validator/testdata/feature_tests/javascript_xss.out - main - githubmirror/amphtml

validator/testdata/feature_tests/javascript_xss.out

25 строк2 KB

honeybadgerdontcare

Validator rollup 20210819 (#35748)

20 авг 2021, 21:08

20 авг 2021, 21:0815f658d

FAIL
|  <!doctype html>
|  <html ⚡>
|  <head>
|    <meta charset="utf-8">
|    <link rel="canonical" href="./regular-html-version.html">
|    <meta name="viewport" content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no,minimal-ui">
|    <style amp-boilerplate>body{-webkit-animation:-amp-start 8s steps(1,end) 0s 1 normal both;-moz-animation:-amp-start 8s steps(1,end) 0s 1 normal both;-ms-animation:-amp-start 8s steps(1,end) 0s 1 normal both;animation:-amp-start 8s steps(1,end) 0s 1 normal both}@-webkit-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-moz-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-ms-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-o-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}</style><noscript><style amp-boilerplate>body{-webkit-animation:none;-moz-animation:none;-ms-animation:none;animation:none}</style></noscript>
|    <script src="https://cdn.ampproject.org/v0.js" async></script>
|  </head>
|  <body>
|    <a href="javascript:alert('boo')">Click here to see an important message.</a>
>>   ^~~~~~~~~
feature_tests/javascript_xss.html:11:2 Invalid URL protocol 'javascript:' for attribute 'href' in tag 'a'. (see https://amp.dev/documentation/guides-and-tutorials/learn/spec/amphtml/#links)
|    <a href="JavaScript:alert('boo')">It's CAse inSenSitive.</a>
>>   ^~~~~~~~~
feature_tests/javascript_xss.html:12:2 Invalid URL protocol 'javascript:' for attribute 'href' in tag 'a'. (see https://amp.dev/documentation/guides-and-tutorials/learn/spec/amphtml/#links)
|    <a href="vbscript:bar">vbscript is also dangerous</a>
>>   ^~~~~~~~~
feature_tests/javascript_xss.html:13:2 Invalid URL protocol 'vbscript:' for attribute 'href' in tag 'a'. (see https://amp.dev/documentation/guides-and-tutorials/learn/spec/amphtml/#links)
|    <a href="data:baz">data urls have some risks</a>
>>   ^~~~~~~~~
feature_tests/javascript_xss.html:14:2 Invalid URL protocol 'data:' for attribute 'href' in tag 'a'. (see https://amp.dev/documentation/guides-and-tutorials/learn/spec/amphtml/#links)
|  </body>
|  </html>