tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

test-csp-violation-base-uri.html (476B)

      1 <html>
      2      <head>
      3          <title>CSP Base-URI Violation Test </title>
      4          <base href="https://evil.com/">
      5      </head>
      6      <body>
      7          <h1> Crashing the Base Element</h1>
      8      </body>
      9      <script>
     10        "use strict";
     11        window.violate = ()=>{
     12          document.head.innerHTML = "";
     13          const b = document.createElement("base");
     14          b.href = "https://evil.com";
     15          document.head.append(b);
     16        };
     17      </script>
     18    </html>