PHP Classes

File: tests/fixtures/xss_v1_clean_php81.svg

Recommend this page to a friend!
  Classes of Lars Moelleken   PHP Anti XSS Filter   tests/fixtures/xss_v1_clean_php81.svg   Download  
File: tests/fixtures/xss_v1_clean_php81.svg
Role: Auxiliary data
Content type: text/plain
Description: Auxiliary data
Class: PHP Anti XSS Filter
Remove tags from HTML that may cause XSS attacks
Author: By
Last change:
Date: 1 year ago
Size: 4,274 bytes
 

Contents

Class file image Download
&lt;?xml version="1.0" encoding="utf-8" ?&gt; &lt;!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"> &lt;svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="600px" height="600px" viewBox="0 0 600 600" enable-background="new 0 0 600 600" xml:space="preserve"&gt; <line fill="none" stroke="#000000" stroke-miterlimit="10" x1="119" y1="84.5" x2="454" y2="84.5" /> <line fill="none" stroke="#000000" stroke-miterlimit="10" x1="111.212" y1="102.852" x2="112.032" y2="476.623" /> <line fill="none" stroke="#000000" stroke-miterlimit="10" x1="198.917" y1="510.229" x2="486.622" y2="501.213" /> <line fill="none" stroke="#000000" stroke-miterlimit="10" x1="484.163" y1="442.196" x2="89.901" y2="60.229" /> <line fill="none" stroke="#000000" stroke-miterlimit="10" x1="101.376" y1="478.262" x2="443.18" y2="75.803" /> <this>shouldn't be here</this> <line fill="none" stroke="#000000" stroke-miterlimit="10" testing="gone" x1="541.54" y1="299.573" x2="543.179" y2="536.458" /> <line fill="none" stroke="#000000" stroke-miterlimit="10" testing="gone" x1="541.54" y1="299.573" x2="543.179" y2="536.458" /> <line stroke="#000000" stroke-miterlimit="10" testing="gone" x1="541.54" y1="299.573" x2="543.179" y2="536.458" /> <line stroke="#000000" stroke-miterlimit="10" testing="gone" x1="541.54" y1="299.573" x2="543.179" y2="536.458" /> <line (1)" fill="none" stroke="#000000" stroke-miterlimit="10" x1="119" y1="84.5" x2="454" y2="84.5" /> <line fill="none" stroke="#000000" stroke-miterlimit="10" x1="119" y1="84.5" x2="454" y2="84.5" /> <image width="100" height="100" /> <g /> <a xlink="http://www.w3.org/1999/xlink"href="(87)">test </a> <animation /> <animation xmlns='http://www.w3.org/2000/svg' &gt;&lt;/svg&gt;" /> <set attributeName="" to="alert&#40;89&#41;" /> <animate attributeName="" to="alert&#40;89&#41;" /> <handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert&#40;94&#41; </handler> <image xmlns='http://www.w3.org/2000/svg' &gt;&lt;/svg&gt;" /> <foreignObject /> <foreignObject /> <feImage> <set attributeName="xlink:href" to=" PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ+YWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg==" /> </feImage> <x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,&lt;svg xmlns="http://www.w3.org/2000/svg"&gt; &lt;handler xml:id="bar" type="application/ecmascript"> alert&#40;104&#41; </handler> &lt;/svg&gt; #bar" /> <path d="M0,0" /> &lt;iframe src="http://example.com/" /&gt; &lt;svg:svg&gt; &lt;svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"&gt; &lt;svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white" /&gt; &lt;svg:circle cx="0.45" cy="0.7" r="0.075" fill="white" /&gt; &lt;/svg:mask&gt; &lt;/svg:svg&gt; <xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"> &lt;iframe xmlns="http://www.w3.org/1999/xhtml" src="(125)"&gt; &lt;/iframe&gt; </xsl:template> </xsl:stylesheet> <circle fill="red" r="40"></circle> <listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x" /> <handler id="y">alert&#40;127&#41;</handler> <image xmlns:xlink="http://www.w3.org/1999/xlink"> <set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" /> <set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" /> <set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" /> <set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" /> </image> <animate attributeName="xlink:href" begin="0" from="(137)" to="1" /> <a href="(2)">test 1</a> <a href="(2)">test 2</a> <a href="#test3">test 3</a> <a href="#test">test 4</a> <a href="">test 5</a> <a href="">test 6</a> &lt;/svg&gt;