diff options
| author | fukachan <fukachan> | 2002-05-11 09:50:30 +0000 |
|---|---|---|
| committer | fukachan <fukachan> | 2002-05-11 09:50:30 +0000 |
| commit | 329cd0b839cf9db8eecfff3634249d09bf45ac8d (patch) | |
| tree | 48513876a4955f55e43448ea4c5d2755c7677137 | |
| parent | cf02f19a798b19fce62f88bcb53c731297088767 (diff) | |
| download | fml8-329cd0b839cf9db8eecfff3634249d09bf45ac8d.tar.gz fml8-329cd0b839cf9db8eecfff3634249d09bf45ac8d.tar.bz2 fml8-329cd0b839cf9db8eecfff3634249d09bf45ac8d.zip | |
cross site scripting sample
| -rw-r--r-- | regress/testmails/text=html.css1 | 10 | ||||
| -rw-r--r-- | regress/testmails/text=html.css2 | 10 | ||||
| -rw-r--r-- | regress/testmails/text=html.css3 | 11 |
3 files changed, 31 insertions, 0 deletions
diff --git a/regress/testmails/text=html.css1 b/regress/testmails/text=html.css1 new file mode 100644 index 00000000..1369b21f --- /dev/null +++ b/regress/testmails/text=html.css1 @@ -0,0 +1,10 @@ +From: test@example.com +To: test@example.com +Date: Sun, 16 Dec 2001 00:00:00 +0900 +Subject: test +MIME-Version: 1.0 +Content-Type: text/html + +<HTML> +<SCR<SCRIPT></SCRIPT>IPT>alert(document.domain)</SCR<SCRIPT></SCRIPT>IPT> +</HTML> diff --git a/regress/testmails/text=html.css2 b/regress/testmails/text=html.css2 new file mode 100644 index 00000000..ba5ce9e6 --- /dev/null +++ b/regress/testmails/text=html.css2 @@ -0,0 +1,10 @@ +From: test@example.com +To: test@example.com +Date: Sun, 16 Dec 2001 00:00:00 +0900 +Subject: test +MIME-Version: 1.0 +Content-Type: text/html + +<HTML> +<IMG SRC=javascript:alert(document.domain)> +</HTML> diff --git a/regress/testmails/text=html.css3 b/regress/testmails/text=html.css3 new file mode 100644 index 00000000..c137c964 --- /dev/null +++ b/regress/testmails/text=html.css3 @@ -0,0 +1,11 @@ +From: test@example.com +To: test@example.com +Date: Sun, 16 Dec 2001 00:00:00 +0900 +Subject: test +MIME-Version: 1.0 +Content-Type: text/html + +<HTML> +<B foo=&{alert(document.domain)};> +Vulnerable only if Netscape 4.x is used to browse.</B> +</HTML> |