Script is being added to XML data
Reported by
timmy14...@gmail.com,
Sep 8 2017
|
||||
Issue description
UserAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Steps to reproduce the problem:
1. View an XML web site in the tree view (when you directly enter URL of the resource in the URL box)
2. View the same resource in the source view (dev tools or view-source)
3. Notice how there is a <script>-tag only visible in the normal tree view
What is the expected behavior?
What went wrong?
The following was added in the tree view, but not in the source view:
<script>
Object.defineProperty(window, 'ysmm', { set: function(val) { if (val) { var N = ''; var M = ''; for(var i = 0; i < val.length; i++) { if(i%2 == 0) { N += val[i]; } else { M = val[i] + M; } } var key = N + M; try { key = window.atob(key); } catch (e) { return null; } key = key.substring(2); if (key && (key.indexOf('http://') === 0 || key.indexOf("https://") === 0)) { document.write('<!--'); window.stop(); window.onbeforeunload = null; window.location = key; } } } });
</script>
Did this work before? N/A
Chrome version: 60.0.3112.113 Channel: stable
OS Version: 6.3
Flash Version:
The URL on which this occurred to me is https://api.netdex.co/test.xml and I've found out it also happens when the parent element is not called "data"
,
Sep 8 2017
Sorry, I should've done more testing, it turns out it was caused by one of my extensions.
,
Sep 8 2017
Thank you for providing more feedback. Adding requester "sc00335628@techmahindra.com" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Sep 11 2017
Thanks for the update, as per your above comment, can we close this issue ? @ timmy14085: Request you to please confirm. Thanks.!
,
Sep 11 2017
Yes
,
Sep 11 2017
Thanks for the update, closing the issue as per above comment. |
||||
►
Sign in to add a comment |
||||
Comment 1 by sc00335...@techmahindra.com
, Sep 8 2017Components: Platform>DevTools
Labels: Triaged-ET Needs-Triage-M60 Needs-Milestone Needs-Feedback
913 KB
913 KB View Download