browser_911547_sample.html (495B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <meta charset="utf-8"> 5 <title>Test 911547</title> 6 </head> 7 <body> 8 9 <!-- 10 this element gets modified by an injected script; 11 that script should be blocked by CSP 12 --> 13 <input type="text" id="test_id1" value="id1_initial"> 14 15 <a id="test_data_link" href="data:text/html;charset=utf-8,<input type='text' id='test_id2' value='id2_initial'/> <script>document.getElementById('test_id2').value = 'id2_modified';</script>">Test Link</a> 16 17 </body> 18 </html>