-file-url-expected.txt
  190. dataTransfer-set-data-file-url.html
  191. detached-sandboxed-frame-access-expected.txt
  192. detached-sandboxed-frame-access.html
  193. document-all-expected.txt
  194. document-all.html
  195. drag-drop-different-origin-expected.txt
  196. drag-drop-different-origin.html
  197. drag-drop-local-file-expected.txt
  198. drag-drop-local-file.html
  199. drag-drop-same-unique-origin-expected.txt
  200. drag-drop-same-unique-origin.html
  201. drag-over-remote-content-iframe-expected.txt
  202. drag-over-remote-content-iframe.html
  203. escape-form-data-field-names-expected.txt
  204. escape-form-data-field-names.html
  205. feed-urls-from-remote-expected.txt
  206. feed-urls-from-remote.html
  207. frame-loading-via-document-write-expected.txt
  208. frame-loading-via-document-write.html
  209. host-compare-case-insensitive-expected.txt
  210. host-compare-case-insensitive.html
  211. img-crossorigin-loads-same-origin-expected.txt
  212. img-crossorigin-loads-same-origin.html
  213. img-with-failed-cors-check-fails-to-load-expected.txt
  214. img-with-failed-cors-check-fails-to-load.html
  215. inactive-document-with-empty-security-origin-expected.txt
  216. inactive-document-with-empty-security-origin.html
  217. local-CSS-from-remote-expected.txt
  218. local-CSS-from-remote.html
  219. local-iFrame-from-remote-expected.txt
  220. local-iFrame-from-remote.html
  221. local-image-from-remote-expected.txt
  222. local-image-from-remote-whitelisted-expected.txt
  223. local-image-from-remote-whitelisted.html
  224. local-image-from-remote.html
  225. local-JavaScript-from-remote-expected.txt
  226. local-JavaScript-from-remote.html
  227. local-user-CSS-from-remote-expected.txt
  228. local-user-CSS-from-remote.html
  229. local-video-poster-from-remote-expected.txt
  230. local-video-poster-from-remote.html
  231. local-video-source-from-remote-expected.txt
  232. local-video-source-from-remote.html
  233. local-video-src-from-remote-expected.txt
  234. local-video-src-from-remote.html
  235. location-prototype-expected.txt
  236. location-prototype.html
  237. no-indexeddb-from-sandbox-expected.txt
  238. no-indexeddb-from-sandbox.html
  239. no-javascript-location-expected.txt
  240. no-javascript-location-percent-escaped-expected.txt
  241. no-javascript-location-percent-escaped.html
  242. no-javascript-location.html
  243. no-javascript-refresh-expected.txt
  244. no-javascript-refresh-percent-escaped-expected.txt
  245. no-javascript-refresh-percent-escaped.php
  246. no-javascript-refresh-spaces-expected.txt
  247. no-javascript-refresh-spaces.php
  248. no-javascript-refresh-static-expected.txt
  249. no-javascript-refresh-static-percent-escaped-expected.txt
  250. no-javascript-refresh-static-percent-escaped.html
  251. no-javascript-refresh-static-spaces-expected.txt
  252. no-javascript-refresh-static-spaces.html
  253. no-javascript-refresh-static.html
  254. no-javascript-refresh.php
  255. no-popup-from-sandbox-expected.txt
  256. no-popup-from-sandbox-top-expected.txt
  257. no-popup-from-sandbox-top.html
  258. no-popup-from-sandbox.html
  259. no-referrer-expected.txt
  260. no-referrer.html
  261. object-literals-expected.txt
  262. object-literals.html
  263. popup-allowed-by-sandbox-is-sandboxed-control-expected.txt
  264. popup-allowed-by-sandbox-is-sandboxed-control.html
  265. popup-allowed-by-sandbox-is-sandboxed-expected.txt
  266. popup-allowed-by-sandbox-is-sandboxed.html
  267. popup-allowed-by-sandbox-when-allowed-expected.txt
  268. popup-allowed-by-sandbox-when-allowed.html
  269. popup-blocked-from-fake-event-expected.txt
  270. popup-blocked-from-fake-event.html
  271. popup-blocked-from-window-open-expected.txt
  272. popup-blocked-from-window-open.html
  273. protocol-compare-case-insensitive-expected.txt
  274. protocol-compare-case-insensitive.html
  275. redirect-BLOCKED-to-localURL-expected.txt
  276. redirect-BLOCKED-to-localURL.html
  277. referrer-policy-always-expected.txt
  278. referrer-policy-always.html
  279. referrer-policy-default-expected.txt
  280. referrer-policy-default.html
  281. referrer-policy-https-always-expected.txt
  282. referrer-policy-https-always.html
  283. referrer-policy-https-default-expected.txt
  284. referrer-policy-https-default.html
  285. referrer-policy-https-never-expected.txt
  286. referrer-policy-https-never.html
  287. referrer-policy-https-no-referrer-expected.txt
  288. referrer-policy-https-no-referrer-when-downgrade-expected.txt
  289. referrer-policy-https-no-referrer-when-downgrade.html
  290. referrer-policy-https-no-referrer.html
  291. referrer-policy-https-origin-expected.txt
  292. referrer-policy-https-origin.html
  293. referrer-policy-https-unsafe-url-expected.txt
  294. referrer-policy-https-unsafe-url.html
  295. referrer-policy-invalid-expected.txt
  296. referrer-policy-invalid.html
  297. referrer-policy-never-expected.txt
  298. referrer-policy-never.html
  299. referrer-policy-no-referrer-expected.txt
  300. referrer-policy-no-referrer-when-downgrade-expected.txt
  301. referrer-policy-no-referrer-when-downgrade.html
  302. referrer-policy-no-referrer.html
  303. referrer-policy-origin-expected.txt
  304. referrer-policy-origin.html
  305. referrer-policy-redirect-expected.txt
  306. referrer-policy-redirect-link-expected.txt
  307. referrer-policy-redirect-link.html
  308. referrer-policy-redirect.html
  309. referrer-policy-rel-noreferrer-expected.txt
  310. referrer-policy-rel-noreferrer.html
  311. referrer-policy-window-open-expected.txt
  312. referrer-policy-window-open.html
  313. same-origin-appcache-blocked-expected.txt
  314. same-origin-appcache-blocked.html
  315. same-origin-document-domain-storage-allowed-expected.txt
  316. same-origin-document-domain-storage-allowed.html
  317. same-origin-storage-blocked-expected.txt
  318. same-origin-storage-blocked.html
  319. same-origin-websql-blocked-expected.txt
  320. same-origin-websql-blocked.html
  321. sandbox-inherit-to-initial-document-2-expected.txt
  322. sandbox-inherit-to-initial-document-2.html
  323. sandbox-inherit-to-initial-document-expected.txt
  324. sandbox-inherit-to-initial-document.html
  325. sandboxed-iframe-blocks-access-from-parent-expected.txt
  326. sandboxed-iframe-blocks-access-from-parent.html
  327. sandboxed-iframe-document-cookie-expected.txt
  328. sandboxed-iframe-document-cookie.html
  329. sandboxed-iframe-form-top-expected.txt
  330. sandboxed-iframe-form-top.html
  331. sandboxed-iframe-invalid-expected.txt
  332. sandboxed-iframe-invalid.html
  333. sandboxed-iframe-modify-self-expected.txt
  334. sandboxed-iframe-modify-self.html
  335. sandboxed-iframe-origin-add-expected.txt
  336. sandboxed-iframe-origin-add.html
  337. sandboxed-iframe-origin-remove-expected.txt
  338. sandboxed-iframe-origin-remove.html
  339. script-crossorigin-loads-correctly-expected.txt
  340. script-crossorigin-loads-correctly.html
  341. script-crossorigin-loads-same-origin-expected.txt
  342. script-crossorigin-loads-same-origin.html
  343. script-crossorigin-onerror-information-expected.txt
  344. script-crossorigin-onerror-information.html
  345. script-no-crossorigin-onerror-should-be-sanitized-expected.txt
  346. script-no-crossorigin-onerror-should-be-sanitized.html
  347. script-with-failed-cors-check-fails-to-load-expected.txt
  348. script-with-failed-cors-check-fails-to-load.html
  349. setDomainRelaxationForbiddenForURLScheme-expected.txt
  350. setDomainRelaxationForbiddenForURLScheme.html
  351. shape-image-cors-expected.html
  352. shape-image-cors.html
  353. srcdoc-can-access-parent-expected.txt
  354. srcdoc-can-access-parent.html
  355. srcdoc-in-sandbox-cannot-access-parent-expected.txt
  356. srcdoc-in-sandbox-cannot-access-parent.html
  357. srcdoc-inherits-referrer-expected.txt
  358. srcdoc-inherits-referrer-for-forms-expected.txt
  359. srcdoc-inherits-referrer-for-forms.html
  360. srcdoc-inherits-referrer.html
  361. storage-blocking-loosened-local-storage-expected.txt
  362. storage-blocking-loosened-local-storage.html
  363. storage-blocking-loosened-plugin-expected.txt
  364. storage-blocking-loosened-plugin.html
  365. storage-blocking-loosened-private-browsing-plugin-expected.txt
  366. storage-blocking-loosened-private-browsing-plugin.html
  367. storage-blocking-loosened-websql-expected.txt
  368. storage-blocking-loosened-websql.html
  369. storage-blocking-strengthened-local-storage-expected.txt
  370. storage-blocking-strengthened-local-storage.html
  371. storage-blocking-strengthened-plugin-expected.txt
  372. storage-blocking-strengthened-plugin.html
  373. storage-blocking-strengthened-private-browsing-plugin-expected.txt
  374. storage-blocking-strengthened-private-browsing-plugin.html
  375. storage-blocking-strengthened-websql-expected.txt
  376. storage-blocking-strengthened-websql.html
  377. stylesheet-href-redirect-expected.txt
  378. stylesheet-href-redirect.html
  379. svg-image-leak-expected.txt
  380. svg-image-leak.html
  381. svg-image-with-cached-remote-image-expected.html
  382. svg-image-with-cached-remote-image.html
  383. svg-image-with-css-cross-domain-expected.html
  384. svg-image-with-css-cross-domain.css
  385. svg-image-with-css-cross-domain.html
  386. text-track-crossorigin-expected.txt
  387. text-track-crossorigin.html
  388. video-cross-origin-accessfailure-expected.txt
  389. video-cross-origin-accessfailure.html
  390. video-cross-origin-accesssameorigin-expected.txt
  391. video-cross-origin-accesssameorigin.html
  392. video-cross-origin-readback-expected.txt
  393. video-cross-origin-readback.html
  394. video-poster-cross-origin-crash-expected.txt
  395. video-poster-cross-origin-crash.html
  396. video-poster-cross-origin-crash2-expected.txt
  397. video-poster-cross-origin-crash2.html
  398. webgl-remote-read-remote-image-allowed-expected.txt
  399. webgl-remote-read-remote-image-allowed-with-credentials-expected.txt
  400. webgl-remote-read-remote-image-allowed-with-credentials.html
  401. webgl-remote-read-remote-image-allowed.html
  402. webgl-remote-read-remote-image-blocked-no-crossorigin-expected.txt
  403. webgl-remote-read-remote-image-blocked-no-crossorigin.html
  404. window-events-clear-domain-expected.txt
  405. window-events-clear-domain.html
  406. window-events-clear-port-expected.txt
  407. window-events-clear-port.html
  408. window-events-pass-expected.txt
  409. window-events-pass.html
  410. window-named-proto-expected.txt
  411. window-named-proto.html
  412. window-named-valueOf-expected.txt
  413. window-named-valueOf.html
  414. window-onerror-exception-in-iframe-expected.txt
  415. window-onerror-exception-in-iframe.html
  416. window-properties-clear-domain-expected.txt
  417. window-properties-clear-domain.html
  418. window-properties-clear-port-expected.txt
  419. window-properties-clear-port.html
  420. window-properties-pass-expected.txt
  421. window-properties-pass.html
  422. xhr-cors-redirect-expected.txt
  423. xss-DENIED-assign-location-hash-expected.txt
  424. xss-DENIED-assign-location-hash.html
  425. xss-DENIED-assign-location-host-expected.txt
  426. xss-DENIED-assign-location-host.html
  427. xss-DENIED-assign-location-hostname-expected.txt
  428. xss-DENIED-assign-location-hostname.html
  429. xss-DENIED-assign-location-href-javascript-expected.txt
  430. xss-DENIED-assign-location-href-javascript.html
  431. xss-DENIED-assign-location-nonstandardProperty-expected.txt
  432. xss-DENIED-assign-location-nonstandardProperty.html
  433. xss-DENIED-assign-location-pathname-expected.txt
  434. xss-DENIED-assign-location-pathname.html
  435. xss-DENIED-assign-location-protocol-expected.txt
  436. xss-DENIED-assign-location-protocol.html
  437. xss-DENIED-assign-location-reload-expected.txt
  438. xss-DENIED-assign-location-reload.html
  439. xss-DENIED-assign-location-search-expected.txt
  440. xss-DENIED-assign-location-search.html
  441. xss-DENIED-contentWindow-eval-expected.txt
  442. xss-DENIED-contentWindow-eval.html
  443. xss-DENIED-defineProperty-expected.txt
  444. xss-DENIED-defineProperty.html
  445. xss-DENIED-frame-name-expected.txt
  446. xss-DENIED-frame-name.html
  447. xss-DENIED-getSelection-from-inactive-domwindow-expected.txt
  448. xss-DENIED-getSelection-from-inactive-domwindow.html
  449. xss-DENIED-getSVGDocument-iframe-expected.txt
  450. xss-DENIED-getSVGDocument-iframe.html
  451. xss-DENIED-getSVGDocument-object-expected.txt
  452. xss-DENIED-getSVGDocument-object.html
  453. xss-DENIED-htmlelelment-with-iframe-proto-expected.txt
  454. xss-DENIED-htmlelelment-with-iframe-proto.html
  455. xss-DENIED-iframe-src-alias-expected.txt
  456. xss-DENIED-iframe-src-alias.html
  457. xss-DENIED-invalid-domain-change-expected.txt
  458. xss-DENIED-invalid-domain-change.html
  459. xss-DENIED-javascript-with-spaces-expected.txt
  460. xss-DENIED-javascript-with-spaces.html
  461. xss-DENIED-method-with-iframe-proto-expected.txt
  462. xss-DENIED-method-with-iframe-proto.html
  463. xss-DENIED-mime-type-execute-as-html-expected.txt
  464. xss-DENIED-mime-type-execute-as-html.html
  465. xss-DENIED-non-shadowable-propterty-with-iframe-proto-expected.txt
  466. xss-DENIED-non-shadowable-propterty-with-iframe-proto.html
  467. xss-DENIED-object-element-expected.txt
  468. xss-DENIED-object-element.html
  469. xss-DENIED-regular-propterty-with-iframe-proto-expected.txt
  470. xss-DENIED-regular-propterty-with-iframe-proto.html
  471. xss-DENIED-sandboxed-iframe-expected.txt
  472. xss-DENIED-sandboxed-iframe.html
  473. xss-DENIED-synchronous-form-expected.txt
  474. xss-DENIED-synchronous-form.html
  475. xss-DENIED-synchronous-frame-load-in-javascript-url-expected.txt
  476. xss-DENIED-synchronous-frame-load-in-javascript-url.html
  477. xss-DENIED-window-index-assign-expected.txt
  478. xss-DENIED-window-index-assign.html
  479. xss-DENIED-window-name-alert-expected.txt
  480. xss-DENIED-window-name-alert.html
  481. xss-DENIED-window-name-navigator-expected.txt
  482. xss-DENIED-window-name-navigator.html
  483. xss-DENIED-window-open-javascript-url-expected.txt
  484. xss-DENIED-window-open-javascript-url-with-spaces-expected.txt
  485. xss-DENIED-window-open-javascript-url-with-spaces.html
  486. xss-DENIED-window-open-javascript-url.html
  487. xss-DENIED-window-open-parent-expected.txt
  488. xss-DENIED-window-open-parent.html
  489. xss-DENIED-xml-external-entity-expected.txt
  490. xss-DENIED-xml-external-entity.xhtml
  491. xss-DENIED-xsl-document-expected.txt
  492. xss-DENIED-xsl-document-redirect-expected.txt
  493. xss-DENIED-xsl-document-redirect.xml
  494. xss-DENIED-xsl-document-securityOrigin-expected.txt
  495. xss-DENIED-xsl-document-securityOrigin.xml
  496. xss-DENIED-xsl-document.xml
  497. xss-DENIED-xsl-external-entity-expected.txt
  498. xss-DENIED-xsl-external-entity-redirect-expected.txt
  499. xss-DENIED-xsl-external-entity-redirect.xml
  500. xss-DENIED-xsl-external-entity.xml
  501. xss-eval-expected.txt
  502. xss-eval.html