Lines Matching refs:JAVASCRIPT
143 `<a href="{{"/javascript:80/foo/bar"}}">`,
144 `<a href="/javascript:80/foo/bar">`,
148 `<a href='{{"javascript:alert(%22pwned%22)"}}'>`,
153 `<a href=' {{"javascript:alert(%22pwned%22)"}}'>`,
163 `<a href='http://{{"javascript:80"}}/foo'>`,
164 `<a href='http://javascript:80/foo'>`,
351 `<a style="background: url('{{"javascript:alert(1337)"}}')">`,
361 `<a style="background: '{{"javascript\\3a alert(1337)"}}'">`,
362 // The CSS string 'javascript\\3a alert(1337)' does not contain a colon.
363 `<a style="background: 'javascript\\3a alert\28 1337\29 '">`,
623 `<img {{"src"}}="{{"javascript:doEvil()"}}">`,
624 `<img ZgotmplZ="javascript:doEvil()">`,
655 `<img srcset="{{"/not-an-image#,javascript:alert(1)"}}">`,
1429 `<script type=text/javascript `,
1466 `<script type="TEXT/JAVASCRIPT">`,
1907 if err := t1.Execute(&b, "javascript:alert(1)"); err == nil {
