| <!DOCTYPE html> |
| <html> |
| <head> |
| <script src='../resources/multiple-iframe-test.js'></script> |
| <script> |
| var tests = [ |
| ['yes', 'reflected-xss allow', 'resources/script.js'], |
| ['yes', 'reflected-xss filter', 'resources/script.js'], |
| ['yes', 'reflected-xss block', 'resources/script.js'], |
| ['yes', 'reflected-xss', 'resources/script.js'], |
| ['yes', 'reflected-xss blah', 'resources/script.js'], |
| ['yes', 'reflected-xss allow blah', 'resources/script.js'], |
| ['yes', 'reflected-xss blah allow', 'resources/script.js'], |
| ]; |
| </script> |
| </head> |
| <body onload="testExperimentalPolicy()"> |
| <p> |
| Invalid 'reflected-xss' headers should generate console messages. |
| </p> |
| </body> |
| </html> |
