blob: 99ec693ca90dc744c369e23df328caff7a6ffced [file] [edit]
>>> Disallowed Raw HTML (extension) - 652
<strong> <title> <style> <em>
<blockquote>
<xmp> is disallowed. <XMP> is also disallowed.
</blockquote>
<<<
<p><strong> &lt;title> &lt;style> <em></p>
<blockquote>
&lt;xmp> is disallowed. &lt;XMP> is also disallowed.
</blockquote>
>>> Tags with attributes (block)
<script src="foo.js"></script>
<<<
&lt;script src="foo.js">&lt;/script>
>>> Tags with spaces (block)
<script >
<<<
&lt;script >
>>> Self-closing tags (block)
<script/>
<<<
&lt;script/>
>>> Closing tags (block)
</script>
<<<
&lt;/script>
>>> HTML attributes with unquoted values (block)
<script src=//evil/x.js>
<<<
&lt;script src=//evil/x.js>
>>> Other disallowed tags like iframe (block)
<iframe srcdoc="evil">
<<<
&lt;iframe srcdoc="evil">
>>> Tags with attributes (inline)
foo <script src="foo.js"></script>
<<<
<p>foo &lt;script src="foo.js">&lt;/script></p>
>>> Tags with spaces (inline)
foo <script >
<<<
<p>foo &lt;script ></p>
>>> Self-closing tags (inline)
foo <script/>
<<<
<p>foo &lt;script/></p>
>>> Closing tags (inline)
foo </script>
<<<
<p>foo &lt;/script></p>
>>> HTML attributes with unquoted values (inline)
foo <script src=//evil/x.js>
<<<
<p>foo &lt;script src=//evil/x.js></p>
>>> Other disallowed tags like iframe (inline)
foo <iframe srcdoc="evil">
<<<
<p>foo &lt;iframe srcdoc="evil"></p>