New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 763215 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Script is being added to XML data

Reported by timmy14...@gmail.com, Sep 8 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36

Steps to reproduce the problem:
1. View an XML web site in the tree view (when you directly enter URL of the resource in the URL box)
2. View the same resource in the source view (dev tools or view-source)
3. Notice how there is a <script>-tag only visible in the normal tree view

What is the expected behavior?

What went wrong?
The following was added in the tree view, but not in the source view:
<script>
Object.defineProperty(window, 'ysmm', { set: function(val) { if (val) { var N = ''; var M = ''; for(var i = 0; i < val.length; i++) { if(i%2 == 0) { N += val[i]; } else { M = val[i] + M; } } var key = N + M; try { key = window.atob(key); } catch (e) { return null; } key = key.substring(2); if (key && (key.indexOf('http://') === 0 || key.indexOf("https://") === 0)) { document.write('<!--'); window.stop(); window.onbeforeunload = null; window.location = key; } } } });
</script>

Did this work before? N/A 

Chrome version: 60.0.3112.113  Channel: stable
OS Version: 6.3
Flash Version: 

The URL on which this occurred to me is https://api.netdex.co/test.xml and I've found out it also happens when the parent element is not called "data"
 
Cc: sc00335...@techmahindra.com
Components: Platform>DevTools
Labels: Triaged-ET Needs-Triage-M60 Needs-Milestone Needs-Feedback
Unable to reproduce the issue with the reported version 60.0.3112.113 , latest stable 61.0.3163.79 and latest canary 63.0.3209.0 in Ubuntu 14.04, Windows7, Windows 10 ,Mac 10.12.6 with the mentioned sites below

1.Navigated to  https://api.netdex.co/test.xml. In tree view no script tag is seen.
2.Opened devtools/sources or from view source[source view] -- no <script> tag is seen. Attaching screencast for reference 

@Reporter: Could you please let us know if anything missed from our side.

Thanks! 
Issue_763215.ogv
913 KB View Download
Sorry, I should've done more testing, it turns out it was caused by one of my extensions.
Project Member

Comment 3 by sheriffbot@chromium.org, Sep 8 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "sc00335628@techmahindra.com" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: ranjitkan@chromium.org
Labels: Needs-Feedback
Thanks for the update, as per your above comment, can we close this issue ?

@ timmy14085: Request you to please confirm.

Thanks.!
Yes
Labels: -Needs-Feedback
Status: WontFix (was: Unconfirmed)
Thanks for the update, closing the issue as per above comment.


Sign in to add a comment