| Brian Silverman | 70325d6 | 2015-09-20 17:00:43 -0400 | [diff] [blame^] | 1 | <html> |
| 2 | <body> |
| 3 | |
| 4 | <a onclick="alert('<?state state=value, tag=a, attr=onclick, attr_type=js, |
| 5 | in_js=true, js_quoted=true?> x') &; &a; &x;/*blah <?state state=value, |
| 6 | tag=a, attr=onclick, attr_type=js, in_js=true ?> */ "></a> |
| 7 | |
| 8 | <?state state=text, in_js=false ?> |
| 9 | |
| 10 | <a onmouseover='alert(document.domain<?state state=value, tag=a, |
| 11 | attr=onmouseover, attr_type=js, in_js=true ?>)'>test</a> |
| 12 | |
| 13 | <?state state=text, in_js=false ?> |
| 14 | |
| 15 | <a onmouseover="">test</a> |
| 16 | |
| 17 | <?state state=text, in_js=false ?> |
| 18 | |
| 19 | <a onclick="<?state in_js=true, js_quoted=false?>">test</a> |
| 20 | <?state state=text, in_js=false ?> |
| 21 | |
| 22 | <a onclick="'<?state in_js=true, js_quoted=true?>">test</a> |
| 23 | <?state state=text, in_js=false ?> |
| 24 | |
| 25 | </body> |
| 26 | </html> |
| 27 | <?state state=text ?><?state state=text ?> |