Test case
1 generated file · +1,870 −0test/inputs/json/priority/blns-object.json
Arubydefault / TopLevel.rb+1,870 −0
| @@ -0,0 +1,1870 @@ | ||
| 1 | +# This code may look unusually verbose for Ruby (and it is), but | |
| 2 | +# it performs some subtle and complex validation of JSON data. | |
| 3 | +# | |
| 4 | +# To parse this JSON, add 'dry-struct' and 'dry-types' gems, then do: | |
| 5 | +# | |
| 6 | +# top_level = TopLevel.from_json! "{…}" | |
| 7 | +# puts top_level.c._10 | |
| 8 | +# | |
| 9 | +# If from_json! succeeds, the value returned matches the schema. | |
| 10 | + | |
| 11 | +require 'json' | |
| 12 | +require 'dry-types' | |
| 13 | +require 'dry-struct' | |
| 14 | + | |
| 15 | +module Types | |
| 16 | + include Dry.Types(default: :nominal) | |
| 17 | + | |
| 18 | + Bool = Strict::Bool | |
| 19 | + Hash = Strict::Hash | |
| 20 | + String = Strict::String | |
| 21 | +end | |
| 22 | + | |
| 23 | +class A < Dry::Struct | |
| 24 | + attribute :a, Types::String | |
| 25 | + attribute :a_0, Types::String | |
| 26 | + attribute :a_000, Types::String | |
| 27 | + attribute :a_0000, Types::String | |
| 28 | + attribute :a_1, Types::String | |
| 29 | + attribute :a_100000000, Types::String | |
| 30 | + attribute :a_1_e02, Types::String | |
| 31 | + attribute :a_alert_123_t, Types::String | |
| 32 | + attribute :a_false, Types::String | |
| 33 | + attribute :a_href_java_123456781112_script_javascript_alert_1_xxx_a, Types::String | |
| 34 | + attribute :a_href_javascript_x09_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 35 | + attribute :a_href_javascript_x0_a_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 36 | + attribute :a_href_javascript_x3_a_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 37 | + attribute :a_href_x01_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 38 | + attribute :a_href_x05_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 39 | + attribute :a_href_x08_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 40 | + attribute :a_href_x09_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 41 | + attribute :a_href_x0_cjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 42 | + attribute :a_href_x10_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 43 | + attribute :a_href_x11_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 44 | + attribute :a_href_x13_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 45 | + attribute :a_href_x17_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 46 | + attribute :a_href_x1_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 47 | + attribute :a_href_x_c2_x_a0_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 48 | + attribute :a_href_x_e1_x9_a_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 49 | + attribute :a_href_x_e1_x_a0_x8_ejavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 50 | + attribute :a_href_x_e2_x80_x83_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 51 | + attribute :a_href_x_e2_x80_x84_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 52 | + attribute :a_href_x_e2_x80_x86_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 53 | + attribute :a_href_x_e2_x80_x87_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 54 | + attribute :a_href_x_e2_x80_x_a8_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 55 | + attribute :a_nil, Types::String | |
| 56 | + attribute :a_test, Types::String | |
| 57 | + attribute :a_true, Types::String | |
| 58 | + attribute :a_undef, Types::String | |
| 59 | + attribute :abc_div_style_x_exp_x00_ression_javascript_alert_1_def, Types::String | |
| 60 | + attribute :abc_div_style_x_exp_x5_cression_javascript_alert_1_def, Types::String | |
| 61 | + attribute :abc_div_style_x_x09_expression_javascript_alert_1_def, Types::String | |
| 62 | + attribute :abc_div_style_x_x0_bexpression_javascript_alert_1_def, Types::String | |
| 63 | + attribute :abc_div_style_x_x20_expression_javascript_alert_1_def, Types::String | |
| 64 | + attribute :abc_div_style_x_x3_aexpression_javascript_alert_1_def, Types::String | |
| 65 | + attribute :abc_div_style_x_x_c2_x_a0_expression_javascript_alert_1_def, Types::String | |
| 66 | + attribute :abc_div_style_x_x_e2_x80_x80_expression_javascript_alert_1_def, Types::String | |
| 67 | + attribute :abc_div_style_x_x_e2_x80_x84_expression_javascript_alert_1_def, Types::String | |
| 68 | + attribute :abc_div_style_x_x_e2_x80_x89_expression_javascript_alert_1_def, Types::String | |
| 69 | + attribute :abc_div_style_x_x_e2_x80_x8_bexpression_javascript_alert_1_def, Types::String | |
| 70 | + attribute :alert_123, Types::String | |
| 71 | + attribute :alert_123_t, Types::String | |
| 72 | + attribute :alert_xss, Types::String | |
| 73 | + attribute :and_u_200_b_zero_width_space_which_are_in_the_c_categories_but_are_often, Types::String | |
| 74 | + attribute :arsenal_canal, Types::String | |
| 75 | + attribute :autofocus_onkeyup_javascript_alert_123, Types::String | |
| 76 | + attribute :aux, Types::String | |
| 77 | + attribute :changing_length_when_lowercased, Types::String | |
| 78 | + attribute :characters_which_increase_in_length_2_to_3_bytes_when_lowercased, Types::String | |
| 79 | + attribute :classic, Types::String | |
| 80 | + attribute :command_injection_ruby, Types::String | |
| 81 | + attribute :d, Types::String | |
| 82 | + attribute :dick_van_dyke, Types::String | |
| 83 | + attribute :dont_make_a_map, Types::Bool | |
| 84 | + attribute :dr_herman_i_libshitz, Types::String | |
| 85 | + attribute :empty, Types::String | |
| 86 | + attribute :env_home, Types::String | |
| 87 | + attribute :etc_hosts, Types::String | |
| 88 | + attribute :etc_passwd_00, Types::String | |
| 89 | + attribute :false_1, Types::String | |
| 90 | + attribute :fonts_and_have_a_number_of_special_behaviors, Types::String | |
| 91 | + attribute :foo_val_bar, Types::String | |
| 92 | + attribute :home, Types::String | |
| 93 | + attribute :human_injection, Types::String | |
| 94 | + attribute :i_n_v_ok_i_n_g_t_h_e_f_è_ẹ_l_i_n_g_o_f_c_h_á_o_s, Types::String | |
| 95 | + attribute :if_img_src_x_onerror_javascript_alert_1, Types::String | |
| 96 | + attribute :if_script_javascript_alert_1_script, Types::String | |
| 97 | + attribute :img_src_106971189711599114105112116589710810111411640398883833941, Types::String | |
| 98 | + attribute :img_src_jav_ascript_alert_xss, Types::String | |
| 99 | + attribute :img_src_jav_x0_a_ascript_alert_xss, Types::String | |
| 100 | + attribute :img_src_jav_x0_d_ascript_alert_xss, Types::String | |
| 101 | + attribute :img_src_x09_x_onerror_javascript_alert_1, Types::String | |
| 102 | + attribute :img_src_x11_x_onerror_javascript_alert_1, Types::String | |
| 103 | + attribute :img_src_x_onerror_x00_javascript_alert_1, Types::String | |
| 104 | + attribute :img_src_x_onerror_x09_javascript_alert_1, Types::String | |
| 105 | + attribute :img_src_x_x09_onerror_javascript_alert_1, Types::String | |
| 106 | + attribute :img_src_x_x10_onerror_javascript_alert_1, Types::String | |
| 107 | + attribute :img_src_x_x11_onerror_javascript_alert_1, Types::String | |
| 108 | + attribute :img_src_x_x12_onerror_javascript_alert_1, Types::String | |
| 109 | + attribute :img_src_x_x13_onerror_javascript_alert_1, Types::String | |
| 110 | + attribute :img_src_xxx_x_x00_onerror_javascript_alert_1, Types::String | |
| 111 | + attribute :img_src_xxx_x_x0_bonerror_javascript_alert_1, Types::String | |
| 112 | + attribute :img_src_xxx_x_x2_fonerror_javascript_alert_1, Types::String | |
| 113 | + attribute :img_x00_src_x_onerror_alert_1, Types::String | |
| 114 | + attribute :img_x10_src_x_onerror_javascript_alert_1, Types::String | |
| 115 | + attribute :img_x13_src_x_onerror_javascript_alert_1, Types::String | |
| 116 | + attribute :img_x32_src_x_onerror_javascript_alert_1, Types::String | |
| 117 | + attribute :img_x39_src_x_onerror_javascript_alert_1, Types::String | |
| 118 | + attribute :inf, Types::String | |
| 119 | + attribute :infinity, Types::String | |
| 120 | + attribute :innocuous_strings_which_may_be_blocked_by_profanity_filters_https_en_wikipedia_org_wiki_scunthorpe_problem, Types::String | |
| 121 | + attribute :jimmy_clitheroe, Types::String | |
| 122 | + attribute :kernel_exit_1, Types::String | |
| 123 | + attribute :known_cv_es_and_vulnerabilities, Types::String | |
| 124 | + attribute :lightwater_country_park, Types::String | |
| 125 | + attribute :lpt2, Types::String | |
| 126 | + attribute :lpt3, Types::String | |
| 127 | + attribute :ls_al, Types::String | |
| 128 | + attribute :msdos_windows_special_filenames, Types::String | |
| 129 | + attribute :non_whitespace_c1_controls_u_0080_through_u_0084_and_u_0086_through_u_009_f, Types::String | |
| 130 | + attribute :none, Types::String | |
| 131 | + attribute :null, Types::String | |
| 132 | + attribute :onfocus_ja_va_s_cript_alert_123_autofocus, Types::String | |
| 133 | + attribute :or_11, Types::String | |
| 134 | + attribute :penistone_community_church, Types::String | |
| 135 | + attribute :perl_e_print_img_src_java_0_script_alert_xss_out, Types::String | |
| 136 | + attribute :prn, Types::String | |
| 137 | + attribute :romans_in_sussex_co_uk, Types::String | |
| 138 | + attribute :s, Types::String | |
| 139 | + attribute :s_un_s_u, Types::String | |
| 140 | + attribute :sc_script_ript_alert_123_sc_script_ript, Types::String | |
| 141 | + attribute :script_alert_123_script_x, Types::String | |
| 142 | + attribute :script_injection, Types::String | |
| 143 | + attribute :script_script_alert_123_script, Types::String | |
| 144 | + attribute :script_src_http_ha_ckers_org_xss_js_b, Types::String | |
| 145 | + attribute :script_src_http_ha_ckers_org_xss_js_script, Types::String | |
| 146 | + attribute :script_x00_javascript_alert_1_script, Types::String | |
| 147 | + attribute :script_x09_type_text_javascript_javascript_alert_1_script, Types::String | |
| 148 | + attribute :script_x0_cjavascript_alert_1_script, Types::String | |
| 149 | + attribute :script_x0_djavascript_alert_1_script, Types::String | |
| 150 | + attribute :script_x20_type_text_javascript_javascript_alert_1_script, Types::String | |
| 151 | + attribute :script_x3_etype_text_javascript_javascript_alert_1_script, Types::String | |
| 152 | + attribute :script_x_c2_x85_javascript_alert_1_script, Types::String | |
| 153 | + attribute :script_x_c2_x_a0_javascript_alert_1_script, Types::String | |
| 154 | + attribute :script_x_e1_x9_a_x80_javascript_alert_1_script, Types::String | |
| 155 | + attribute :script_x_e1_x_a0_x8_ejavascript_alert_1_script, Types::String | |
| 156 | + attribute :script_x_e2_x80_x81_javascript_alert_1_script, Types::String | |
| 157 | + attribute :script_x_e2_x80_x86_javascript_alert_1_script, Types::String | |
| 158 | + attribute :script_x_e2_x80_x89_javascript_alert_1_script, Types::String | |
| 159 | + attribute :script_x_e2_x81_x9_fjavascript_alert_1_script, Types::String | |
| 160 | + attribute :script_x_ef_x_bb_x_b_fjavascript_alert_1_script, Types::String | |
| 161 | + attribute :script_x_f0_x90_x96_x9_ajavascript_alert_1_script, Types::String | |
| 162 | + attribute :script_xss_src_http_ha_ckers_org_xss_js_script, Types::String | |
| 163 | + attribute :sql_injection, Types::String | |
| 164 | + attribute :string_which_can_reveal_system_files_when_parsed_by_a_badly_configured_xml_parser, Types::String | |
| 165 | + attribute :strings_that_test_for_known_vulnerabilities, Types::String | |
| 166 | + attribute :strings_which_can_be_accidentally_expanded_into_different_strings_if_evaluated_in_the_wrong_context_e_g_used_as_a_printf_format_string_or_via_perl_or_shell_eval_might_expose_sensitive_data_from_the_program_doing_the_interpolation_or_might_just_represent_the_wrong_string, Types::String | |
| 167 | + attribute :strings_which_can_call_system_commands_within_ruby_rails_applications, Types::String | |
| 168 | + attribute :strings_which_consists_of_japanese_style_emoticons_which_are_popular_on_the_web, Types::String | |
| 169 | + attribute :strings_which_contain_bold_italic_etc_versions_of_normal_characters, Types::String | |
| 170 | + attribute :strings_which_contain_common_unicode_symbols_e_g_smart_quotes, Types::String | |
| 171 | + attribute :strings_which_contain_emoji_should_be_the_same_behavior_as_two_byte_characters_but_not_always, Types::String | |
| 172 | + attribute :strings_which_contain_misplaced_quotation_marks_can_cause_encoding_errors, Types::String | |
| 173 | + attribute :strings_which_contain_unicode_subscripts_superscripts_can_cause_rendering_issues, Types::String | |
| 174 | + attribute :strings_which_crashed_i_message_in_various_versions_of_i_os, Types::String | |
| 175 | + attribute :strings_which_may_cause_human_to_reinterpret_worldview, Types::String | |
| 176 | + attribute :super_bowl_xxx, Types::String | |
| 177 | + attribute :test_1, Types::String | |
| 178 | + attribute :test_2, Types::String | |
| 179 | + attribute :textarea_script_alert_123_script, Types::String | |
| 180 | + attribute :the_0, Types::String | |
| 181 | + attribute :the_00, Types::String | |
| 182 | + attribute :the_000, Types::String | |
| 183 | + attribute :the_0000, Types::String | |
| 184 | + attribute :the_00_ɩ, Types::String | |
| 185 | + attribute :the_0_1, Types::String | |
| 186 | + attribute :the_0_2, Types::String | |
| 187 | + attribute :the_0_x0, Types::String | |
| 188 | + attribute :the_1, Types::String | |
| 189 | + attribute :the_10, Types::String | |
| 190 | + attribute :the_100, Types::String | |
| 191 | + attribute :the_1000, Types::String | |
| 192 | + attribute :the_100000, Types::String | |
| 193 | + attribute :the_100000000, Types::String | |
| 194 | + attribute :the_11, Types::String | |
| 195 | + attribute :the_12, Types::String | |
| 196 | + attribute :the_123456789012345678901234567890123456789, Types::String | |
| 197 | + attribute :the_13, Types::String | |
| 198 | + attribute :the_14, Types::String | |
| 199 | + attribute :the_15, Types::String | |
| 200 | + attribute :the_16, Types::String | |
| 201 | + attribute :the_17, Types::String | |
| 202 | + attribute :the_18, Types::String | |
| 203 | + attribute :the_19, Types::String | |
| 204 | + attribute :the_1_1, Types::String | |
| 205 | + attribute :the_1_drop_table_users, Types::String | |
| 206 | + attribute :the_1_e02, Types::String | |
| 207 | + attribute :the_1_e2, Types::String | |
| 208 | + attribute :the_1_qnan, Types::String | |
| 209 | + attribute :the_1_snan, Types::String | |
| 210 | + attribute :the_2, Types::String | |
| 211 | + attribute :the_20, Types::String | |
| 212 | + attribute :the_21, Types::String | |
| 213 | + attribute :the_22, Types::String | |
| 214 | + attribute :the_23, Types::String | |
| 215 | + attribute :the_24, Types::String | |
| 216 | + attribute :the_25, Types::String | |
| 217 | + attribute :the_26, Types::String | |
| 218 | + attribute :the_27, Types::String | |
| 219 | + attribute :the_3, Types::String | |
| 220 | + attribute :the_4, Types::String | |
| 221 | + attribute :the_5, Types::String | |
| 222 | + attribute :the_6, Types::String | |
| 223 | + attribute :the_7, Types::String | |
| 224 | + attribute :the_8, Types::String | |
| 225 | + attribute :the_9, Types::String | |
| 226 | + attribute :the_999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999, Types::String | |
| 227 | + attribute :the_next_two_lines_may_appear_to_be_blank_or_mojibake_in_some_viewers, Types::String | |
| 228 | + attribute :the_quic_k_brown_fo_x_beeeep, Types::String | |
| 229 | + attribute :the_٠١٢٣٤٥٦٧٨٩, Types::String | |
| 230 | + attribute :true_1, Types::String | |
| 231 | + attribute :two_byte_characters, Types::String | |
| 232 | + attribute :u_0000_u_000_a_or_u_000_d_nul_lf_cr, Types::String | |
| 233 | + attribute :u_oncopy_alert_copy_me_u, Types::String | |
| 234 | + attribute :unicode_font, Types::String | |
| 235 | + attribute :unicode_numbers, Types::String | |
| 236 | + attribute :unwanted_interpolation, Types::String | |
| 237 | + attribute :x_ls_al, Types::String | |
| 238 | + attribute :z_ḁ_ḷ_g_o, Types::String | |
| 239 | + attribute :ªº, Types::String | |
| 240 | + attribute :ç_ı_â, Types::String | |
| 241 | + attribute :œ_á_ø, Types::String | |
| 242 | + attribute :œ_øπ, Types::String | |
| 243 | + attribute :ʖ, Types::String | |
| 244 | + attribute :הָיְתָה_test_الصفحاتالتّحول, Types::String | |
| 245 | + attribute :ثمنفسسقطتوبالتحديدجزيرتيباستخدامأندنوإذهناالستاروتنصيبكانأهّلايطاليابريطانيافرنساقدأخذسليمانإتفاقيةبينمايذكرالحدودأيبعدمعاملةبولنداالإطلاقعلإيو, Types::String | |
| 246 | + attribute :ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็, Types::String | |
| 247 | + attribute :ⱥ, Types::String | |
| 248 | + attribute :ⱦ, Types::String | |
| 249 | + attribute :パティへ行かないか, Types::String | |
| 250 | + attribute :和製漢語, Types::String | |
| 251 | + attribute :田中さんにあげて下さい, Types::String | |
| 252 | + attribute :fifl, Types::String | |
| 253 | + attribute :ィ, Types::String | |
| 254 | + | |
| 255 | + def self.from_dynamic!(d) | |
| 256 | + d = Types::Hash[d] | |
| 257 | + new( | |
| 258 | + a: d.fetch("!@#$%^&*()`~"), | |
| 259 | + a_0: d.fetch("-0"), | |
| 260 | + a_000: d.fetch("0,00"), | |
| 261 | + a_0000: d.fetch("0.0/0.0"), | |
| 262 | + a_1: d.fetch("-1"), | |
| 263 | + a_100000000: d.fetch("1'000'000.00"), | |
| 264 | + a_1_e02: d.fetch("1E02"), | |
| 265 | + a_alert_123_t: d.fetch("';alert(123);t='"), | |
| 266 | + a_false: d.fetch("False"), | |
| 267 | + a_href_java_123456781112_script_javascript_alert_1_xxx_a: d.fetch("<a href=javascript:javascript:alert(1)>XXX</a>"), | |
| 268 | + a_href_javascript_x09_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"javascript\\x09:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 269 | + a_href_javascript_x0_a_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"javascript\\x0A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 270 | + a_href_javascript_x3_a_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"javascript\\x3A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 271 | + a_href_x01_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x01javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 272 | + a_href_x05_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x05javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 273 | + a_href_x08_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x08javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 274 | + a_href_x09_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x09javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 275 | + a_href_x0_cjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x0Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 276 | + a_href_x10_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x10javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 277 | + a_href_x11_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x11javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 278 | + a_href_x13_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x13javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 279 | + a_href_x17_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x17javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 280 | + a_href_x1_fjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x1Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 281 | + a_href_x_c2_x_a0_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xC2\\xA0javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 282 | + a_href_x_e1_x9_a_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE1\\x9A\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 283 | + a_href_x_e1_x_a0_x8_ejavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE1\\xA0\\x8Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 284 | + a_href_x_e2_x80_x83_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x83javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 285 | + a_href_x_e2_x80_x84_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x84javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 286 | + a_href_x_e2_x80_x86_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x86javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 287 | + a_href_x_e2_x80_x87_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x87javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 288 | + a_href_x_e2_x80_x_a8_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\xA8javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 289 | + a_nil: d.fetch("nil"), | |
| 290 | + a_test: d.fetch("\u{202a}\u{202a}test\u{202a}"), | |
| 291 | + a_true: d.fetch("TRUE"), | |
| 292 | + a_undef: d.fetch("undef"), | |
| 293 | + abc_div_style_x_exp_x00_ression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:exp\\x00ression(javascript:alert(1)\">DEF"), | |
| 294 | + abc_div_style_x_exp_x5_cression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:exp\\x5Cression(javascript:alert(1)\">DEF"), | |
| 295 | + abc_div_style_x_x09_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x09expression(javascript:alert(1)\">DEF"), | |
| 296 | + abc_div_style_x_x0_bexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x0Bexpression(javascript:alert(1)\">DEF"), | |
| 297 | + abc_div_style_x_x20_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x20expression(javascript:alert(1)\">DEF"), | |
| 298 | + abc_div_style_x_x3_aexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x\\x3Aexpression(javascript:alert(1)\">DEF"), | |
| 299 | + abc_div_style_x_x_c2_x_a0_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xC2\\xA0expression(javascript:alert(1)\">DEF"), | |
| 300 | + abc_div_style_x_x_e2_x80_x80_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x80expression(javascript:alert(1)\">DEF"), | |
| 301 | + abc_div_style_x_x_e2_x80_x84_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x84expression(javascript:alert(1)\">DEF"), | |
| 302 | + abc_div_style_x_x_e2_x80_x89_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x89expression(javascript:alert(1)\">DEF"), | |
| 303 | + abc_div_style_x_x_e2_x80_x8_bexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x8Bexpression(javascript:alert(1)\">DEF"), | |
| 304 | + alert_123: d.fetch(";alert(123);"), | |
| 305 | + alert_123_t: d.fetch("\";alert(123);t=\""), | |
| 306 | + alert_xss: d.fetch("\\\";alert('XSS');//"), | |
| 307 | + and_u_200_b_zero_width_space_which_are_in_the_c_categories_but_are_often: d.fetch("# and U+200B (ZERO WIDTH SPACE), which are in the C categories but are often"), | |
| 308 | + arsenal_canal: d.fetch("Arsenal canal"), | |
| 309 | + autofocus_onkeyup_javascript_alert_123: d.fetch("\" autofocus onkeyup=\"javascript:alert(123)"), | |
| 310 | + aux: d.fetch("AUX"), | |
| 311 | + changing_length_when_lowercased: d.fetch("#\tChanging length when lowercased"), | |
| 312 | + characters_which_increase_in_length_2_to_3_bytes_when_lowercased: d.fetch("#\tCharacters which increase in length (2 to 3 bytes) when lowercased"), | |
| 313 | + classic: d.fetch("classic"), | |
| 314 | + command_injection_ruby: d.fetch("#\tCommand Injection (Ruby)"), | |
| 315 | + d: d.fetch("%d"), | |
| 316 | + dick_van_dyke: d.fetch("Dick Van Dyke"), | |
| 317 | + dont_make_a_map: d.fetch("dontMakeAMap"), | |
| 318 | + dr_herman_i_libshitz: d.fetch("Dr. Herman I. Libshitz"), | |
| 319 | + empty: d.fetch(" "), | |
| 320 | + env_home: d.fetch("$ENV{'HOME'}"), | |
| 321 | + etc_hosts: d.fetch("../../../../../../../../../../../etc/hosts"), | |
| 322 | + etc_passwd_00: d.fetch("../../../../../../../../../../../etc/passwd%00"), | |
| 323 | + false_1: d.fetch("false"), | |
| 324 | + fonts_and_have_a_number_of_special_behaviors: d.fetch("# fonts, and have a number of special behaviors"), | |
| 325 | + foo_val_bar: d.fetch("<foo val=`bar' />"), | |
| 326 | + home: d.fetch("$HOME"), | |
| 327 | + human_injection: d.fetch("#\tHuman injection"), | |
| 328 | + i_n_v_ok_i_n_g_t_h_e_f_è_ẹ_l_i_n_g_o_f_c_h_á_o_s: d.fetch("̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰"), | |
| 329 | + if_img_src_x_onerror_javascript_alert_1: d.fetch("<!--[if<img src=x onerror=javascript:alert(1)//]> -->"), | |
| 330 | + if_script_javascript_alert_1_script: d.fetch("<!--[if]><script>javascript:alert(1)</script -->"), | |
| 331 | + img_src_106971189711599114105112116589710810111411640398883833941: d.fetch("<IMG SRC=javascript:alert('XSS')>"), | |
| 332 | + img_src_jav_ascript_alert_xss: d.fetch("<IMG SRC=\"jav ascript:alert('XSS');\">"), | |
| 333 | + img_src_jav_x0_a_ascript_alert_xss: d.fetch("<IMG SRC=\"jav
ascript:alert('XSS');\">"), | |
| 334 | + img_src_jav_x0_d_ascript_alert_xss: d.fetch("<IMG SRC=\"jav
ascript:alert('XSS');\">"), | |
| 335 | + img_src_x09_x_onerror_javascript_alert_1: d.fetch("<img src\\x09=x onerror=\"javascript:alert(1)\">"), | |
| 336 | + img_src_x11_x_onerror_javascript_alert_1: d.fetch("<img src\\x11=x onerror=\"javascript:alert(1)\">"), | |
| 337 | + img_src_x_onerror_x00_javascript_alert_1: d.fetch("<img src=x onerror=\\x00\"javascript:alert(1)\">"), | |
| 338 | + img_src_x_onerror_x09_javascript_alert_1: d.fetch("<img src=x onerror=\\x09\"javascript:alert(1)\">"), | |
| 339 | + img_src_x_x09_onerror_javascript_alert_1: d.fetch("<img src=x\\x09onerror=\"javascript:alert(1)\">"), | |
| 340 | + img_src_x_x10_onerror_javascript_alert_1: d.fetch("<img src=x\\x10onerror=\"javascript:alert(1)\">"), | |
| 341 | + img_src_x_x11_onerror_javascript_alert_1: d.fetch("<img src=x\\x11onerror=\"javascript:alert(1)\">"), | |
| 342 | + img_src_x_x12_onerror_javascript_alert_1: d.fetch("<img src=x\\x12onerror=\"javascript:alert(1)\">"), | |
| 343 | + img_src_x_x13_onerror_javascript_alert_1: d.fetch("<img src=x\\x13onerror=\"javascript:alert(1)\">"), | |
| 344 | + img_src_xxx_x_x00_onerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x00onerror=javascript:alert(1)>"), | |
| 345 | + img_src_xxx_x_x0_bonerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x0Bonerror=javascript:alert(1)>"), | |
| 346 | + img_src_xxx_x_x2_fonerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x2Fonerror=javascript:alert(1)>"), | |
| 347 | + img_x00_src_x_onerror_alert_1: d.fetch("<img \\x00src=x onerror=\"alert(1)\">"), | |
| 348 | + img_x10_src_x_onerror_javascript_alert_1: d.fetch("<img\\x10src=x onerror=\"javascript:alert(1)\">"), | |
| 349 | + img_x13_src_x_onerror_javascript_alert_1: d.fetch("<img\\x13src=x onerror=\"javascript:alert(1)\">"), | |
| 350 | + img_x32_src_x_onerror_javascript_alert_1: d.fetch("<img\\x32src=x onerror=\"javascript:alert(1)\">"), | |
| 351 | + img_x39_src_x_onerror_javascript_alert_1: d.fetch("<img \\x39src=x onerror=\"javascript:alert(1)\">"), | |
| 352 | + inf: d.fetch("INF"), | |
| 353 | + infinity: d.fetch("-Infinity"), | |
| 354 | + innocuous_strings_which_may_be_blocked_by_profanity_filters_https_en_wikipedia_org_wiki_scunthorpe_problem: d.fetch("#\tInnocuous strings which may be blocked by profanity filters (https://en.wikipedia.org/wiki/Scunthorpe_problem)"), | |
| 355 | + jimmy_clitheroe: d.fetch("Jimmy Clitheroe"), | |
| 356 | + kernel_exit_1: d.fetch("Kernel.exit(1)"), | |
| 357 | + known_cv_es_and_vulnerabilities: d.fetch("#\tKnown CVEs and Vulnerabilities"), | |
| 358 | + lightwater_country_park: d.fetch("Lightwater Country Park"), | |
| 359 | + lpt2: d.fetch("LPT2"), | |
| 360 | + lpt3: d.fetch("LPT3"), | |
| 361 | + ls_al: d.fetch("`ls -al /`"), | |
| 362 | + msdos_windows_special_filenames: d.fetch("#\tMSDOS/Windows Special Filenames"), | |
| 363 | + non_whitespace_c1_controls_u_0080_through_u_0084_and_u_0086_through_u_009_f: d.fetch("# Non-whitespace C1 controls: U+0080 through U+0084 and U+0086 through U+009F."), | |
| 364 | + none: d.fetch("None"), | |
| 365 | + null: d.fetch("(null)"), | |
| 366 | + onfocus_ja_va_s_cript_alert_123_autofocus: d.fetch(" onfocus=JaVaSCript:alert(123) autofocus"), | |
| 367 | + or_11: d.fetch("' OR '1'='1"), | |
| 368 | + penistone_community_church: d.fetch("Penistone Community Church"), | |
| 369 | + perl_e_print_img_src_java_0_script_alert_xss_out: d.fetch("perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out"), | |
| 370 | + prn: d.fetch("PRN"), | |
| 371 | + romans_in_sussex_co_uk: d.fetch("RomansInSussex.co.uk"), | |
| 372 | + s: d.fetch("%s"), | |
| 373 | + s_un_s_u: d.fetch("<<< %s(un='%s') = %u"), | |
| 374 | + sc_script_ript_alert_123_sc_script_ript: d.fetch("<sc<script>ript>alert(123)</sc</script>ript>"), | |
| 375 | + script_alert_123_script_x: d.fetch("\"><script>alert(123);</script x=\""), | |
| 376 | + script_injection: d.fetch("#\tScript Injection"), | |
| 377 | + script_script_alert_123_script: d.fetch("</script><script>alert(123)</script>"), | |
| 378 | + script_src_http_ha_ckers_org_xss_js_b: d.fetch("<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >"), | |
| 379 | + script_src_http_ha_ckers_org_xss_js_script: d.fetch("<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>"), | |
| 380 | + script_x00_javascript_alert_1_script: d.fetch("\"`'><script>\\x00javascript:alert(1)</script>"), | |
| 381 | + script_x09_type_text_javascript_javascript_alert_1_script: d.fetch("<script\\x09type=\"text/javascript\">javascript:alert(1);</script>"), | |
| 382 | + script_x0_cjavascript_alert_1_script: d.fetch("\"`'><script>\\x0Cjavascript:alert(1)</script>"), | |
| 383 | + script_x0_djavascript_alert_1_script: d.fetch("\"`'><script>\\x0Djavascript:alert(1)</script>"), | |
| 384 | + script_x20_type_text_javascript_javascript_alert_1_script: d.fetch("<script\\x20type=\"text/javascript\">javascript:alert(1);</script>"), | |
| 385 | + script_x3_etype_text_javascript_javascript_alert_1_script: d.fetch("<script\\x3Etype=\"text/javascript\">javascript:alert(1);</script>"), | |
| 386 | + script_x_c2_x85_javascript_alert_1_script: d.fetch("\"`'><script>\\xC2\\x85javascript:alert(1)</script>"), | |
| 387 | + script_x_c2_x_a0_javascript_alert_1_script: d.fetch("\"`'><script>\\xC2\\xA0javascript:alert(1)</script>"), | |
| 388 | + script_x_e1_x9_a_x80_javascript_alert_1_script: d.fetch("\"`'><script>\\xE1\\x9A\\x80javascript:alert(1)</script>"), | |
| 389 | + script_x_e1_x_a0_x8_ejavascript_alert_1_script: d.fetch("\"`'><script>\\xE1\\xA0\\x8Ejavascript:alert(1)</script>"), | |
| 390 | + script_x_e2_x80_x81_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x81javascript:alert(1)</script>"), | |
| 391 | + script_x_e2_x80_x86_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x86javascript:alert(1)</script>"), | |
| 392 | + script_x_e2_x80_x89_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x89javascript:alert(1)</script>"), | |
| 393 | + script_x_e2_x81_x9_fjavascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x81\\x9Fjavascript:alert(1)</script>"), | |
| 394 | + script_x_ef_x_bb_x_b_fjavascript_alert_1_script: d.fetch("\"`'><script>\\xEF\\xBB\\xBFjavascript:alert(1)</script>"), | |
| 395 | + script_x_f0_x90_x96_x9_ajavascript_alert_1_script: d.fetch("\"`'><script>\\xF0\\x90\\x96\\x9Ajavascript:alert(1)</script>"), | |
| 396 | + script_xss_src_http_ha_ckers_org_xss_js_script: d.fetch("<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>"), | |
| 397 | + sql_injection: d.fetch("#\tSQL Injection"), | |
| 398 | + string_which_can_reveal_system_files_when_parsed_by_a_badly_configured_xml_parser: d.fetch("#\tString which can reveal system files when parsed by a badly configured XML parser"), | |
| 399 | + strings_that_test_for_known_vulnerabilities: d.fetch("#\tStrings that test for known vulnerabilities"), | |
| 400 | + strings_which_can_be_accidentally_expanded_into_different_strings_if_evaluated_in_the_wrong_context_e_g_used_as_a_printf_format_string_or_via_perl_or_shell_eval_might_expose_sensitive_data_from_the_program_doing_the_interpolation_or_might_just_represent_the_wrong_string: d.fetch("#\tStrings which can be accidentally expanded into different strings if evaluated in the wrong context, e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string."), | |
| 401 | + strings_which_can_call_system_commands_within_ruby_rails_applications: d.fetch("#\tStrings which can call system commands within Ruby/Rails applications"), | |
| 402 | + strings_which_consists_of_japanese_style_emoticons_which_are_popular_on_the_web: d.fetch("#\tStrings which consists of Japanese-style emoticons which are popular on the web"), | |
| 403 | + strings_which_contain_bold_italic_etc_versions_of_normal_characters: d.fetch("#\tStrings which contain bold/italic/etc. versions of normal characters"), | |
| 404 | + strings_which_contain_common_unicode_symbols_e_g_smart_quotes: d.fetch("#\tStrings which contain common unicode symbols (e.g. smart quotes)"), | |
| 405 | + strings_which_contain_emoji_should_be_the_same_behavior_as_two_byte_characters_but_not_always: d.fetch("#\tStrings which contain Emoji; should be the same behavior as two-byte characters, but not always"), | |
| 406 | + strings_which_contain_misplaced_quotation_marks_can_cause_encoding_errors: d.fetch("#\tStrings which contain misplaced quotation marks; can cause encoding errors"), | |
| 407 | + strings_which_contain_unicode_subscripts_superscripts_can_cause_rendering_issues: d.fetch("#\tStrings which contain unicode subscripts/superscripts; can cause rendering issues"), | |
| 408 | + strings_which_crashed_i_message_in_various_versions_of_i_os: d.fetch("#\tStrings which crashed iMessage in various versions of iOS"), | |
| 409 | + strings_which_may_cause_human_to_reinterpret_worldview: d.fetch("#\tStrings which may cause human to reinterpret worldview"), | |
| 410 | + super_bowl_xxx: d.fetch("Super Bowl XXX"), | |
| 411 | + test_1: d.fetch("\u{202b}test\u{202b}"), | |
| 412 | + test_2: d.fetch("\u{2066}test\u{2067}"), | |
| 413 | + textarea_script_alert_123_script: d.fetch("</textarea><script>alert(123)</script>"), | |
| 414 | + the_0: d.fetch("+0"), | |
| 415 | + the_00: d.fetch("0..0"), | |
| 416 | + the_000: d.fetch("0,0,0"), | |
| 417 | + the_0000: d.fetch("0,0/0,0"), | |
| 418 | + the_00_ɩ: d.fetch("00˙Ɩ$-"), | |
| 419 | + the_0_1: d.fetch("0"), | |
| 420 | + the_0_2: d.fetch("{0}"), | |
| 421 | + the_0_x0: d.fetch("0x0"), | |
| 422 | + the_1: d.fetch("'"), | |
| 423 | + the_10: d.fetch("1/0"), | |
| 424 | + the_100: d.fetch("1.00"), | |
| 425 | + the_1000: d.fetch("1.0/0.0"), | |
| 426 | + the_100000: d.fetch("1'000,00"), | |
| 427 | + the_100000000: d.fetch("1 000 000.00"), | |
| 428 | + the_11: d.fetch("\u{80}\u{81}\u{82}\u{83}\u{84}\u{86}\u{87}\u{88}\u{89}\u{8a}\u{8b}\u{8c}\u{8d}\u{8e}\u{8f}\u{90}\u{91}\u{92}\u{93}\u{94}\u{95}\u{96}\u{97}\u{98}\u{99}\u{9a}\u{9b}\u{9c}\u{9d}\u{9e}\u{9f}"), | |
| 429 | + the_12: d.fetch("1/2"), | |
| 430 | + the_123456789012345678901234567890123456789: d.fetch("123456789012345678901234567890123456789"), | |
| 431 | + the_13: d.fetch("\u{ad}\u{600}\u{601}\u{602}\u{603}\u{604}\u{605}\u{61c}\u{6dd}\u{70f}\u{180e}\u{200b}\u{200c}\u{200d}\u{200e}\u{200f}\u{202a}\u{202b}\u{202c}\u{202d}\u{202e}\u{2060}\u{2061}\u{2062}\u{2063}\u{2064}\u{2066}\u{2067}\u{2068}\u{2069}\u{206a}\u{206b}\u{206c}\u{206d}\u{206e}\u{206f}\u{feff}\u{fff9}\u{fffa}\u{fffb}\u{110bd}\u{1bca0}\u{1bca1}\u{1bca2}\u{1bca3}\u{1d173}\u{1d174}\u{1d175}\u{1d176}\u{1d177}\u{1d178}\u{1d179}\u{1d17a}\u{e0001}\u{e0020}\u{e0021}\u{e0022}\u{e0023}\u{e0024}\u{e0025}\u{e0026}\u{e0027}\u{e0028}\u{e0029}\u{e002a}\u{e002b}\u{e002c}\u{e002d}\u{e002e}\u{e002f}\u{e0030}\u{e0031}\u{e0032}\u{e0033}\u{e0034}\u{e0035}\u{e0036}\u{e0037}\u{e0038}\u{e0039}\u{e003a}\u{e003b}\u{e003c}\u{e003d}\u{e003e}\u{e003f}\u{e0040}\u{e0041}\u{e0042}\u{e0043}\u{e0044}\u{e0045}\u{e0046}\u{e0047}\u{e0048}\u{e0049}\u{e004a}\u{e004b}\u{e004c}\u{e004d}\u{e004e}\u{e004f}\u{e0050}\u{e0051}\u{e0052}\u{e0053}\u{e0054}\u{e0055}\u{e0056}\u{e0057}\u{e0058}\u{e0059}\u{e005a}\u{e005b}\u{e005c}\u{e005d}\u{e005e}\u{e005f}\u{e0060}\u{e0061}\u{e0062}\u{e0063}\u{e0064}\u{e0065}\u{e0066}\u{e0067}\u{e0068}\u{e0069}\u{e006a}\u{e006b}\u{e006c}\u{e006d}\u{e006e}\u{e006f}\u{e0070}\u{e0071}\u{e0072}\u{e0073}\u{e0074}\u{e0075}\u{e0076}\u{e0077}\u{e0078}\u{e0079}\u{e007a}\u{e007b}\u{e007c}\u{e007d}\u{e007e}\u{e007f}"), | |
| 432 | + the_14: d.fetch("₀₁₂"), | |
| 433 | + the_15: d.fetch("⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢"), | |
| 434 | + the_16: d.fetch("\u{1d47b}\u{1d489}\u{1d486} \u{1d492}\u{1d496}\u{1d48a}\u{1d484}\u{1d48c} \u{1d483}\u{1d493}\u{1d490}\u{1d498}\u{1d48f} \u{1d487}\u{1d490}\u{1d499} \u{1d48b}\u{1d496}\u{1d48e}\u{1d491}\u{1d494} \u{1d490}\u{1d497}\u{1d486}\u{1d493} \u{1d495}\u{1d489}\u{1d486} \u{1d48d}\u{1d482}\u{1d49b}\u{1d49a} \u{1d485}\u{1d490}\u{1d488}"), | |
| 435 | + the_17: d.fetch("\u{1d4e3}\u{1d4f1}\u{1d4ee} \u{1d4fa}\u{1d4fe}\u{1d4f2}\u{1d4ec}\u{1d4f4} \u{1d4eb}\u{1d4fb}\u{1d4f8}\u{1d500}\u{1d4f7} \u{1d4ef}\u{1d4f8}\u{1d501} \u{1d4f3}\u{1d4fe}\u{1d4f6}\u{1d4f9}\u{1d4fc} \u{1d4f8}\u{1d4ff}\u{1d4ee}\u{1d4fb} \u{1d4fd}\u{1d4f1}\u{1d4ee} \u{1d4f5}\u{1d4ea}\u{1d503}\u{1d502} \u{1d4ed}\u{1d4f8}\u{1d4f0}"), | |
| 436 | + the_18: d.fetch("\u{1d57f}\u{1d58d}\u{1d58a} \u{1d596}\u{1d59a}\u{1d58e}\u{1d588}\u{1d590} \u{1d587}\u{1d597}\u{1d594}\u{1d59c}\u{1d593} \u{1d58b}\u{1d594}\u{1d59d} \u{1d58f}\u{1d59a}\u{1d592}\u{1d595}\u{1d598} \u{1d594}\u{1d59b}\u{1d58a}\u{1d597} \u{1d599}\u{1d58d}\u{1d58a} \u{1d591}\u{1d586}\u{1d59f}\u{1d59e} \u{1d589}\u{1d594}\u{1d58c}"), | |
| 437 | + the_19: d.fetch("\u{1f1fa}\u{1f1f8}\u{1f1f7}\u{1f1fa}\u{1f1f8} \u{1f1e6}\u{1f1eb}\u{1f1e6}\u{1f1f2}\u{1f1f8}"), | |
| 438 | + the_1_1: d.fetch("1"), | |
| 439 | + the_1_drop_table_users: d.fetch("1;DROP TABLE users"), | |
| 440 | + the_1_e02: d.fetch("-1E02"), | |
| 441 | + the_1_e2: d.fetch("1E2"), | |
| 442 | + the_1_qnan: d.fetch("1#QNAN"), | |
| 443 | + the_1_snan: d.fetch("1#SNAN"), | |
| 444 | + the_2: d.fetch("'\"'"), | |
| 445 | + the_20: d.fetch("\u{1f1fa}\u{1f1f8}\u{1f1f7}\u{1f1fa}\u{1f1f8}\u{1f1e6}"), | |
| 446 | + the_21: d.fetch("\u{1f1fa}\u{1f1f8}\u{1f1f7}\u{1f1fa}\u{1f1f8}\u{1f1e6}\u{1f1eb}\u{1f1e6}\u{1f1f2}"), | |
| 447 | + the_22: d.fetch("\u{1f469}\u{1f3fd}"), | |
| 448 | + the_23: d.fetch("\u{1f6be} \u{1f192} \u{1f193} \u{1f195} \u{1f196} \u{1f197} \u{1f199} \u{1f3e7}"), | |
| 449 | + the_24: d.fetch("﷽"), | |
| 450 | + the_25: d.fetch("\u{feff}"), | |
| 451 | + the_26: d.fetch("゚・✿ヾ╲(。◕‿◕。)╱✿・゚"), | |
| 452 | + the_27: d.fetch("\u{fffe}"), | |
| 453 | + the_3: d.fetch("(╯°□°)╯︵ ┻━┻)"), | |
| 454 | + the_4: d.fetch(","), | |
| 455 | + the_5: d.fetch(",./;'[]\\-="), | |
| 456 | + the_6: d.fetch("-,"), | |
| 457 | + the_7: d.fetch("-."), | |
| 458 | + the_8: d.fetch("<>?:\"{}|_+"), | |
| 459 | + the_9: d.fetch("\\"), | |
| 460 | + the_999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999: d.fetch("999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999"), | |
| 461 | + the_next_two_lines_may_appear_to_be_blank_or_mojibake_in_some_viewers: d.fetch("# The next two lines may appear to be blank or mojibake in some viewers."), | |
| 462 | + the_quic_k_brown_fo_x_beeeep: d.fetch("The quic\u{8}\u{8}\u{8}\u{8}\u{8}\u{8}k brown fo\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}x... [Beeeep]"), | |
| 463 | + the_٠١٢٣٤٥٦٧٨٩: d.fetch("٠١٢٣٤٥٦٧٨٩"), | |
| 464 | + true_1: d.fetch("True"), | |
| 465 | + two_byte_characters: d.fetch("#\tTwo-Byte Characters"), | |
| 466 | + u_0000_u_000_a_or_u_000_d_nul_lf_cr: d.fetch("# U+0000, U+000A, or U+000D (NUL, LF, CR)."), | |
| 467 | + u_oncopy_alert_copy_me_u: d.fetch("<u oncopy=alert()> Copy me</u>"), | |
| 468 | + unicode_font: d.fetch("#\tUnicode font"), | |
| 469 | + unicode_numbers: d.fetch("#\tUnicode Numbers"), | |
| 470 | + unwanted_interpolation: d.fetch("#\tUnwanted Interpolation"), | |
| 471 | + x_ls_al: d.fetch("%x('ls -al /')"), | |
| 472 | + z_ḁ_ḷ_g_o: d.fetch("Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮"), | |
| 473 | + ªº: d.fetch("¡™£¢∞§¶•ªº–≠"), | |
| 474 | + ç_ı_â: d.fetch("¸˛Ç◊ı˜Â¯˘¿"), | |
| 475 | + œ_á_ø: d.fetch("Œ„´‰ˇÁ¨ˆØ∏”’"), | |
| 476 | + œ_øπ: d.fetch("œ∑´®†¥¨ˆøπ“‘"), | |
| 477 | + ʖ: d.fetch("( ͡° ͜ʖ ͡°)"), | |
| 478 | + הָיְתָה_test_الصفحاتالتّحول: d.fetch("הָיְתָהtestالصفحات التّحول"), | |
| 479 | + ثمنفسسقطتوبالتحديدجزيرتيباستخدامأندنوإذهناالستاروتنصيبكانأهّلايطاليابريطانيافرنساقدأخذسليمانإتفاقيةبينمايذكرالحدودأيبعدمعاملةبولنداالإطلاقعلإيو: d.fetch("ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو."), | |
| 480 | + ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็: d.fetch("ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็"), | |
| 481 | + ⱥ: d.fetch("Ⱥ"), | |
| 482 | + ⱦ: d.fetch("Ⱦ"), | |
| 483 | + パティへ行かないか: d.fetch("パーティーへ行かないか"), | |
| 484 | + 和製漢語: d.fetch("和製漢語"), | |
| 485 | + 田中さんにあげて下さい: d.fetch("田中さんにあげて下さい"), | |
| 486 | + fifl: d.fetch("`⁄€‹›fifl‡°·‚—±"), | |
| 487 | + ィ: d.fetch("`ィ(´∀`∩"), | |
| 488 | + ) | |
| 489 | + end | |
| 490 | + | |
| 491 | + def self.from_json!(json) | |
| 492 | + from_dynamic!(JSON.parse(json)) | |
| 493 | + end | |
| 494 | + | |
| 495 | + def to_dynamic | |
| 496 | + { | |
| 497 | + "!@#$%^&*()`~" => a, | |
| 498 | + "-0" => a_0, | |
| 499 | + "0,00" => a_000, | |
| 500 | + "0.0/0.0" => a_0000, | |
| 501 | + "-1" => a_1, | |
| 502 | + "1'000'000.00" => a_100000000, | |
| 503 | + "1E02" => a_1_e02, | |
| 504 | + "';alert(123);t='" => a_alert_123_t, | |
| 505 | + "False" => a_false, | |
| 506 | + "<a href=javascript:javascript:alert(1)>XXX</a>" => a_href_java_123456781112_script_javascript_alert_1_xxx_a, | |
| 507 | + "<a href=\"javascript\\x09:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_javascript_x09_javascript_alert_1_id_fuzzelement1_test_a, | |
| 508 | + "<a href=\"javascript\\x0A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_javascript_x0_a_javascript_alert_1_id_fuzzelement1_test_a, | |
| 509 | + "<a href=\"javascript\\x3A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_javascript_x3_a_javascript_alert_1_id_fuzzelement1_test_a, | |
| 510 | + "<a href=\"\\x01javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x01_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 511 | + "<a href=\"\\x05javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x05_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 512 | + "<a href=\"\\x08javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x08_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 513 | + "<a href=\"\\x09javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x09_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 514 | + "<a href=\"\\x0Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x0_cjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 515 | + "<a href=\"\\x10javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x10_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 516 | + "<a href=\"\\x11javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x11_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 517 | + "<a href=\"\\x13javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x13_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 518 | + "<a href=\"\\x17javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x17_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 519 | + "<a href=\"\\x1Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x1_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 520 | + "<a href=\"\\xC2\\xA0javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_c2_x_a0_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 521 | + "<a href=\"\\xE1\\x9A\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e1_x9_a_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 522 | + "<a href=\"\\xE1\\xA0\\x8Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e1_x_a0_x8_ejavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 523 | + "<a href=\"\\xE2\\x80\\x83javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x83_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 524 | + "<a href=\"\\xE2\\x80\\x84javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x84_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 525 | + "<a href=\"\\xE2\\x80\\x86javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x86_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 526 | + "<a href=\"\\xE2\\x80\\x87javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x87_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 527 | + "<a href=\"\\xE2\\x80\\xA8javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x_a8_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 528 | + "nil" => a_nil, | |
| 529 | + "\u{202a}\u{202a}test\u{202a}" => a_test, | |
| 530 | + "TRUE" => a_true, | |
| 531 | + "undef" => a_undef, | |
| 532 | + "ABC<div style=\"x:exp\\x00ression(javascript:alert(1)\">DEF" => abc_div_style_x_exp_x00_ression_javascript_alert_1_def, | |
| 533 | + "ABC<div style=\"x:exp\\x5Cression(javascript:alert(1)\">DEF" => abc_div_style_x_exp_x5_cression_javascript_alert_1_def, | |
| 534 | + "ABC<div style=\"x:\\x09expression(javascript:alert(1)\">DEF" => abc_div_style_x_x09_expression_javascript_alert_1_def, | |
| 535 | + "ABC<div style=\"x:\\x0Bexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x0_bexpression_javascript_alert_1_def, | |
| 536 | + "ABC<div style=\"x:\\x20expression(javascript:alert(1)\">DEF" => abc_div_style_x_x20_expression_javascript_alert_1_def, | |
| 537 | + "ABC<div style=\"x\\x3Aexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x3_aexpression_javascript_alert_1_def, | |
| 538 | + "ABC<div style=\"x:\\xC2\\xA0expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_c2_x_a0_expression_javascript_alert_1_def, | |
| 539 | + "ABC<div style=\"x:\\xE2\\x80\\x80expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x80_expression_javascript_alert_1_def, | |
| 540 | + "ABC<div style=\"x:\\xE2\\x80\\x84expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x84_expression_javascript_alert_1_def, | |
| 541 | + "ABC<div style=\"x:\\xE2\\x80\\x89expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x89_expression_javascript_alert_1_def, | |
| 542 | + "ABC<div style=\"x:\\xE2\\x80\\x8Bexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x8_bexpression_javascript_alert_1_def, | |
| 543 | + ";alert(123);" => alert_123, | |
| 544 | + "\";alert(123);t=\"" => alert_123_t, | |
| 545 | + "\\\";alert('XSS');//" => alert_xss, | |
| 546 | + "# and U+200B (ZERO WIDTH SPACE), which are in the C categories but are often" => and_u_200_b_zero_width_space_which_are_in_the_c_categories_but_are_often, | |
| 547 | + "Arsenal canal" => arsenal_canal, | |
| 548 | + "\" autofocus onkeyup=\"javascript:alert(123)" => autofocus_onkeyup_javascript_alert_123, | |
| 549 | + "AUX" => aux, | |
| 550 | + "#\tChanging length when lowercased" => changing_length_when_lowercased, | |
| 551 | + "#\tCharacters which increase in length (2 to 3 bytes) when lowercased" => characters_which_increase_in_length_2_to_3_bytes_when_lowercased, | |
| 552 | + "classic" => classic, | |
| 553 | + "#\tCommand Injection (Ruby)" => command_injection_ruby, | |
| 554 | + "%d" => d, | |
| 555 | + "Dick Van Dyke" => dick_van_dyke, | |
| 556 | + "dontMakeAMap" => dont_make_a_map, | |
| 557 | + "Dr. Herman I. Libshitz" => dr_herman_i_libshitz, | |
| 558 | + " " => empty, | |
| 559 | + "$ENV{'HOME'}" => env_home, | |
| 560 | + "../../../../../../../../../../../etc/hosts" => etc_hosts, | |
| 561 | + "../../../../../../../../../../../etc/passwd%00" => etc_passwd_00, | |
| 562 | + "false" => false_1, | |
| 563 | + "# fonts, and have a number of special behaviors" => fonts_and_have_a_number_of_special_behaviors, | |
| 564 | + "<foo val=`bar' />" => foo_val_bar, | |
| 565 | + "$HOME" => home, | |
| 566 | + "#\tHuman injection" => human_injection, | |
| 567 | + "̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰" => i_n_v_ok_i_n_g_t_h_e_f_è_ẹ_l_i_n_g_o_f_c_h_á_o_s, | |
| 568 | + "<!--[if<img src=x onerror=javascript:alert(1)//]> -->" => if_img_src_x_onerror_javascript_alert_1, | |
| 569 | + "<!--[if]><script>javascript:alert(1)</script -->" => if_script_javascript_alert_1_script, | |
| 570 | + "<IMG SRC=javascript:alert('XSS')>" => img_src_106971189711599114105112116589710810111411640398883833941, | |
| 571 | + "<IMG SRC=\"jav ascript:alert('XSS');\">" => img_src_jav_ascript_alert_xss, | |
| 572 | + "<IMG SRC=\"jav
ascript:alert('XSS');\">" => img_src_jav_x0_a_ascript_alert_xss, | |
| 573 | + "<IMG SRC=\"jav
ascript:alert('XSS');\">" => img_src_jav_x0_d_ascript_alert_xss, | |
| 574 | + "<img src\\x09=x onerror=\"javascript:alert(1)\">" => img_src_x09_x_onerror_javascript_alert_1, | |
| 575 | + "<img src\\x11=x onerror=\"javascript:alert(1)\">" => img_src_x11_x_onerror_javascript_alert_1, | |
| 576 | + "<img src=x onerror=\\x00\"javascript:alert(1)\">" => img_src_x_onerror_x00_javascript_alert_1, | |
| 577 | + "<img src=x onerror=\\x09\"javascript:alert(1)\">" => img_src_x_onerror_x09_javascript_alert_1, | |
| 578 | + "<img src=x\\x09onerror=\"javascript:alert(1)\">" => img_src_x_x09_onerror_javascript_alert_1, | |
| 579 | + "<img src=x\\x10onerror=\"javascript:alert(1)\">" => img_src_x_x10_onerror_javascript_alert_1, | |
| 580 | + "<img src=x\\x11onerror=\"javascript:alert(1)\">" => img_src_x_x11_onerror_javascript_alert_1, | |
| 581 | + "<img src=x\\x12onerror=\"javascript:alert(1)\">" => img_src_x_x12_onerror_javascript_alert_1, | |
| 582 | + "<img src=x\\x13onerror=\"javascript:alert(1)\">" => img_src_x_x13_onerror_javascript_alert_1, | |
| 583 | + "`\"'><img src=xxx:x \\x00onerror=javascript:alert(1)>" => img_src_xxx_x_x00_onerror_javascript_alert_1, | |
| 584 | + "`\"'><img src=xxx:x \\x0Bonerror=javascript:alert(1)>" => img_src_xxx_x_x0_bonerror_javascript_alert_1, | |
| 585 | + "`\"'><img src=xxx:x \\x2Fonerror=javascript:alert(1)>" => img_src_xxx_x_x2_fonerror_javascript_alert_1, | |
| 586 | + "<img \\x00src=x onerror=\"alert(1)\">" => img_x00_src_x_onerror_alert_1, | |
| 587 | + "<img\\x10src=x onerror=\"javascript:alert(1)\">" => img_x10_src_x_onerror_javascript_alert_1, | |
| 588 | + "<img\\x13src=x onerror=\"javascript:alert(1)\">" => img_x13_src_x_onerror_javascript_alert_1, | |
| 589 | + "<img\\x32src=x onerror=\"javascript:alert(1)\">" => img_x32_src_x_onerror_javascript_alert_1, | |
| 590 | + "<img \\x39src=x onerror=\"javascript:alert(1)\">" => img_x39_src_x_onerror_javascript_alert_1, | |
| 591 | + "INF" => inf, | |
| 592 | + "-Infinity" => infinity, | |
| 593 | + "#\tInnocuous strings which may be blocked by profanity filters (https://en.wikipedia.org/wiki/Scunthorpe_problem)" => innocuous_strings_which_may_be_blocked_by_profanity_filters_https_en_wikipedia_org_wiki_scunthorpe_problem, | |
| 594 | + "Jimmy Clitheroe" => jimmy_clitheroe, | |
| 595 | + "Kernel.exit(1)" => kernel_exit_1, | |
| 596 | + "#\tKnown CVEs and Vulnerabilities" => known_cv_es_and_vulnerabilities, | |
| 597 | + "Lightwater Country Park" => lightwater_country_park, | |
| 598 | + "LPT2" => lpt2, | |
| 599 | + "LPT3" => lpt3, | |
| 600 | + "`ls -al /`" => ls_al, | |
| 601 | + "#\tMSDOS/Windows Special Filenames" => msdos_windows_special_filenames, | |
| 602 | + "# Non-whitespace C1 controls: U+0080 through U+0084 and U+0086 through U+009F." => non_whitespace_c1_controls_u_0080_through_u_0084_and_u_0086_through_u_009_f, | |
| 603 | + "None" => none, | |
| 604 | + "(null)" => null, | |
| 605 | + " onfocus=JaVaSCript:alert(123) autofocus" => onfocus_ja_va_s_cript_alert_123_autofocus, | |
| 606 | + "' OR '1'='1" => or_11, | |
| 607 | + "Penistone Community Church" => penistone_community_church, | |
| 608 | + "perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out" => perl_e_print_img_src_java_0_script_alert_xss_out, | |
| 609 | + "PRN" => prn, | |
| 610 | + "RomansInSussex.co.uk" => romans_in_sussex_co_uk, | |
| 611 | + "%s" => s, | |
| 612 | + "<<< %s(un='%s') = %u" => s_un_s_u, | |
| 613 | + "<sc<script>ript>alert(123)</sc</script>ript>" => sc_script_ript_alert_123_sc_script_ript, | |
| 614 | + "\"><script>alert(123);</script x=\"" => script_alert_123_script_x, | |
| 615 | + "#\tScript Injection" => script_injection, | |
| 616 | + "</script><script>alert(123)</script>" => script_script_alert_123_script, | |
| 617 | + "<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >" => script_src_http_ha_ckers_org_xss_js_b, | |
| 618 | + "<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>" => script_src_http_ha_ckers_org_xss_js_script, | |
| 619 | + "\"`'><script>\\x00javascript:alert(1)</script>" => script_x00_javascript_alert_1_script, | |
| 620 | + "<script\\x09type=\"text/javascript\">javascript:alert(1);</script>" => script_x09_type_text_javascript_javascript_alert_1_script, | |
| 621 | + "\"`'><script>\\x0Cjavascript:alert(1)</script>" => script_x0_cjavascript_alert_1_script, | |
| 622 | + "\"`'><script>\\x0Djavascript:alert(1)</script>" => script_x0_djavascript_alert_1_script, | |
| 623 | + "<script\\x20type=\"text/javascript\">javascript:alert(1);</script>" => script_x20_type_text_javascript_javascript_alert_1_script, | |
| 624 | + "<script\\x3Etype=\"text/javascript\">javascript:alert(1);</script>" => script_x3_etype_text_javascript_javascript_alert_1_script, | |
| 625 | + "\"`'><script>\\xC2\\x85javascript:alert(1)</script>" => script_x_c2_x85_javascript_alert_1_script, | |
| 626 | + "\"`'><script>\\xC2\\xA0javascript:alert(1)</script>" => script_x_c2_x_a0_javascript_alert_1_script, | |
| 627 | + "\"`'><script>\\xE1\\x9A\\x80javascript:alert(1)</script>" => script_x_e1_x9_a_x80_javascript_alert_1_script, | |
| 628 | + "\"`'><script>\\xE1\\xA0\\x8Ejavascript:alert(1)</script>" => script_x_e1_x_a0_x8_ejavascript_alert_1_script, | |
| 629 | + "\"`'><script>\\xE2\\x80\\x81javascript:alert(1)</script>" => script_x_e2_x80_x81_javascript_alert_1_script, | |
| 630 | + "\"`'><script>\\xE2\\x80\\x86javascript:alert(1)</script>" => script_x_e2_x80_x86_javascript_alert_1_script, | |
| 631 | + "\"`'><script>\\xE2\\x80\\x89javascript:alert(1)</script>" => script_x_e2_x80_x89_javascript_alert_1_script, | |
| 632 | + "\"`'><script>\\xE2\\x81\\x9Fjavascript:alert(1)</script>" => script_x_e2_x81_x9_fjavascript_alert_1_script, | |
| 633 | + "\"`'><script>\\xEF\\xBB\\xBFjavascript:alert(1)</script>" => script_x_ef_x_bb_x_b_fjavascript_alert_1_script, | |
| 634 | + "\"`'><script>\\xF0\\x90\\x96\\x9Ajavascript:alert(1)</script>" => script_x_f0_x90_x96_x9_ajavascript_alert_1_script, | |
| 635 | + "<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>" => script_xss_src_http_ha_ckers_org_xss_js_script, | |
| 636 | + "#\tSQL Injection" => sql_injection, | |
| 637 | + "#\tString which can reveal system files when parsed by a badly configured XML parser" => string_which_can_reveal_system_files_when_parsed_by_a_badly_configured_xml_parser, | |
| 638 | + "#\tStrings that test for known vulnerabilities" => strings_that_test_for_known_vulnerabilities, | |
| 639 | + "#\tStrings which can be accidentally expanded into different strings if evaluated in the wrong context, e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string." => strings_which_can_be_accidentally_expanded_into_different_strings_if_evaluated_in_the_wrong_context_e_g_used_as_a_printf_format_string_or_via_perl_or_shell_eval_might_expose_sensitive_data_from_the_program_doing_the_interpolation_or_might_just_represent_the_wrong_string, | |
| 640 | + "#\tStrings which can call system commands within Ruby/Rails applications" => strings_which_can_call_system_commands_within_ruby_rails_applications, | |
| 641 | + "#\tStrings which consists of Japanese-style emoticons which are popular on the web" => strings_which_consists_of_japanese_style_emoticons_which_are_popular_on_the_web, | |
| 642 | + "#\tStrings which contain bold/italic/etc. versions of normal characters" => strings_which_contain_bold_italic_etc_versions_of_normal_characters, | |
| 643 | + "#\tStrings which contain common unicode symbols (e.g. smart quotes)" => strings_which_contain_common_unicode_symbols_e_g_smart_quotes, | |
| 644 | + "#\tStrings which contain Emoji; should be the same behavior as two-byte characters, but not always" => strings_which_contain_emoji_should_be_the_same_behavior_as_two_byte_characters_but_not_always, | |
| 645 | + "#\tStrings which contain misplaced quotation marks; can cause encoding errors" => strings_which_contain_misplaced_quotation_marks_can_cause_encoding_errors, | |
| 646 | + "#\tStrings which contain unicode subscripts/superscripts; can cause rendering issues" => strings_which_contain_unicode_subscripts_superscripts_can_cause_rendering_issues, | |
| 647 | + "#\tStrings which crashed iMessage in various versions of iOS" => strings_which_crashed_i_message_in_various_versions_of_i_os, | |
| 648 | + "#\tStrings which may cause human to reinterpret worldview" => strings_which_may_cause_human_to_reinterpret_worldview, | |
| 649 | + "Super Bowl XXX" => super_bowl_xxx, | |
| 650 | + "\u{202b}test\u{202b}" => test_1, | |
| 651 | + "\u{2066}test\u{2067}" => test_2, | |
| 652 | + "</textarea><script>alert(123)</script>" => textarea_script_alert_123_script, | |
| 653 | + "+0" => the_0, | |
| 654 | + "0..0" => the_00, | |
| 655 | + "0,0,0" => the_000, | |
| 656 | + "0,0/0,0" => the_0000, | |
| 657 | + "00˙Ɩ$-" => the_00_ɩ, | |
| 658 | + "0" => the_0_1, | |
| 659 | + "{0}" => the_0_2, | |
| 660 | + "0x0" => the_0_x0, | |
| 661 | + "'" => the_1, | |
| 662 | + "1/0" => the_10, | |
| 663 | + "1.00" => the_100, | |
| 664 | + "1.0/0.0" => the_1000, | |
| 665 | + "1'000,00" => the_100000, | |
| 666 | + "1 000 000.00" => the_100000000, | |
| 667 | + "\u{80}\u{81}\u{82}\u{83}\u{84}\u{86}\u{87}\u{88}\u{89}\u{8a}\u{8b}\u{8c}\u{8d}\u{8e}\u{8f}\u{90}\u{91}\u{92}\u{93}\u{94}\u{95}\u{96}\u{97}\u{98}\u{99}\u{9a}\u{9b}\u{9c}\u{9d}\u{9e}\u{9f}" => the_11, | |
| 668 | + "1/2" => the_12, | |
| 669 | + "123456789012345678901234567890123456789" => the_123456789012345678901234567890123456789, | |
| 670 | + "\u{ad}\u{600}\u{601}\u{602}\u{603}\u{604}\u{605}\u{61c}\u{6dd}\u{70f}\u{180e}\u{200b}\u{200c}\u{200d}\u{200e}\u{200f}\u{202a}\u{202b}\u{202c}\u{202d}\u{202e}\u{2060}\u{2061}\u{2062}\u{2063}\u{2064}\u{2066}\u{2067}\u{2068}\u{2069}\u{206a}\u{206b}\u{206c}\u{206d}\u{206e}\u{206f}\u{feff}\u{fff9}\u{fffa}\u{fffb}\u{110bd}\u{1bca0}\u{1bca1}\u{1bca2}\u{1bca3}\u{1d173}\u{1d174}\u{1d175}\u{1d176}\u{1d177}\u{1d178}\u{1d179}\u{1d17a}\u{e0001}\u{e0020}\u{e0021}\u{e0022}\u{e0023}\u{e0024}\u{e0025}\u{e0026}\u{e0027}\u{e0028}\u{e0029}\u{e002a}\u{e002b}\u{e002c}\u{e002d}\u{e002e}\u{e002f}\u{e0030}\u{e0031}\u{e0032}\u{e0033}\u{e0034}\u{e0035}\u{e0036}\u{e0037}\u{e0038}\u{e0039}\u{e003a}\u{e003b}\u{e003c}\u{e003d}\u{e003e}\u{e003f}\u{e0040}\u{e0041}\u{e0042}\u{e0043}\u{e0044}\u{e0045}\u{e0046}\u{e0047}\u{e0048}\u{e0049}\u{e004a}\u{e004b}\u{e004c}\u{e004d}\u{e004e}\u{e004f}\u{e0050}\u{e0051}\u{e0052}\u{e0053}\u{e0054}\u{e0055}\u{e0056}\u{e0057}\u{e0058}\u{e0059}\u{e005a}\u{e005b}\u{e005c}\u{e005d}\u{e005e}\u{e005f}\u{e0060}\u{e0061}\u{e0062}\u{e0063}\u{e0064}\u{e0065}\u{e0066}\u{e0067}\u{e0068}\u{e0069}\u{e006a}\u{e006b}\u{e006c}\u{e006d}\u{e006e}\u{e006f}\u{e0070}\u{e0071}\u{e0072}\u{e0073}\u{e0074}\u{e0075}\u{e0076}\u{e0077}\u{e0078}\u{e0079}\u{e007a}\u{e007b}\u{e007c}\u{e007d}\u{e007e}\u{e007f}" => the_13, | |
| 671 | + "₀₁₂" => the_14, | |
| 672 | + "⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢" => the_15, | |
| 673 | + "\u{1d47b}\u{1d489}\u{1d486} \u{1d492}\u{1d496}\u{1d48a}\u{1d484}\u{1d48c} \u{1d483}\u{1d493}\u{1d490}\u{1d498}\u{1d48f} \u{1d487}\u{1d490}\u{1d499} \u{1d48b}\u{1d496}\u{1d48e}\u{1d491}\u{1d494} \u{1d490}\u{1d497}\u{1d486}\u{1d493} \u{1d495}\u{1d489}\u{1d486} \u{1d48d}\u{1d482}\u{1d49b}\u{1d49a} \u{1d485}\u{1d490}\u{1d488}" => the_16, | |
| 674 | + "\u{1d4e3}\u{1d4f1}\u{1d4ee} \u{1d4fa}\u{1d4fe}\u{1d4f2}\u{1d4ec}\u{1d4f4} \u{1d4eb}\u{1d4fb}\u{1d4f8}\u{1d500}\u{1d4f7} \u{1d4ef}\u{1d4f8}\u{1d501} \u{1d4f3}\u{1d4fe}\u{1d4f6}\u{1d4f9}\u{1d4fc} \u{1d4f8}\u{1d4ff}\u{1d4ee}\u{1d4fb} \u{1d4fd}\u{1d4f1}\u{1d4ee} \u{1d4f5}\u{1d4ea}\u{1d503}\u{1d502} \u{1d4ed}\u{1d4f8}\u{1d4f0}" => the_17, | |
| 675 | + "\u{1d57f}\u{1d58d}\u{1d58a} \u{1d596}\u{1d59a}\u{1d58e}\u{1d588}\u{1d590} \u{1d587}\u{1d597}\u{1d594}\u{1d59c}\u{1d593} \u{1d58b}\u{1d594}\u{1d59d} \u{1d58f}\u{1d59a}\u{1d592}\u{1d595}\u{1d598} \u{1d594}\u{1d59b}\u{1d58a}\u{1d597} \u{1d599}\u{1d58d}\u{1d58a} \u{1d591}\u{1d586}\u{1d59f}\u{1d59e} \u{1d589}\u{1d594}\u{1d58c}" => the_18, | |
| 676 | + "\u{1f1fa}\u{1f1f8}\u{1f1f7}\u{1f1fa}\u{1f1f8} \u{1f1e6}\u{1f1eb}\u{1f1e6}\u{1f1f2}\u{1f1f8}" => the_19, | |
| 677 | + "1" => the_1_1, | |
| 678 | + "1;DROP TABLE users" => the_1_drop_table_users, | |
| 679 | + "-1E02" => the_1_e02, | |
| 680 | + "1E2" => the_1_e2, | |
| 681 | + "1#QNAN" => the_1_qnan, | |
| 682 | + "1#SNAN" => the_1_snan, | |
| 683 | + "'\"'" => the_2, | |
| 684 | + "\u{1f1fa}\u{1f1f8}\u{1f1f7}\u{1f1fa}\u{1f1f8}\u{1f1e6}" => the_20, | |
| 685 | + "\u{1f1fa}\u{1f1f8}\u{1f1f7}\u{1f1fa}\u{1f1f8}\u{1f1e6}\u{1f1eb}\u{1f1e6}\u{1f1f2}" => the_21, | |
| 686 | + "\u{1f469}\u{1f3fd}" => the_22, | |
| 687 | + "\u{1f6be} \u{1f192} \u{1f193} \u{1f195} \u{1f196} \u{1f197} \u{1f199} \u{1f3e7}" => the_23, | |
| 688 | + "﷽" => the_24, | |
| 689 | + "\u{feff}" => the_25, | |
| 690 | + "゚・✿ヾ╲(。◕‿◕。)╱✿・゚" => the_26, | |
| 691 | + "\u{fffe}" => the_27, | |
| 692 | + "(╯°□°)╯︵ ┻━┻)" => the_3, | |
| 693 | + "," => the_4, | |
| 694 | + ",./;'[]\\-=" => the_5, | |
| 695 | + "-," => the_6, | |
| 696 | + "-." => the_7, | |
| 697 | + "<>?:\"{}|_+" => the_8, | |
| 698 | + "\\" => the_9, | |
| 699 | + "999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999" => the_999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999, | |
| 700 | + "# The next two lines may appear to be blank or mojibake in some viewers." => the_next_two_lines_may_appear_to_be_blank_or_mojibake_in_some_viewers, | |
| 701 | + "The quic\u{8}\u{8}\u{8}\u{8}\u{8}\u{8}k brown fo\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}\u{7}x... [Beeeep]" => the_quic_k_brown_fo_x_beeeep, | |
| 702 | + "٠١٢٣٤٥٦٧٨٩" => the_٠١٢٣٤٥٦٧٨٩, | |
| 703 | + "True" => true_1, | |
| 704 | + "#\tTwo-Byte Characters" => two_byte_characters, | |
| 705 | + "# U+0000, U+000A, or U+000D (NUL, LF, CR)." => u_0000_u_000_a_or_u_000_d_nul_lf_cr, | |
| 706 | + "<u oncopy=alert()> Copy me</u>" => u_oncopy_alert_copy_me_u, | |
| 707 | + "#\tUnicode font" => unicode_font, | |
| 708 | + "#\tUnicode Numbers" => unicode_numbers, | |
| 709 | + "#\tUnwanted Interpolation" => unwanted_interpolation, | |
| 710 | + "%x('ls -al /')" => x_ls_al, | |
| 711 | + "Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮" => z_ḁ_ḷ_g_o, | |
| 712 | + "¡™£¢∞§¶•ªº–≠" => ªº, | |
| 713 | + "¸˛Ç◊ı˜Â¯˘¿" => ç_ı_â, | |
| 714 | + "Œ„´‰ˇÁ¨ˆØ∏”’" => œ_á_ø, | |
| 715 | + "œ∑´®†¥¨ˆøπ“‘" => œ_øπ, | |
| 716 | + "( ͡° ͜ʖ ͡°)" => ʖ, | |
| 717 | + "הָיְתָהtestالصفحات التّحول" => הָיְתָה_test_الصفحاتالتّحول, | |
| 718 | + "ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو." => ثمنفسسقطتوبالتحديدجزيرتيباستخدامأندنوإذهناالستاروتنصيبكانأهّلايطاليابريطانيافرنساقدأخذسليمانإتفاقيةبينمايذكرالحدودأيبعدمعاملةبولنداالإطلاقعلإيو, | |
| 719 | + "ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็" => ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็, | |
| 720 | + "Ⱥ" => ⱥ, | |
| 721 | + "Ⱦ" => ⱦ, | |
| 722 | + "パーティーへ行かないか" => パティへ行かないか, | |
| 723 | + "和製漢語" => 和製漢語, | |
| 724 | + "田中さんにあげて下さい" => 田中さんにあげて下さい, | |
| 725 | + "`⁄€‹›fifl‡°·‚—±" => fifl, | |
| 726 | + "`ィ(´∀`∩" => ィ, | |
| 727 | + } | |
| 728 | + end | |
| 729 | + | |
| 730 | + def to_json(options = nil) | |
| 731 | + JSON.generate(to_dynamic, options) | |
| 732 | + end | |
| 733 | +end | |
| 734 | + | |
| 735 | +class B < Dry::Struct | |
| 736 | + attribute :a_href_http_foo_bar_x_y_a_img_alt_img_src_x_x_onerror_javascript_alert_1_a, Types::String | |
| 737 | + attribute :a_href_javascript_x00_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 738 | + attribute :a_href_javascript_x0_d_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 739 | + attribute :a_href_x02_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 740 | + attribute :a_href_x04_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 741 | + attribute :a_href_x0_ajavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 742 | + attribute :a_href_x0_djavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 743 | + attribute :a_href_x0_ejavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 744 | + attribute :a_href_x0_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 745 | + attribute :a_href_x16_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 746 | + attribute :a_href_x19_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 747 | + attribute :a_href_x1_ajavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 748 | + attribute :a_href_x1_djavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 749 | + attribute :a_href_x1_ejavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 750 | + attribute :a_href_x_e2_x80_x81_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 751 | + attribute :a_href_x_e2_x80_x82_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 752 | + attribute :a_href_x_e2_x80_x_a9_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 753 | + attribute :a_href_x_e2_x80_x_a_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 754 | + attribute :abc_div_style_x_expression_x5_c_javascript_alert_1_def, Types::String | |
| 755 | + attribute :abc_div_style_x_x0_aexpression_javascript_alert_1_def, Types::String | |
| 756 | + attribute :abc_div_style_x_x0_dexpression_javascript_alert_1_def, Types::String | |
| 757 | + attribute :abc_div_style_x_x_e2_x80_x82_expression_javascript_alert_1_def, Types::String | |
| 758 | + attribute :abc_div_style_x_x_e2_x80_x83_expression_javascript_alert_1_def, Types::String | |
| 759 | + attribute :abc_div_style_x_x_e2_x80_x85_expression_javascript_alert_1_def, Types::String | |
| 760 | + attribute :abc_div_style_x_x_e2_x80_x87_expression_javascript_alert_1_def, Types::String | |
| 761 | + attribute :abc_div_style_x_x_e2_x80_x8_aexpression_javascript_alert_1_def, Types::String | |
| 762 | + attribute :appear_in_input, Types::String | |
| 763 | + attribute :ath0, Types::String | |
| 764 | + attribute :autofocus_onkeyup_javascript_alert_123, Types::String | |
| 765 | + attribute :b, Types::String | |
| 766 | + attribute :b_100000, Types::String | |
| 767 | + attribute :b_false, Types::String | |
| 768 | + attribute :b_img_src_onmouseover_alert_xxs, Types::String | |
| 769 | + attribute :b_nil, Types::String | |
| 770 | + attribute :b_script_alert_123_script, Types::String | |
| 771 | + attribute :b_touch_tmp_blns_fail, Types::String | |
| 772 | + attribute :basement, Types::String | |
| 773 | + attribute :but_now_20_cfor_my_greatest_trick_8_m, Types::String | |
| 774 | + attribute :byte_order_marks_u_feff_and_u_fffe_each_on_its_own_line, Types::String | |
| 775 | + attribute :com1, Types::String | |
| 776 | + attribute :com3, Types::String | |
| 777 | + attribute :commonly_misinterpreted_as_additional_graphic_characters, Types::String | |
| 778 | + attribute :con, Types::String | |
| 779 | + attribute :contexts_divided_into_three_groups_based_on_us_layout_keyboard_position, Types::String | |
| 780 | + attribute :credit_https_twitter_com_jifa_status_625776454479970304, Types::String | |
| 781 | + attribute :dev_null_touch_tmp_blns_fail_echo, Types::String | |
| 782 | + attribute :dont_make_a_map, Types::Bool | |
| 783 | + attribute :empty, Types::String | |
| 784 | + attribute :eval_puts_hello_world, Types::String | |
| 785 | + attribute :expression, Types::String | |
| 786 | + attribute :file, Types::String | |
| 787 | + attribute :file_inclusion, Types::String | |
| 788 | + attribute :foo_val_bar, Types::String | |
| 789 | + attribute :general_category_cf_in_unicode_800, Types::String | |
| 790 | + attribute :h_e_w_h_o_w_a_į_t_s_b_e_h_i_n_d_t_h_e_w_a_l_ḽ, Types::String | |
| 791 | + attribute :help, Types::String | |
| 792 | + attribute :http_a_3030, Types::String | |
| 793 | + attribute :i_os_vulnerabilities, Types::String | |
| 794 | + attribute :if_you_re_reading_this_you_ve_been_in_a_coma_for_almost_20_years_now_we_re_trying_a_new_technique_we_don_t_know_where_this_message_will_end_up_in_your_dream_but_we_hope_it_works_please_wake_up_we_miss_you, Types::String | |
| 795 | + attribute :iframe_src_http_ha_ckers_org_scriptlet_html, Types::String | |
| 796 | + attribute :img_src_00001060000097000011800000970000115000009900001140000105000011200001160000058000009700001080000101000011400001160000040000003900000880000083000008300000390000041, Types::String | |
| 797 | + attribute :img_src_14_javascript_alert_xss, Types::String | |
| 798 | + attribute :img_src_jav_x09_ascript_alert_xss, Types::String | |
| 799 | + attribute :img_src_onmouseover_alert_xxs, Types::String | |
| 800 | + attribute :img_src_x00_x_onerror_javascript_alert_1, Types::String | |
| 801 | + attribute :img_src_x6_a_x61_x76_x61_x73_x63_x72_x69_x70_x74_x3_a_x61_x6_c_x65_x72_x74_x28_x27_x58_x53_x53_x27_x29, Types::String | |
| 802 | + attribute :img_src_x_onerror_x11_javascript_alert_1, Types::String | |
| 803 | + attribute :img_src_x_onerror_x12_javascript_alert_1, Types::String | |
| 804 | + attribute :img_src_xxx_x_x0_aonerror_javascript_alert_1, Types::String | |
| 805 | + attribute :img_src_xxx_x_x0_conerror_javascript_alert_1, Types::String | |
| 806 | + attribute :img_src_xxx_x_x0_donerror_javascript_alert_1, Types::String | |
| 807 | + attribute :img_x00_src_x_onerror_javascript_alert_1, Types::String | |
| 808 | + attribute :img_x11_src_x_onerror_javascript_alert_1, Types::String | |
| 809 | + attribute :img_x12_src_x_onerror_javascript_alert_1, Types::String | |
| 810 | + attribute :img_x47_src_x_onerror_javascript_alert_1, Types::String | |
| 811 | + attribute :irc_specific_strings, Types::String | |
| 812 | + attribute :japanese_emoticons, Types::String | |
| 813 | + attribute :kernel_exec_ls_al, Types::String | |
| 814 | + attribute :linda_callahan, Types::String | |
| 815 | + attribute :nul, Types::String | |
| 816 | + attribute :null, Types::String | |
| 817 | + attribute :numeric_strings, Types::String | |
| 818 | + attribute :often_forbidden_to_appear_in_various_text_based_file_formats_e_g_xml, Types::String | |
| 819 | + attribute :onfocus_ja_va_s_cript_alert_123_autofocus, Types::String | |
| 820 | + attribute :or_111, Types::String | |
| 821 | + attribute :quotation_marks, Types::String | |
| 822 | + attribute :regional_indicator_symbols, Types::String | |
| 823 | + attribute :regional_indicator_symbols_can_be_displayed_differently_across, Types::String | |
| 824 | + attribute :reserved_strings, Types::String | |
| 825 | + attribute :script_alert_123_script, Types::String | |
| 826 | + attribute :script_alert_123_script_1, Types::String | |
| 827 | + attribute :script_alert_123_script_x, Types::String | |
| 828 | + attribute :script_alert_xss_script, Types::String | |
| 829 | + attribute :script_src_ha_ckers_org_j, Types::String | |
| 830 | + attribute :script_src_jscript_s_script, Types::String | |
| 831 | + attribute :script_x09_javascript_alert_1_script, Types::String | |
| 832 | + attribute :script_x0_atype_text_javascript_javascript_alert_1_script, Types::String | |
| 833 | + attribute :script_x0_dtype_text_javascript_javascript_alert_1_script, Types::String | |
| 834 | + attribute :script_x21_javascript_alert_1_script, Types::String | |
| 835 | + attribute :script_x3_bjavascript_alert_1_script, Types::String | |
| 836 | + attribute :script_x_e2_x80_x85_javascript_alert_1_script, Types::String | |
| 837 | + attribute :script_x_e2_x80_x87_javascript_alert_1_script, Types::String | |
| 838 | + attribute :script_x_e2_x80_x8_ajavascript_alert_1_script, Types::String | |
| 839 | + attribute :script_x_e2_x80_x_a8_javascript_alert_1_script, Types::String | |
| 840 | + attribute :script_x_e2_x80_x_a9_javascript_alert_1_script, Types::String | |
| 841 | + attribute :script_x_e2_x80_x_a_fjavascript_alert_1_script, Types::String | |
| 842 | + attribute :script_x_e3_x80_x80_javascript_alert_1_script, Types::String | |
| 843 | + attribute :scunthorpe_problem, Types::String | |
| 844 | + attribute :strings_that_may_occur_on_irc_clients_that_make_security_products_freak_out, Types::String | |
| 845 | + attribute :strings_which_are_reserved_characters_in_msdos_windows, Types::String | |
| 846 | + attribute :strings_which_attempt_to_invoke_a_benign_script_injection_shows_vulnerability_to_xss, Types::String | |
| 847 | + attribute :strings_which_contain_text_that_should_be_rendered_rtl_if_possible_e_g_arabic_hebrew, Types::String | |
| 848 | + attribute :strings_which_contain_two_byte_characters_can_cause_rendering_issues_or_character_length_issues, Types::String | |
| 849 | + attribute :strings_which_contain_unicode_numbers_if_the_code_is_localized_it_should_see_the_input_as_numeric, Types::String | |
| 850 | + attribute :strings_which_may_be_used_elsewhere_in_code, Types::String | |
| 851 | + attribute :terminal_escape_codes, Types::String | |
| 852 | + attribute :the_000, Types::String | |
| 853 | + attribute :the_01000, Types::String | |
| 854 | + attribute :the_08, Types::String | |
| 855 | + attribute :the_09, Types::String | |
| 856 | + attribute :the_0_xffffffffffffffff, Types::String | |
| 857 | + attribute :the_1, Types::String | |
| 858 | + attribute :the_100, Types::String | |
| 859 | + attribute :the_1000, Types::String | |
| 860 | + attribute :the_100000, Types::String | |
| 861 | + attribute :the_100000000, Types::String | |
| 862 | + attribute :the_1_drop_table_users_1, Types::String | |
| 863 | + attribute :the_1_ind, Types::String | |
| 864 | + attribute :the_1_inf, Types::String | |
| 865 | + attribute :the_2, Types::String | |
| 866 | + attribute :the_21474836481, Types::String | |
| 867 | + attribute :the_22250738585072011_e_308, Types::String | |
| 868 | + attribute :the_3, Types::String | |
| 869 | + attribute :the_4, Types::String | |
| 870 | + attribute :the_5, Types::String | |
| 871 | + attribute :the_6, Types::String | |
| 872 | + attribute :the_7, Types::String | |
| 873 | + attribute :the_next_line_may_appear_to_be_blank_mojibake_or_dingbats_in_some_viewers, Types::String | |
| 874 | + attribute :the_next_line_may_appear_to_be_blank_or_mojibake_in_some_viewers, Types::String | |
| 875 | + attribute :the_next_line_may_be_flagged_for_trailing_whitespace_in_some_viewers, Types::String | |
| 876 | + attribute :the_123, Types::String | |
| 877 | + attribute :this_file_unfortunately_cannot_express_strings_containing, Types::String | |
| 878 | + attribute :touch_tmp_blns_fail, Types::String | |
| 879 | + attribute :touch_tmp_blns_shellshock2_fail, Types::String | |
| 880 | + attribute :tyson_gay, Types::String | |
| 881 | + attribute :unicode_symbols, Types::String | |
| 882 | + attribute :x00_script_javascript_alert_1_script, Types::String | |
| 883 | + attribute :x3_cscript_javascript_alert_1_script, Types::String | |
| 884 | + attribute :åß_ƒ_æ, Types::String | |
| 885 | + attribute :ɐnbᴉlɐ_ɐuƃɐɯ_ǝɹolop_ʇǝ_ǝɹoqɐl_ʇn_ʇunpᴉpᴉɔuᴉ_ɹodɯǝʇ_poɯsnᴉǝ_op_pǝs_ʇᴉlǝ_ƃuᴉɔsᴉdᴉpɐ_ɹnʇǝʇɔǝsuoɔ_ʇǝɯɐ_ʇᴉs_ɹolop_ɯnsdᴉ_ɯǝɹo, Types::String | |
| 886 | + attribute :ω_ç_µ, Types::String | |
| 887 | + attribute :ຈل͜ຈノຈل͜ຈノ, Types::String | |
| 888 | + attribute :ṱ_o_i_n_v_o_kè_t_h_e_h_i_v_e_m_i_n_d_r_e_p_r_e_s_e_ǹ_t_i_n_g_c_h_a_o_s, Types::String | |
| 889 | + attribute :社會科學院語學研究所, Types::String | |
| 890 | + attribute :部落格, Types::String | |
| 891 | + attribute :사회과학원어학연구소, Types::String | |
| 892 | + attribute :찦차를타고온펲시맨과쑛다리똠방각하, Types::String | |
| 893 | + attribute :ﷺ, Types::String | |
| 894 | + attribute :ロ_, Types::String | |
| 895 | + | |
| 896 | + def self.from_dynamic!(d) | |
| 897 | + d = Types::Hash[d] | |
| 898 | + new( | |
| 899 | + a_href_http_foo_bar_x_y_a_img_alt_img_src_x_x_onerror_javascript_alert_1_a: d.fetch("<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x onerror=javascript:alert(1)></a>\">"), | |
| 900 | + a_href_javascript_x00_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"javascript\\x00:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 901 | + a_href_javascript_x0_d_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"javascript\\x0D:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 902 | + a_href_x02_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x02javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 903 | + a_href_x04_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x04javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 904 | + a_href_x0_ajavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x0Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 905 | + a_href_x0_djavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x0Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 906 | + a_href_x0_ejavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x0Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 907 | + a_href_x0_fjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x0Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 908 | + a_href_x16_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x16javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 909 | + a_href_x19_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x19javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 910 | + a_href_x1_ajavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x1Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 911 | + a_href_x1_djavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x1Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 912 | + a_href_x1_ejavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x1Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 913 | + a_href_x_e2_x80_x81_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x81javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 914 | + a_href_x_e2_x80_x82_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x82javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 915 | + a_href_x_e2_x80_x_a9_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\xA9javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 916 | + a_href_x_e2_x80_x_a_fjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\xAFjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 917 | + abc_div_style_x_expression_x5_c_javascript_alert_1_def: d.fetch("ABC<div style=\"x:expression\\x5C(javascript:alert(1)\">DEF"), | |
| 918 | + abc_div_style_x_x0_aexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x0Aexpression(javascript:alert(1)\">DEF"), | |
| 919 | + abc_div_style_x_x0_dexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x0Dexpression(javascript:alert(1)\">DEF"), | |
| 920 | + abc_div_style_x_x_e2_x80_x82_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x82expression(javascript:alert(1)\">DEF"), | |
| 921 | + abc_div_style_x_x_e2_x80_x83_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x83expression(javascript:alert(1)\">DEF"), | |
| 922 | + abc_div_style_x_x_e2_x80_x85_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x85expression(javascript:alert(1)\">DEF"), | |
| 923 | + abc_div_style_x_x_e2_x80_x87_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x87expression(javascript:alert(1)\">DEF"), | |
| 924 | + abc_div_style_x_x_e2_x80_x8_aexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x8Aexpression(javascript:alert(1)\">DEF"), | |
| 925 | + appear_in_input: d.fetch("# appear in input."), | |
| 926 | + ath0: d.fetch("+++ATH0"), | |
| 927 | + autofocus_onkeyup_javascript_alert_123: d.fetch("' autofocus onkeyup='javascript:alert(123)"), | |
| 928 | + b: d.fetch("\t\u{b}\u{c} \u{85} \u{200b}\u{2028}\u{2029} "), | |
| 929 | + b_100000: d.fetch("1'000.00"), | |
| 930 | + b_false: d.fetch("FALSE"), | |
| 931 | + b_img_src_onmouseover_alert_xxs: d.fetch("<IMG SRC=# onmouseover=\"alert('xxs')\">"), | |
| 932 | + b_nil: d.fetch("NIL"), | |
| 933 | + b_script_alert_123_script: d.fetch("--><script>alert(123)</script>"), | |
| 934 | + b_touch_tmp_blns_fail: d.fetch("`touch /tmp/blns.fail`"), | |
| 935 | + basement: d.fetch("basement"), | |
| 936 | + but_now_20_cfor_my_greatest_trick_8_m: d.fetch("But now...\u{1b}[20Cfor my greatest trick...\u{1b}[8m"), | |
| 937 | + byte_order_marks_u_feff_and_u_fffe_each_on_its_own_line: d.fetch("# \"Byte order marks\", U+FEFF and U+FFFE, each on its own line."), | |
| 938 | + com1: d.fetch("COM1"), | |
| 939 | + com3: d.fetch("COM3"), | |
| 940 | + commonly_misinterpreted_as_additional_graphic_characters: d.fetch("# Commonly misinterpreted as additional graphic characters."), | |
| 941 | + con: d.fetch("CON"), | |
| 942 | + contexts_divided_into_three_groups_based_on_us_layout_keyboard_position: d.fetch("# contexts. Divided into three groups based on (US-layout) keyboard position."), | |
| 943 | + credit_https_twitter_com_jifa_status_625776454479970304: d.fetch("#\tCredit: https://twitter.com/jifa/status/625776454479970304"), | |
| 944 | + dev_null_touch_tmp_blns_fail_echo: d.fetch("/dev/null; touch /tmp/blns.fail ; echo"), | |
| 945 | + dont_make_a_map: d.fetch("dontMakeAMap"), | |
| 946 | + empty: d.fetch("\u{1}\u{2}\u{3}\u{4}\u{5}\u{6}\u{7}\u{8}\u{e}\u{f}\u{10}\u{11}\u{12}\u{13}\u{14}\u{15}\u{16}\u{17}\u{18}\u{19}\u{1a}\u{1b}\u{1c}\u{1d}\u{1e}\u{1f}\u{7f}"), | |
| 947 | + eval_puts_hello_world: d.fetch("eval(\"puts 'hello world'\")"), | |
| 948 | + expression: d.fetch("expression"), | |
| 949 | + file: d.fetch("File:///"), | |
| 950 | + file_inclusion: d.fetch("#\tFile Inclusion"), | |
| 951 | + foo_val_bar: d.fetch("<foo val=”bar“ />"), | |
| 952 | + general_category_cf_in_unicode_800: d.fetch("# general category Cf (in Unicode 8.0.0)."), | |
| 953 | + h_e_w_h_o_w_a_į_t_s_b_e_h_i_n_d_t_h_e_w_a_l_ḽ: d.fetch("̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕"), | |
| 954 | + help: d.fetch("--help"), | |
| 955 | + http_a_3030: d.fetch("http://a/%%30%30"), | |
| 956 | + i_os_vulnerabilities: d.fetch("#\tiOS Vulnerabilities"), | |
| 957 | + if_you_re_reading_this_you_ve_been_in_a_coma_for_almost_20_years_now_we_re_trying_a_new_technique_we_don_t_know_where_this_message_will_end_up_in_your_dream_but_we_hope_it_works_please_wake_up_we_miss_you: d.fetch("If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you."), | |
| 958 | + iframe_src_http_ha_ckers_org_scriptlet_html: d.fetch("<iframe src=http://ha.ckers.org/scriptlet.html <"), | |
| 959 | + img_src_00001060000097000011800000970000115000009900001140000105000011200001160000058000009700001080000101000011400001160000040000003900000880000083000008300000390000041: d.fetch("<IMG SRC=javascript:alert('XSS')>"), | |
| 960 | + img_src_14_javascript_alert_xss: d.fetch("<IMG SRC=\"  javascript:alert('XSS');\">"), | |
| 961 | + img_src_jav_x09_ascript_alert_xss: d.fetch("<IMG SRC=\"jav	ascript:alert('XSS');\">"), | |
| 962 | + img_src_onmouseover_alert_xxs: d.fetch("<IMG SRC= onmouseover=\"alert('xxs')\">"), | |
| 963 | + img_src_x00_x_onerror_javascript_alert_1: d.fetch("<img src\\x00=x onerror=\"javascript:alert(1)\">"), | |
| 964 | + img_src_x6_a_x61_x76_x61_x73_x63_x72_x69_x70_x74_x3_a_x61_x6_c_x65_x72_x74_x28_x27_x58_x53_x53_x27_x29: d.fetch("<IMG SRC=javascript:alert('XSS')>"), | |
| 965 | + img_src_x_onerror_x11_javascript_alert_1: d.fetch("<img src=x onerror=\\x11\"javascript:alert(1)\">"), | |
| 966 | + img_src_x_onerror_x12_javascript_alert_1: d.fetch("<img src=x onerror=\\x12\"javascript:alert(1)\">"), | |
| 967 | + img_src_xxx_x_x0_aonerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x0Aonerror=javascript:alert(1)>"), | |
| 968 | + img_src_xxx_x_x0_conerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x0Conerror=javascript:alert(1)>"), | |
| 969 | + img_src_xxx_x_x0_donerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x0Donerror=javascript:alert(1)>"), | |
| 970 | + img_x00_src_x_onerror_javascript_alert_1: d.fetch("<img \\x00src=x onerror=\"javascript:alert(1)\">"), | |
| 971 | + img_x11_src_x_onerror_javascript_alert_1: d.fetch("<img \\x11src=x onerror=\"javascript:alert(1)\">"), | |
| 972 | + img_x12_src_x_onerror_javascript_alert_1: d.fetch("<img \\x12src=x onerror=\"javascript:alert(1)\">"), | |
| 973 | + img_x47_src_x_onerror_javascript_alert_1: d.fetch("<img \\x47src=x onerror=\"javascript:alert(1)\">"), | |
| 974 | + irc_specific_strings: d.fetch("# IRC specific strings"), | |
| 975 | + japanese_emoticons: d.fetch("#\tJapanese Emoticons"), | |
| 976 | + kernel_exec_ls_al: d.fetch("Kernel.exec(\"ls -al /\")"), | |
| 977 | + linda_callahan: d.fetch("Linda Callahan"), | |
| 978 | + nul: d.fetch("NUL"), | |
| 979 | + null: d.fetch("null"), | |
| 980 | + numeric_strings: d.fetch("#\tNumeric Strings"), | |
| 981 | + often_forbidden_to_appear_in_various_text_based_file_formats_e_g_xml: d.fetch("# Often forbidden to appear in various text-based file formats (e.g. XML),"), | |
| 982 | + onfocus_ja_va_s_cript_alert_123_autofocus: d.fetch("\" onfocus=JaVaSCript:alert(123) autofocus"), | |
| 983 | + or_111: d.fetch("' OR 1=1 -- 1"), | |
| 984 | + quotation_marks: d.fetch("#\tQuotation Marks"), | |
| 985 | + regional_indicator_symbols: d.fetch("# Regional Indicator Symbols"), | |
| 986 | + regional_indicator_symbols_can_be_displayed_differently_across: d.fetch("# Regional Indicator Symbols can be displayed differently across"), | |
| 987 | + reserved_strings: d.fetch("#\tReserved Strings"), | |
| 988 | + script_alert_123_script: d.fetch("\"><script>alert(123)</script>"), | |
| 989 | + script_alert_123_script_1: d.fetch("<script>alert(123)</script>"), | |
| 990 | + script_alert_123_script_x: d.fetch("><script>alert(123);</script x="), | |
| 991 | + script_alert_xss_script: d.fetch("<<SCRIPT>alert(\"XSS\");//<</SCRIPT>"), | |
| 992 | + script_src_ha_ckers_org_j: d.fetch("<SCRIPT SRC=//ha.ckers.org/.j>"), | |
| 993 | + script_src_jscript_s_script: d.fetch("<script src=\"\\\\%(jscript)s\"></script>"), | |
| 994 | + script_x09_javascript_alert_1_script: d.fetch("\"`'><script>\\x09javascript:alert(1)</script>"), | |
| 995 | + script_x0_atype_text_javascript_javascript_alert_1_script: d.fetch("<script\\x0Atype=\"text/javascript\">javascript:alert(1);</script>"), | |
| 996 | + script_x0_dtype_text_javascript_javascript_alert_1_script: d.fetch("<script\\x0Dtype=\"text/javascript\">javascript:alert(1);</script>"), | |
| 997 | + script_x21_javascript_alert_1_script: d.fetch("\"`'><script>\\x21javascript:alert(1)</script>"), | |
| 998 | + script_x3_bjavascript_alert_1_script: d.fetch("\"`'><script>\\x3Bjavascript:alert(1)</script>"), | |
| 999 | + script_x_e2_x80_x85_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x85javascript:alert(1)</script>"), | |
| 1000 | + script_x_e2_x80_x87_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x87javascript:alert(1)</script>"), | |
| 1001 | + script_x_e2_x80_x8_ajavascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x8Ajavascript:alert(1)</script>"), | |
| 1002 | + script_x_e2_x80_x_a8_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\xA8javascript:alert(1)</script>"), | |
| 1003 | + script_x_e2_x80_x_a9_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\xA9javascript:alert(1)</script>"), | |
| 1004 | + script_x_e2_x80_x_a_fjavascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\xAFjavascript:alert(1)</script>"), | |
| 1005 | + script_x_e3_x80_x80_javascript_alert_1_script: d.fetch("\"`'><script>\\xE3\\x80\\x80javascript:alert(1)</script>"), | |
| 1006 | + scunthorpe_problem: d.fetch("#\tScunthorpe Problem"), | |
| 1007 | + strings_that_may_occur_on_irc_clients_that_make_security_products_freak_out: d.fetch("# Strings that may occur on IRC clients that make security products freak out"), | |
| 1008 | + strings_which_are_reserved_characters_in_msdos_windows: d.fetch("#\tStrings which are reserved characters in MSDOS/Windows"), | |
| 1009 | + strings_which_attempt_to_invoke_a_benign_script_injection_shows_vulnerability_to_xss: d.fetch("#\tStrings which attempt to invoke a benign script injection; shows vulnerability to XSS"), | |
| 1010 | + strings_which_contain_text_that_should_be_rendered_rtl_if_possible_e_g_arabic_hebrew: d.fetch("#\tStrings which contain text that should be rendered RTL if possible (e.g. Arabic, Hebrew)"), | |
| 1011 | + strings_which_contain_two_byte_characters_can_cause_rendering_issues_or_character_length_issues: d.fetch("#\tStrings which contain two-byte characters: can cause rendering issues or character-length issues"), | |
| 1012 | + strings_which_contain_unicode_numbers_if_the_code_is_localized_it_should_see_the_input_as_numeric: d.fetch("#\tStrings which contain unicode numbers; if the code is localized, it should see the input as numeric"), | |
| 1013 | + strings_which_may_be_used_elsewhere_in_code: d.fetch("#\tStrings which may be used elsewhere in code"), | |
| 1014 | + terminal_escape_codes: d.fetch("#\tTerminal escape codes"), | |
| 1015 | + the_000: d.fetch("0.00"), | |
| 1016 | + the_01000: d.fetch("01000"), | |
| 1017 | + the_08: d.fetch("08"), | |
| 1018 | + the_09: d.fetch("09"), | |
| 1019 | + the_0_xffffffffffffffff: d.fetch("0xffffffffffffffff"), | |
| 1020 | + the_1: d.fetch("\""), | |
| 1021 | + the_100: d.fetch("$1.00"), | |
| 1022 | + the_1000: d.fetch("1,0/0,0"), | |
| 1023 | + the_100000: d.fetch("1 000.00"), | |
| 1024 | + the_100000000: d.fetch("1 000 000,00"), | |
| 1025 | + the_1_drop_table_users_1: d.fetch("1'; DROP TABLE users-- 1"), | |
| 1026 | + the_1_ind: d.fetch("1#IND"), | |
| 1027 | + the_1_inf: d.fetch("1#INF"), | |
| 1028 | + the_2: d.fetch("#"), | |
| 1029 | + the_21474836481: d.fetch("-2147483648/-1"), | |
| 1030 | + the_22250738585072011_e_308: d.fetch("2.2250738585072011e-308"), | |
| 1031 | + the_3: d.fetch("(。◕ ∀ ◕。)"), | |
| 1032 | + the_4: d.fetch("⁰⁴⁵₀₁₂"), | |
| 1033 | + the_5: d.fetch("❤️ \u{1f494} \u{1f48c} \u{1f495} \u{1f49e} \u{1f493} \u{1f497} \u{1f496} \u{1f498} \u{1f49d} \u{1f49f} \u{1f49c} \u{1f49b} \u{1f49a} \u{1f499}"), | |
| 1034 | + the_6: d.fetch("\u{1d54b}\u{1d559}\u{1d556} \u{1d562}\u{1d566}\u{1d55a}\u{1d554}\u{1d55c} \u{1d553}\u{1d563}\u{1d560}\u{1d568}\u{1d55f} \u{1d557}\u{1d560}\u{1d569} \u{1d55b}\u{1d566}\u{1d55e}\u{1d561}\u{1d564} \u{1d560}\u{1d567}\u{1d556}\u{1d563} \u{1d565}\u{1d559}\u{1d556} \u{1d55d}\u{1d552}\u{1d56b}\u{1d56a} \u{1d555}\u{1d560}\u{1d558}"), | |
| 1035 | + the_7: d.fetch("\u{1f60d}"), | |
| 1036 | + the_next_line_may_appear_to_be_blank_mojibake_or_dingbats_in_some_viewers: d.fetch("# The next line may appear to be blank, mojibake, or dingbats in some viewers."), | |
| 1037 | + the_next_line_may_appear_to_be_blank_or_mojibake_in_some_viewers: d.fetch("# The next line may appear to be blank or mojibake in some viewers."), | |
| 1038 | + the_next_line_may_be_flagged_for_trailing_whitespace_in_some_viewers: d.fetch("# The next line may be flagged for \"trailing whitespace\" in some viewers."), | |
| 1039 | + the_123: d.fetch("123"), | |
| 1040 | + this_file_unfortunately_cannot_express_strings_containing: d.fetch("# This file unfortunately cannot express strings containing"), | |
| 1041 | + touch_tmp_blns_fail: d.fetch("$(touch /tmp/blns.fail)"), | |
| 1042 | + touch_tmp_blns_shellshock2_fail: d.fetch("() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }"), | |
| 1043 | + tyson_gay: d.fetch("Tyson Gay"), | |
| 1044 | + unicode_symbols: d.fetch("#\tUnicode Symbols"), | |
| 1045 | + x00_script_javascript_alert_1_script: d.fetch("'`\"><\\x00script>javascript:alert(1)</script>"), | |
| 1046 | + x3_cscript_javascript_alert_1_script: d.fetch("'`\"><\\x3Cscript>javascript:alert(1)</script>"), | |
| 1047 | + åß_ƒ_æ: d.fetch("åß∂ƒ©˙∆˚¬…æ"), | |
| 1048 | + ɐnbᴉlɐ_ɐuƃɐɯ_ǝɹolop_ʇǝ_ǝɹoqɐl_ʇn_ʇunpᴉpᴉɔuᴉ_ɹodɯǝʇ_poɯsnᴉǝ_op_pǝs_ʇᴉlǝ_ƃuᴉɔsᴉdᴉpɐ_ɹnʇǝʇɔǝsuoɔ_ʇǝɯɐ_ʇᴉs_ɹolop_ɯnsdᴉ_ɯǝɹo: d.fetch("˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥"), | |
| 1049 | + ω_ç_µ: d.fetch("Ω≈ç√∫˜µ≤≥÷"), | |
| 1050 | + ຈل͜ຈノຈل͜ຈノ: d.fetch("ヽ༼ຈل͜ຈ༽ノ ヽ༼ຈل͜ຈ༽ノ"), | |
| 1051 | + ṱ_o_i_n_v_o_kè_t_h_e_h_i_v_e_m_i_n_d_r_e_p_r_e_s_e_ǹ_t_i_n_g_c_h_a_o_s: d.fetch("Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣"), | |
| 1052 | + 社會科學院語學研究所: d.fetch("社會科學院語學研究所"), | |
| 1053 | + 部落格: d.fetch("部落格"), | |
| 1054 | + 사회과학원어학연구소: d.fetch("사회과학원 어학연구소"), | |
| 1055 | + 찦차를타고온펲시맨과쑛다리똠방각하: d.fetch("찦차를 타고 온 펲시맨과 쑛다리 똠방각하"), | |
| 1056 | + ﷺ: d.fetch("ﷺ"), | |
| 1057 | + ロ_: d.fetch("__ロ(,_,*)"), | |
| 1058 | + ) | |
| 1059 | + end | |
| 1060 | + | |
| 1061 | + def self.from_json!(json) | |
| 1062 | + from_dynamic!(JSON.parse(json)) | |
| 1063 | + end | |
| 1064 | + | |
| 1065 | + def to_dynamic | |
| 1066 | + { | |
| 1067 | + "<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x onerror=javascript:alert(1)></a>\">" => a_href_http_foo_bar_x_y_a_img_alt_img_src_x_x_onerror_javascript_alert_1_a, | |
| 1068 | + "<a href=\"javascript\\x00:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_javascript_x00_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1069 | + "<a href=\"javascript\\x0D:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_javascript_x0_d_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1070 | + "<a href=\"\\x02javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x02_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1071 | + "<a href=\"\\x04javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x04_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1072 | + "<a href=\"\\x0Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x0_ajavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1073 | + "<a href=\"\\x0Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x0_djavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1074 | + "<a href=\"\\x0Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x0_ejavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1075 | + "<a href=\"\\x0Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x0_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1076 | + "<a href=\"\\x16javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x16_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1077 | + "<a href=\"\\x19javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x19_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1078 | + "<a href=\"\\x1Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x1_ajavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1079 | + "<a href=\"\\x1Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x1_djavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1080 | + "<a href=\"\\x1Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x1_ejavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1081 | + "<a href=\"\\xE2\\x80\\x81javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x81_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1082 | + "<a href=\"\\xE2\\x80\\x82javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x82_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1083 | + "<a href=\"\\xE2\\x80\\xA9javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x_a9_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1084 | + "<a href=\"\\xE2\\x80\\xAFjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x_a_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1085 | + "ABC<div style=\"x:expression\\x5C(javascript:alert(1)\">DEF" => abc_div_style_x_expression_x5_c_javascript_alert_1_def, | |
| 1086 | + "ABC<div style=\"x:\\x0Aexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x0_aexpression_javascript_alert_1_def, | |
| 1087 | + "ABC<div style=\"x:\\x0Dexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x0_dexpression_javascript_alert_1_def, | |
| 1088 | + "ABC<div style=\"x:\\xE2\\x80\\x82expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x82_expression_javascript_alert_1_def, | |
| 1089 | + "ABC<div style=\"x:\\xE2\\x80\\x83expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x83_expression_javascript_alert_1_def, | |
| 1090 | + "ABC<div style=\"x:\\xE2\\x80\\x85expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x85_expression_javascript_alert_1_def, | |
| 1091 | + "ABC<div style=\"x:\\xE2\\x80\\x87expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x87_expression_javascript_alert_1_def, | |
| 1092 | + "ABC<div style=\"x:\\xE2\\x80\\x8Aexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x8_aexpression_javascript_alert_1_def, | |
| 1093 | + "# appear in input." => appear_in_input, | |
| 1094 | + "+++ATH0" => ath0, | |
| 1095 | + "' autofocus onkeyup='javascript:alert(123)" => autofocus_onkeyup_javascript_alert_123, | |
| 1096 | + "\t\u{b}\u{c} \u{85} \u{200b}\u{2028}\u{2029} " => b, | |
| 1097 | + "1'000.00" => b_100000, | |
| 1098 | + "FALSE" => b_false, | |
| 1099 | + "<IMG SRC=# onmouseover=\"alert('xxs')\">" => b_img_src_onmouseover_alert_xxs, | |
| 1100 | + "NIL" => b_nil, | |
| 1101 | + "--><script>alert(123)</script>" => b_script_alert_123_script, | |
| 1102 | + "`touch /tmp/blns.fail`" => b_touch_tmp_blns_fail, | |
| 1103 | + "basement" => basement, | |
| 1104 | + "But now...\u{1b}[20Cfor my greatest trick...\u{1b}[8m" => but_now_20_cfor_my_greatest_trick_8_m, | |
| 1105 | + "# \"Byte order marks\", U+FEFF and U+FFFE, each on its own line." => byte_order_marks_u_feff_and_u_fffe_each_on_its_own_line, | |
| 1106 | + "COM1" => com1, | |
| 1107 | + "COM3" => com3, | |
| 1108 | + "# Commonly misinterpreted as additional graphic characters." => commonly_misinterpreted_as_additional_graphic_characters, | |
| 1109 | + "CON" => con, | |
| 1110 | + "# contexts. Divided into three groups based on (US-layout) keyboard position." => contexts_divided_into_three_groups_based_on_us_layout_keyboard_position, | |
| 1111 | + "#\tCredit: https://twitter.com/jifa/status/625776454479970304" => credit_https_twitter_com_jifa_status_625776454479970304, | |
| 1112 | + "/dev/null; touch /tmp/blns.fail ; echo" => dev_null_touch_tmp_blns_fail_echo, | |
| 1113 | + "dontMakeAMap" => dont_make_a_map, | |
| 1114 | + "\u{1}\u{2}\u{3}\u{4}\u{5}\u{6}\u{7}\u{8}\u{e}\u{f}\u{10}\u{11}\u{12}\u{13}\u{14}\u{15}\u{16}\u{17}\u{18}\u{19}\u{1a}\u{1b}\u{1c}\u{1d}\u{1e}\u{1f}\u{7f}" => empty, | |
| 1115 | + "eval(\"puts 'hello world'\")" => eval_puts_hello_world, | |
| 1116 | + "expression" => expression, | |
| 1117 | + "File:///" => file, | |
| 1118 | + "#\tFile Inclusion" => file_inclusion, | |
| 1119 | + "<foo val=”bar“ />" => foo_val_bar, | |
| 1120 | + "# general category Cf (in Unicode 8.0.0)." => general_category_cf_in_unicode_800, | |
| 1121 | + "̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕" => h_e_w_h_o_w_a_į_t_s_b_e_h_i_n_d_t_h_e_w_a_l_ḽ, | |
| 1122 | + "--help" => help, | |
| 1123 | + "http://a/%%30%30" => http_a_3030, | |
| 1124 | + "#\tiOS Vulnerabilities" => i_os_vulnerabilities, | |
| 1125 | + "If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you." => if_you_re_reading_this_you_ve_been_in_a_coma_for_almost_20_years_now_we_re_trying_a_new_technique_we_don_t_know_where_this_message_will_end_up_in_your_dream_but_we_hope_it_works_please_wake_up_we_miss_you, | |
| 1126 | + "<iframe src=http://ha.ckers.org/scriptlet.html <" => iframe_src_http_ha_ckers_org_scriptlet_html, | |
| 1127 | + "<IMG SRC=javascript:alert('XSS')>" => img_src_00001060000097000011800000970000115000009900001140000105000011200001160000058000009700001080000101000011400001160000040000003900000880000083000008300000390000041, | |
| 1128 | + "<IMG SRC=\"  javascript:alert('XSS');\">" => img_src_14_javascript_alert_xss, | |
| 1129 | + "<IMG SRC=\"jav	ascript:alert('XSS');\">" => img_src_jav_x09_ascript_alert_xss, | |
| 1130 | + "<IMG SRC= onmouseover=\"alert('xxs')\">" => img_src_onmouseover_alert_xxs, | |
| 1131 | + "<img src\\x00=x onerror=\"javascript:alert(1)\">" => img_src_x00_x_onerror_javascript_alert_1, | |
| 1132 | + "<IMG SRC=javascript:alert('XSS')>" => img_src_x6_a_x61_x76_x61_x73_x63_x72_x69_x70_x74_x3_a_x61_x6_c_x65_x72_x74_x28_x27_x58_x53_x53_x27_x29, | |
| 1133 | + "<img src=x onerror=\\x11\"javascript:alert(1)\">" => img_src_x_onerror_x11_javascript_alert_1, | |
| 1134 | + "<img src=x onerror=\\x12\"javascript:alert(1)\">" => img_src_x_onerror_x12_javascript_alert_1, | |
| 1135 | + "`\"'><img src=xxx:x \\x0Aonerror=javascript:alert(1)>" => img_src_xxx_x_x0_aonerror_javascript_alert_1, | |
| 1136 | + "`\"'><img src=xxx:x \\x0Conerror=javascript:alert(1)>" => img_src_xxx_x_x0_conerror_javascript_alert_1, | |
| 1137 | + "`\"'><img src=xxx:x \\x0Donerror=javascript:alert(1)>" => img_src_xxx_x_x0_donerror_javascript_alert_1, | |
| 1138 | + "<img \\x00src=x onerror=\"javascript:alert(1)\">" => img_x00_src_x_onerror_javascript_alert_1, | |
| 1139 | + "<img \\x11src=x onerror=\"javascript:alert(1)\">" => img_x11_src_x_onerror_javascript_alert_1, | |
| 1140 | + "<img \\x12src=x onerror=\"javascript:alert(1)\">" => img_x12_src_x_onerror_javascript_alert_1, | |
| 1141 | + "<img \\x47src=x onerror=\"javascript:alert(1)\">" => img_x47_src_x_onerror_javascript_alert_1, | |
| 1142 | + "# IRC specific strings" => irc_specific_strings, | |
| 1143 | + "#\tJapanese Emoticons" => japanese_emoticons, | |
| 1144 | + "Kernel.exec(\"ls -al /\")" => kernel_exec_ls_al, | |
| 1145 | + "Linda Callahan" => linda_callahan, | |
| 1146 | + "NUL" => nul, | |
| 1147 | + "null" => null, | |
| 1148 | + "#\tNumeric Strings" => numeric_strings, | |
| 1149 | + "# Often forbidden to appear in various text-based file formats (e.g. XML)," => often_forbidden_to_appear_in_various_text_based_file_formats_e_g_xml, | |
| 1150 | + "\" onfocus=JaVaSCript:alert(123) autofocus" => onfocus_ja_va_s_cript_alert_123_autofocus, | |
| 1151 | + "' OR 1=1 -- 1" => or_111, | |
| 1152 | + "#\tQuotation Marks" => quotation_marks, | |
| 1153 | + "# Regional Indicator Symbols" => regional_indicator_symbols, | |
| 1154 | + "# Regional Indicator Symbols can be displayed differently across" => regional_indicator_symbols_can_be_displayed_differently_across, | |
| 1155 | + "#\tReserved Strings" => reserved_strings, | |
| 1156 | + "\"><script>alert(123)</script>" => script_alert_123_script, | |
| 1157 | + "<script>alert(123)</script>" => script_alert_123_script_1, | |
| 1158 | + "><script>alert(123);</script x=" => script_alert_123_script_x, | |
| 1159 | + "<<SCRIPT>alert(\"XSS\");//<</SCRIPT>" => script_alert_xss_script, | |
| 1160 | + "<SCRIPT SRC=//ha.ckers.org/.j>" => script_src_ha_ckers_org_j, | |
| 1161 | + "<script src=\"\\\\%(jscript)s\"></script>" => script_src_jscript_s_script, | |
| 1162 | + "\"`'><script>\\x09javascript:alert(1)</script>" => script_x09_javascript_alert_1_script, | |
| 1163 | + "<script\\x0Atype=\"text/javascript\">javascript:alert(1);</script>" => script_x0_atype_text_javascript_javascript_alert_1_script, | |
| 1164 | + "<script\\x0Dtype=\"text/javascript\">javascript:alert(1);</script>" => script_x0_dtype_text_javascript_javascript_alert_1_script, | |
| 1165 | + "\"`'><script>\\x21javascript:alert(1)</script>" => script_x21_javascript_alert_1_script, | |
| 1166 | + "\"`'><script>\\x3Bjavascript:alert(1)</script>" => script_x3_bjavascript_alert_1_script, | |
| 1167 | + "\"`'><script>\\xE2\\x80\\x85javascript:alert(1)</script>" => script_x_e2_x80_x85_javascript_alert_1_script, | |
| 1168 | + "\"`'><script>\\xE2\\x80\\x87javascript:alert(1)</script>" => script_x_e2_x80_x87_javascript_alert_1_script, | |
| 1169 | + "\"`'><script>\\xE2\\x80\\x8Ajavascript:alert(1)</script>" => script_x_e2_x80_x8_ajavascript_alert_1_script, | |
| 1170 | + "\"`'><script>\\xE2\\x80\\xA8javascript:alert(1)</script>" => script_x_e2_x80_x_a8_javascript_alert_1_script, | |
| 1171 | + "\"`'><script>\\xE2\\x80\\xA9javascript:alert(1)</script>" => script_x_e2_x80_x_a9_javascript_alert_1_script, | |
| 1172 | + "\"`'><script>\\xE2\\x80\\xAFjavascript:alert(1)</script>" => script_x_e2_x80_x_a_fjavascript_alert_1_script, | |
| 1173 | + "\"`'><script>\\xE3\\x80\\x80javascript:alert(1)</script>" => script_x_e3_x80_x80_javascript_alert_1_script, | |
| 1174 | + "#\tScunthorpe Problem" => scunthorpe_problem, | |
| 1175 | + "# Strings that may occur on IRC clients that make security products freak out" => strings_that_may_occur_on_irc_clients_that_make_security_products_freak_out, | |
| 1176 | + "#\tStrings which are reserved characters in MSDOS/Windows" => strings_which_are_reserved_characters_in_msdos_windows, | |
| 1177 | + "#\tStrings which attempt to invoke a benign script injection; shows vulnerability to XSS" => strings_which_attempt_to_invoke_a_benign_script_injection_shows_vulnerability_to_xss, | |
| 1178 | + "#\tStrings which contain text that should be rendered RTL if possible (e.g. Arabic, Hebrew)" => strings_which_contain_text_that_should_be_rendered_rtl_if_possible_e_g_arabic_hebrew, | |
| 1179 | + "#\tStrings which contain two-byte characters: can cause rendering issues or character-length issues" => strings_which_contain_two_byte_characters_can_cause_rendering_issues_or_character_length_issues, | |
| 1180 | + "#\tStrings which contain unicode numbers; if the code is localized, it should see the input as numeric" => strings_which_contain_unicode_numbers_if_the_code_is_localized_it_should_see_the_input_as_numeric, | |
| 1181 | + "#\tStrings which may be used elsewhere in code" => strings_which_may_be_used_elsewhere_in_code, | |
| 1182 | + "#\tTerminal escape codes" => terminal_escape_codes, | |
| 1183 | + "0.00" => the_000, | |
| 1184 | + "01000" => the_01000, | |
| 1185 | + "08" => the_08, | |
| 1186 | + "09" => the_09, | |
| 1187 | + "0xffffffffffffffff" => the_0_xffffffffffffffff, | |
| 1188 | + "\"" => the_1, | |
| 1189 | + "$1.00" => the_100, | |
| 1190 | + "1,0/0,0" => the_1000, | |
| 1191 | + "1 000.00" => the_100000, | |
| 1192 | + "1 000 000,00" => the_100000000, | |
| 1193 | + "1'; DROP TABLE users-- 1" => the_1_drop_table_users_1, | |
| 1194 | + "1#IND" => the_1_ind, | |
| 1195 | + "1#INF" => the_1_inf, | |
| 1196 | + "#" => the_2, | |
| 1197 | + "-2147483648/-1" => the_21474836481, | |
| 1198 | + "2.2250738585072011e-308" => the_22250738585072011_e_308, | |
| 1199 | + "(。◕ ∀ ◕。)" => the_3, | |
| 1200 | + "⁰⁴⁵₀₁₂" => the_4, | |
| 1201 | + "❤️ \u{1f494} \u{1f48c} \u{1f495} \u{1f49e} \u{1f493} \u{1f497} \u{1f496} \u{1f498} \u{1f49d} \u{1f49f} \u{1f49c} \u{1f49b} \u{1f49a} \u{1f499}" => the_5, | |
| 1202 | + "\u{1d54b}\u{1d559}\u{1d556} \u{1d562}\u{1d566}\u{1d55a}\u{1d554}\u{1d55c} \u{1d553}\u{1d563}\u{1d560}\u{1d568}\u{1d55f} \u{1d557}\u{1d560}\u{1d569} \u{1d55b}\u{1d566}\u{1d55e}\u{1d561}\u{1d564} \u{1d560}\u{1d567}\u{1d556}\u{1d563} \u{1d565}\u{1d559}\u{1d556} \u{1d55d}\u{1d552}\u{1d56b}\u{1d56a} \u{1d555}\u{1d560}\u{1d558}" => the_6, | |
| 1203 | + "\u{1f60d}" => the_7, | |
| 1204 | + "# The next line may appear to be blank, mojibake, or dingbats in some viewers." => the_next_line_may_appear_to_be_blank_mojibake_or_dingbats_in_some_viewers, | |
| 1205 | + "# The next line may appear to be blank or mojibake in some viewers." => the_next_line_may_appear_to_be_blank_or_mojibake_in_some_viewers, | |
| 1206 | + "# The next line may be flagged for \"trailing whitespace\" in some viewers." => the_next_line_may_be_flagged_for_trailing_whitespace_in_some_viewers, | |
| 1207 | + "123" => the_123, | |
| 1208 | + "# This file unfortunately cannot express strings containing" => this_file_unfortunately_cannot_express_strings_containing, | |
| 1209 | + "$(touch /tmp/blns.fail)" => touch_tmp_blns_fail, | |
| 1210 | + "() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }" => touch_tmp_blns_shellshock2_fail, | |
| 1211 | + "Tyson Gay" => tyson_gay, | |
| 1212 | + "#\tUnicode Symbols" => unicode_symbols, | |
| 1213 | + "'`\"><\\x00script>javascript:alert(1)</script>" => x00_script_javascript_alert_1_script, | |
| 1214 | + "'`\"><\\x3Cscript>javascript:alert(1)</script>" => x3_cscript_javascript_alert_1_script, | |
| 1215 | + "åß∂ƒ©˙∆˚¬…æ" => åß_ƒ_æ, | |
| 1216 | + "˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥" => ɐnbᴉlɐ_ɐuƃɐɯ_ǝɹolop_ʇǝ_ǝɹoqɐl_ʇn_ʇunpᴉpᴉɔuᴉ_ɹodɯǝʇ_poɯsnᴉǝ_op_pǝs_ʇᴉlǝ_ƃuᴉɔsᴉdᴉpɐ_ɹnʇǝʇɔǝsuoɔ_ʇǝɯɐ_ʇᴉs_ɹolop_ɯnsdᴉ_ɯǝɹo, | |
| 1217 | + "Ω≈ç√∫˜µ≤≥÷" => ω_ç_µ, | |
| 1218 | + "ヽ༼ຈل͜ຈ༽ノ ヽ༼ຈل͜ຈ༽ノ" => ຈل͜ຈノຈل͜ຈノ, | |
| 1219 | + "Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣" => ṱ_o_i_n_v_o_kè_t_h_e_h_i_v_e_m_i_n_d_r_e_p_r_e_s_e_ǹ_t_i_n_g_c_h_a_o_s, | |
| 1220 | + "社會科學院語學研究所" => 社會科學院語學研究所, | |
| 1221 | + "部落格" => 部落格, | |
| 1222 | + "사회과학원 어학연구소" => 사회과학원어학연구소, | |
| 1223 | + "찦차를 타고 온 펲시맨과 쑛다리 똠방각하" => 찦차를타고온펲시맨과쑛다리똠방각하, | |
| 1224 | + "ﷺ" => ﷺ, | |
| 1225 | + "__ロ(,_,*)" => ロ_, | |
| 1226 | + } | |
| 1227 | + end | |
| 1228 | + | |
| 1229 | + def to_json(options = nil) | |
| 1230 | + JSON.generate(to_dynamic, options) | |
| 1231 | + end | |
| 1232 | +end | |
| 1233 | + | |
| 1234 | +class C < Dry::Struct | |
| 1235 | + attribute :_10, Types::String | |
| 1236 | + attribute :a, Types::String | |
| 1237 | + attribute :a_href_x00_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1238 | + attribute :a_href_x03_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1239 | + attribute :a_href_x06_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1240 | + attribute :a_href_x07_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1241 | + attribute :a_href_x0_bjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1242 | + attribute :a_href_x12_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1243 | + attribute :a_href_x14_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1244 | + attribute :a_href_x15_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1245 | + attribute :a_href_x18_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1246 | + attribute :a_href_x1_bjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1247 | + attribute :a_href_x1_cjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1248 | + attribute :a_href_x20_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1249 | + attribute :a_href_x_e2_x80_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1250 | + attribute :a_href_x_e2_x80_x85_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1251 | + attribute :a_href_x_e2_x80_x88_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1252 | + attribute :a_href_x_e2_x80_x89_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1253 | + attribute :a_href_x_e2_x80_x8_ajavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1254 | + attribute :a_href_x_e2_x81_x9_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1255 | + attribute :a_href_x_e3_x80_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a, Types::String | |
| 1256 | + attribute :abc_div_style_x_expression_x00_javascript_alert_1_def, Types::String | |
| 1257 | + attribute :abc_div_style_x_x00_expression_javascript_alert_1_def, Types::String | |
| 1258 | + attribute :abc_div_style_x_x0_cexpression_javascript_alert_1_def, Types::String | |
| 1259 | + attribute :abc_div_style_x_x_e2_x80_x81_expression_javascript_alert_1_def, Types::String | |
| 1260 | + attribute :abc_div_style_x_x_e2_x80_x86_expression_javascript_alert_1_def, Types::String | |
| 1261 | + attribute :abc_div_style_x_x_e2_x80_x88_expression_javascript_alert_1_def, Types::String | |
| 1262 | + attribute :abc_div_style_x_x_e3_x80_x80_expression_javascript_alert_1_def, Types::String | |
| 1263 | + attribute :abc_div_style_x_x_ef_x_bb_x_b_fexpression_javascript_alert_1_def, Types::String | |
| 1264 | + attribute :and_u_007_f_del, Types::String | |
| 1265 | + attribute :ascii_punctuation_all_of_these_characters_may_need_to_be_escaped_in_some, Types::String | |
| 1266 | + attribute :body_onload_alert_xss, Types::String | |
| 1267 | + attribute :c, Types::String | |
| 1268 | + attribute :c_00, Types::String | |
| 1269 | + attribute :c_000, Types::String | |
| 1270 | + attribute :c_1, Types::String | |
| 1271 | + attribute :c_100, Types::String | |
| 1272 | + attribute :c_100000, Types::String | |
| 1273 | + attribute :c_100000000, Types::String | |
| 1274 | + attribute :c_1_e_02, Types::String | |
| 1275 | + attribute :c_script_alert_123_script, Types::String | |
| 1276 | + attribute :c_test, Types::String | |
| 1277 | + attribute :c_true, Types::String | |
| 1278 | + attribute :clock, Types::String | |
| 1279 | + attribute :com2, Types::String | |
| 1280 | + attribute :com4, Types::String | |
| 1281 | + attribute :craig_cockburn_software_specialist, Types::String | |
| 1282 | + attribute :dcc_send_startkeylogger_000, Types::String | |
| 1283 | + attribute :dont_make_a_map, Types::Bool | |
| 1284 | + attribute :emoji, Types::String | |
| 1285 | + attribute :empty, Types::String | |
| 1286 | + attribute :evaluate, Types::String | |
| 1287 | + attribute :foo_val_bar, Types::String | |
| 1288 | + attribute :has_own_property, Types::String | |
| 1289 | + attribute :horniman_museum, Types::String | |
| 1290 | + attribute :http_www_cum_qc_ca, Types::String | |
| 1291 | + attribute :i_onwheel_alert_1_scroll_over_me_i, Types::String | |
| 1292 | + attribute :img_a_b_c_src_d_x_e_onerror_f_alert_1, Types::String | |
| 1293 | + attribute :img_onmouseover_alert_xxs, Types::String | |
| 1294 | + attribute :img_script_alert_xss_script, Types::String | |
| 1295 | + attribute :img_src_javascript_alert_string_from_char_code_888383, Types::String | |
| 1296 | + attribute :img_src_javascript_alert_xss, Types::String | |
| 1297 | + attribute :img_src_onerror_alt_javascript_alert_1, Types::String | |
| 1298 | + attribute :img_src_x10_x_onerror_javascript_alert_1, Types::String | |
| 1299 | + attribute :img_src_x12_x_onerror_javascript_alert_1, Types::String | |
| 1300 | + attribute :img_src_x13_x_onerror_javascript_alert_1, Types::String | |
| 1301 | + attribute :img_src_x32_x_onerror_javascript_alert_1, Types::String | |
| 1302 | + attribute :img_src_x47_x_onerror_javascript_alert_1, Types::String | |
| 1303 | + attribute :img_src_x_onerror_alert_123, Types::String | |
| 1304 | + attribute :img_src_x_onerror_x10_javascript_alert_1, Types::String | |
| 1305 | + attribute :img_src_x_onerror_x32_javascript_alert_1, Types::String | |
| 1306 | + attribute :img_src_x_script_javascript_alert_1_script, Types::String | |
| 1307 | + attribute :img_src_xxx_x_x09_onerror_javascript_alert_1, Types::String | |
| 1308 | + attribute :img_src_xxx_x_x20_onerror_javascript_alert_1, Types::String | |
| 1309 | + attribute :img_src_xxx_x_x22_onerror_javascript_alert_1, Types::String | |
| 1310 | + attribute :img_src_xxx_x_x27_onerror_javascript_alert_1, Types::String | |
| 1311 | + attribute :img_x11_src_x_onerror_javascript_alert_1, Types::String | |
| 1312 | + attribute :img_x34_src_x_onerror_javascript_alert_1, Types::String | |
| 1313 | + attribute :img_x47_src_x_onerror_javascript_alert_1, Types::String | |
| 1314 | + attribute :infinity, Types::String | |
| 1315 | + attribute :java_s_cript_alert_123, Types::String | |
| 1316 | + attribute :lpt1, Types::String | |
| 1317 | + attribute :lt_script_gt_alert_3912339_lt_script_gt, Types::String | |
| 1318 | + attribute :magna_cum_laude, Types::String | |
| 1319 | + attribute :medieval_erection_of_parapets, Types::String | |
| 1320 | + attribute :mocha, Types::String | |
| 1321 | + attribute :na_n, Types::String | |
| 1322 | + attribute :non_whitespace_c0_controls_u_0001_through_u_0008_u_000_e_through_u_001_f, Types::String | |
| 1323 | + attribute :null, Types::String | |
| 1324 | + attribute :onfocus_ja_va_s_cript_alert_123_autofocus, Types::String | |
| 1325 | + attribute :or_reused_for_internal_delimiters_on_the_theory_that_they_should_never, Types::String | |
| 1326 | + attribute :plaintext, Types::String | |
| 1327 | + attribute :power_لُلُصّبُلُلصّبُررًॣॣ_h_冗, Types::String | |
| 1328 | + attribute :right_to_left_strings, Types::String | |
| 1329 | + attribute :roses_are_031_mred_0_m_violets_are_034_mblue_hope_you_enjoy_terminal_hue, Types::String | |
| 1330 | + attribute :s, Types::String | |
| 1331 | + attribute :script_alert_123_script, Types::String | |
| 1332 | + attribute :script_alert_123_script_1, Types::String | |
| 1333 | + attribute :script_alert_123_script_x, Types::String | |
| 1334 | + attribute :script_javascript_alert_1_script, Types::String | |
| 1335 | + attribute :script_script_alert_123_script, Types::String | |
| 1336 | + attribute :script_src_jscript_s_script, Types::String | |
| 1337 | + attribute :script_x0_ajavascript_alert_1_script, Types::String | |
| 1338 | + attribute :script_x0_bjavascript_alert_1_script, Types::String | |
| 1339 | + attribute :script_x0_ctype_text_javascript_javascript_alert_1_script, Types::String | |
| 1340 | + attribute :script_x20_javascript_alert_1_script, Types::String | |
| 1341 | + attribute :script_x2_bjavascript_alert_1_script, Types::String | |
| 1342 | + attribute :script_x2_ftype_text_javascript_javascript_alert_1_script, Types::String | |
| 1343 | + attribute :script_x7_ejavascript_alert_1_script, Types::String | |
| 1344 | + attribute :script_x_e2_x80_x80_javascript_alert_1_script, Types::String | |
| 1345 | + attribute :script_x_e2_x80_x82_javascript_alert_1_script, Types::String | |
| 1346 | + attribute :script_x_e2_x80_x83_javascript_alert_1_script, Types::String | |
| 1347 | + attribute :script_x_e2_x80_x84_javascript_alert_1_script, Types::String | |
| 1348 | + attribute :script_x_e2_x80_x88_javascript_alert_1_script, Types::String | |
| 1349 | + attribute :script_x_e2_x80_x8_bjavascript_alert_1_script, Types::String | |
| 1350 | + attribute :script_x_ef_x_bf_x_a_ejavascript_alert_1_script, Types::String | |
| 1351 | + attribute :script_x_ef_x_bf_x_b_ejavascript_alert_1_script, Types::String | |
| 1352 | + attribute :scunthorpe_general_hospital, Types::String | |
| 1353 | + attribute :server_code_injection, Types::String | |
| 1354 | + attribute :shitake_mushrooms, Types::String | |
| 1355 | + attribute :special_characters, Types::String | |
| 1356 | + attribute :src_ja_va_s_cript_prompt_132, Types::String | |
| 1357 | + attribute :strings_which_can_be_interpreted_as_numeric, Types::String | |
| 1358 | + attribute :strings_which_can_cause_a_sql_injection_if_inputs_are_not_sanitized, Types::String | |
| 1359 | + attribute :strings_which_can_cause_user_to_pull_in_files_that_should_not_be_a_part_of_a_web_server, Types::String | |
| 1360 | + attribute :strings_which_can_cause_user_to_run_code_on_server_as_a_privileged_user_c_f_https_news_ycombinator_com_item_id_7665153, Types::String | |
| 1361 | + attribute :strings_which_contain_corrupted_text_the_corruption_will_not_appear_in_non_html_text_however_via_http_www_eeemo_net, Types::String | |
| 1362 | + attribute :strings_which_contain_unicode_with_an_upsidedown_effect_via_http_www_upsidedowntext_com, Types::String | |
| 1363 | + attribute :strings_which_contain_unicode_with_unusual_properties_e_g_right_to_left_override_c_f_http_www_unicode_org_charts_pdf_u2000_pdf, Types::String | |
| 1364 | + attribute :strings_which_punish_the_fools_who_use_cat_type_on_this_file, Types::String | |
| 1365 | + attribute :svg_script_1231_alert_123_script, Types::String | |
| 1366 | + attribute :system_ls_al, Types::String | |
| 1367 | + attribute :system_touch_tmp_blns_fail, Types::String | |
| 1368 | + attribute :test_test, Types::String | |
| 1369 | + attribute :the_00, Types::String | |
| 1370 | + attribute :the_000, Types::String | |
| 1371 | + attribute :the_00_1, Types::String | |
| 1372 | + attribute :the_00_2, Types::String | |
| 1373 | + attribute :the_0_touch_tmp_blns_shellshock1_fail, Types::String | |
| 1374 | + attribute :the_0_xabad1_dea, Types::String | |
| 1375 | + attribute :the_0_xffffffff, Types::String | |
| 1376 | + attribute :the_0️, Types::String | |
| 1377 | + attribute :the_0️1️2️3️4️5️6️7️8️9️, Types::String | |
| 1378 | + attribute :the_1, Types::String | |
| 1379 | + attribute :the_10, Types::String | |
| 1380 | + attribute :the_100, Types::String | |
| 1381 | + attribute :the_100000, Types::String | |
| 1382 | + attribute :the_100000000, Types::String | |
| 1383 | + attribute :the_100000000_1, Types::String | |
| 1384 | + attribute :the_100000_1, Types::String | |
| 1385 | + attribute :the_11, Types::String | |
| 1386 | + attribute :the_12, Types::String | |
| 1387 | + attribute :the_13, Types::String | |
| 1388 | + attribute :the_14, Types::String | |
| 1389 | + attribute :the_15, Types::String | |
| 1390 | + attribute :the_16, Types::String | |
| 1391 | + attribute :the_17, Types::String | |
| 1392 | + attribute :the_1_e2, Types::String | |
| 1393 | + attribute :the_1_e_02, Types::String | |
| 1394 | + attribute :the_1_ind, Types::String | |
| 1395 | + attribute :the_2, Types::String | |
| 1396 | + attribute :the_3, Types::String | |
| 1397 | + attribute :the_4, Types::String | |
| 1398 | + attribute :the_5, Types::String | |
| 1399 | + attribute :the_6, Types::String | |
| 1400 | + attribute :the_7, Types::String | |
| 1401 | + attribute :the_8, Types::String | |
| 1402 | + attribute :the_9, Types::String | |
| 1403 | + attribute :the_92233720368547758081, Types::String | |
| 1404 | + attribute :the_١٢٣, Types::String | |
| 1405 | + attribute :title_onpropertychange_javascript_alert_1_title_title_title, Types::String | |
| 1406 | + attribute :treated_as_whitespace_in_some_contexts, Types::String | |
| 1407 | + attribute :trick_unicode, Types::String | |
| 1408 | + attribute :undefined, Types::String | |
| 1409 | + attribute :unicode_additional_control_characters_all_of_the_characters_with, Types::String | |
| 1410 | + attribute :unicode_subscript_superscript_accents, Types::String | |
| 1411 | + attribute :unicode_upsidedown, Types::String | |
| 1412 | + attribute :user, Types::String | |
| 1413 | + attribute :version, Types::String | |
| 1414 | + attribute :version_800_plus_u_0009_ht_u_000_b_vt_u_000_c_ff_u_0085_nel, Types::String | |
| 1415 | + attribute :whitespace_all_of_the_characters_with_category_zs_zl_or_zp_in_unicode, Types::String | |
| 1416 | + attribute :xml_version_10_encoding_iso_88591_doctype_foo_element_foo_any_entity_xxe_system_file_etc_passwd_foo_xxe_foo, Types::String | |
| 1417 | + attribute :xxe_injection_xml, Types::String | |
| 1418 | + attribute :zalgo_text, Types::String | |
| 1419 | + attribute :zz, Types::String | |
| 1420 | + attribute :åíîï_óô_òúæ, Types::String | |
| 1421 | + attribute :ω, Types::String | |
| 1422 | + attribute :ёђѓєѕіїјљњћќѝўџабвгдежзийклмнопрстуфхцчшщъыьэю_яабвгдежзийклмнопрстуфхцчшщъыьэюя, Types::String | |
| 1423 | + attribute :בְּרֵאשִׁיתבָּרָאאֱלֹהִיםאֵתהַשָּׁמַיִםוְאֵתהָאָרֶץ, Types::String | |
| 1424 | + attribute :مُنَاقَشَةُسُبُلِاِسْتِخْدَامِاللُّغَةِفِيالنُّظُمِالْقَائِمَةِوَفِيميَخُصَّالتَّطْبِيقَاتُالْحاسُوبِيَّةُ, Types::String | |
| 1425 | + attribute :ṯ_h_e_n_e_z_p_e_r_d_i_a_n_h_i_v_ḙ_m_i_n_ḍ_ǫ_f_c_ḥ_a_ơ_s_z_a_l_g_o, Types::String | |
| 1426 | + attribute :ノº_ºノ, Types::String | |
| 1427 | + attribute :울란바토르, Types::String | |
| 1428 | + attribute :the_quick_brown_fox_jumps_over_the_lazy_dog, Types::String | |
| 1429 | + attribute :ノಥ益ಥノ, Types::String | |
| 1430 | + | |
| 1431 | + def self.from_dynamic!(d) | |
| 1432 | + d = Types::Hash[d] | |
| 1433 | + new( | |
| 1434 | + _10: d.fetch("\u{2070e}\u{20731}\u{20779}\u{20c53}\u{20c78}\u{20c96}\u{20ccf}"), | |
| 1435 | + a: d.fetch("A:"), | |
| 1436 | + a_href_x00_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x00javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1437 | + a_href_x03_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x03javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1438 | + a_href_x06_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x06javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1439 | + a_href_x07_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x07javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1440 | + a_href_x0_bjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x0Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1441 | + a_href_x12_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x12javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1442 | + a_href_x14_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x14javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1443 | + a_href_x15_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x15javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1444 | + a_href_x18_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x18javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1445 | + a_href_x1_bjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x1Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1446 | + a_href_x1_cjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x1Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1447 | + a_href_x20_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\x20javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1448 | + a_href_x_e2_x80_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1449 | + a_href_x_e2_x80_x85_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x85javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1450 | + a_href_x_e2_x80_x88_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x88javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1451 | + a_href_x_e2_x80_x89_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x89javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1452 | + a_href_x_e2_x80_x8_ajavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x80\\x8Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1453 | + a_href_x_e2_x81_x9_fjavascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE2\\x81\\x9Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1454 | + a_href_x_e3_x80_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a: d.fetch("<a href=\"\\xE3\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>"), | |
| 1455 | + abc_div_style_x_expression_x00_javascript_alert_1_def: d.fetch("ABC<div style=\"x:expression\\x00(javascript:alert(1)\">DEF"), | |
| 1456 | + abc_div_style_x_x00_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x00expression(javascript:alert(1)\">DEF"), | |
| 1457 | + abc_div_style_x_x0_cexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\x0Cexpression(javascript:alert(1)\">DEF"), | |
| 1458 | + abc_div_style_x_x_e2_x80_x81_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x81expression(javascript:alert(1)\">DEF"), | |
| 1459 | + abc_div_style_x_x_e2_x80_x86_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x86expression(javascript:alert(1)\">DEF"), | |
| 1460 | + abc_div_style_x_x_e2_x80_x88_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE2\\x80\\x88expression(javascript:alert(1)\">DEF"), | |
| 1461 | + abc_div_style_x_x_e3_x80_x80_expression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xE3\\x80\\x80expression(javascript:alert(1)\">DEF"), | |
| 1462 | + abc_div_style_x_x_ef_x_bb_x_b_fexpression_javascript_alert_1_def: d.fetch("ABC<div style=\"x:\\xEF\\xBB\\xBFexpression(javascript:alert(1)\">DEF"), | |
| 1463 | + and_u_007_f_del: d.fetch("# and U+007F (DEL)"), | |
| 1464 | + ascii_punctuation_all_of_these_characters_may_need_to_be_escaped_in_some: d.fetch("# ASCII punctuation. All of these characters may need to be escaped in some"), | |
| 1465 | + body_onload_alert_xss: d.fetch("<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>"), | |
| 1466 | + c: d.fetch("\"'\"'\"''''\""), | |
| 1467 | + c_00: d.fetch("-0.0"), | |
| 1468 | + c_000: d.fetch("0.0/0"), | |
| 1469 | + c_1: d.fetch("--1"), | |
| 1470 | + c_100: d.fetch("-1.00"), | |
| 1471 | + c_100000: d.fetch("1,000.00"), | |
| 1472 | + c_100000000: d.fetch("1,000,000.00"), | |
| 1473 | + c_1_e_02: d.fetch("1E+02"), | |
| 1474 | + c_script_alert_123_script: d.fetch("><script>alert(123)</script>"), | |
| 1475 | + c_test: d.fetch("\u{2029}test\u{2029}"), | |
| 1476 | + c_true: d.fetch("true"), | |
| 1477 | + clock: d.fetch("CLOCK$"), | |
| 1478 | + com2: d.fetch("COM2"), | |
| 1479 | + com4: d.fetch("COM4"), | |
| 1480 | + craig_cockburn_software_specialist: d.fetch("Craig Cockburn, Software Specialist"), | |
| 1481 | + dcc_send_startkeylogger_000: d.fetch("DCC SEND STARTKEYLOGGER 0 0 0"), | |
| 1482 | + dont_make_a_map: d.fetch("dontMakeAMap"), | |
| 1483 | + emoji: d.fetch("#\tEmoji"), | |
| 1484 | + empty: d.fetch("\"\""), | |
| 1485 | + evaluate: d.fetch("evaluate"), | |
| 1486 | + foo_val_bar: d.fetch("<foo val=“bar” />"), | |
| 1487 | + has_own_property: d.fetch("hasOwnProperty"), | |
| 1488 | + horniman_museum: d.fetch("Horniman Museum"), | |
| 1489 | + http_www_cum_qc_ca: d.fetch("http://www.cum.qc.ca/"), | |
| 1490 | + i_onwheel_alert_1_scroll_over_me_i: d.fetch("<i onwheel=alert(1)> Scroll over me </i>"), | |
| 1491 | + img_a_b_c_src_d_x_e_onerror_f_alert_1: d.fetch("<img[a][b][c]src[d]=x[e]onerror=[f]\"alert(1)\">"), | |
| 1492 | + img_onmouseover_alert_xxs: d.fetch("<IMG onmouseover=\"alert('xxs')\">"), | |
| 1493 | + img_script_alert_xss_script: d.fetch("<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">"), | |
| 1494 | + img_src_javascript_alert_string_from_char_code_888383: d.fetch("<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>"), | |
| 1495 | + img_src_javascript_alert_xss: d.fetch("<IMG SRC=\"javascript:alert('XSS')\""), | |
| 1496 | + img_src_onerror_alt_javascript_alert_1: d.fetch("<img src onerror /\" '\"= alt=javascript:alert(1)//\">"), | |
| 1497 | + img_src_x10_x_onerror_javascript_alert_1: d.fetch("<img src\\x10=x onerror=\"javascript:alert(1)\">"), | |
| 1498 | + img_src_x12_x_onerror_javascript_alert_1: d.fetch("<img src\\x12=x onerror=\"javascript:alert(1)\">"), | |
| 1499 | + img_src_x13_x_onerror_javascript_alert_1: d.fetch("<img src\\x13=x onerror=\"javascript:alert(1)\">"), | |
| 1500 | + img_src_x32_x_onerror_javascript_alert_1: d.fetch("<img src\\x32=x onerror=\"javascript:alert(1)\">"), | |
| 1501 | + img_src_x47_x_onerror_javascript_alert_1: d.fetch("<img src\\x47=x onerror=\"javascript:alert(1)\">"), | |
| 1502 | + img_src_x_onerror_alert_123: d.fetch("<img src=x onerror=alert(123) />"), | |
| 1503 | + img_src_x_onerror_x10_javascript_alert_1: d.fetch("<img src=x onerror=\\x10\"javascript:alert(1)\">"), | |
| 1504 | + img_src_x_onerror_x32_javascript_alert_1: d.fetch("<img src=x onerror=\\x32\"javascript:alert(1)\">"), | |
| 1505 | + img_src_x_script_javascript_alert_1_script: d.fetch("<img src=\"x` `<script>javascript:alert(1)</script>\"` `>"), | |
| 1506 | + img_src_xxx_x_x09_onerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x09onerror=javascript:alert(1)>"), | |
| 1507 | + img_src_xxx_x_x20_onerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x20onerror=javascript:alert(1)>"), | |
| 1508 | + img_src_xxx_x_x22_onerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x22onerror=javascript:alert(1)>"), | |
| 1509 | + img_src_xxx_x_x27_onerror_javascript_alert_1: d.fetch("`\"'><img src=xxx:x \\x27onerror=javascript:alert(1)>"), | |
| 1510 | + img_x11_src_x_onerror_javascript_alert_1: d.fetch("<img\\x11src=x onerror=\"javascript:alert(1)\">"), | |
| 1511 | + img_x34_src_x_onerror_javascript_alert_1: d.fetch("<img \\x34src=x onerror=\"javascript:alert(1)\">"), | |
| 1512 | + img_x47_src_x_onerror_javascript_alert_1: d.fetch("<img\\x47src=x onerror=\"javascript:alert(1)\">"), | |
| 1513 | + infinity: d.fetch("Infinity"), | |
| 1514 | + java_s_cript_alert_123: d.fetch("JavaSCript:alert(123)"), | |
| 1515 | + lpt1: d.fetch("LPT1"), | |
| 1516 | + lt_script_gt_alert_3912339_lt_script_gt: d.fetch("<script>alert('123');</script>"), | |
| 1517 | + magna_cum_laude: d.fetch("magna cum laude"), | |
| 1518 | + medieval_erection_of_parapets: d.fetch("medieval erection of parapets"), | |
| 1519 | + mocha: d.fetch("mocha"), | |
| 1520 | + na_n: d.fetch("NaN"), | |
| 1521 | + non_whitespace_c0_controls_u_0001_through_u_0008_u_000_e_through_u_001_f: d.fetch("# Non-whitespace C0 controls: U+0001 through U+0008, U+000E through U+001F,"), | |
| 1522 | + null: d.fetch("NULL"), | |
| 1523 | + onfocus_ja_va_s_cript_alert_123_autofocus: d.fetch("' onfocus=JaVaSCript:alert(123) autofocus"), | |
| 1524 | + or_reused_for_internal_delimiters_on_the_theory_that_they_should_never: d.fetch("# or reused for internal delimiters on the theory that they should never"), | |
| 1525 | + plaintext: d.fetch("<plaintext>"), | |
| 1526 | + power_لُلُصّبُلُلصّبُررًॣॣ_h_冗: d.fetch("Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗"), | |
| 1527 | + right_to_left_strings: d.fetch("#\tRight-To-Left Strings"), | |
| 1528 | + roses_are_031_mred_0_m_violets_are_034_mblue_hope_you_enjoy_terminal_hue: d.fetch("Roses are \u{1b}[0;31mred\u{1b}[0m, violets are \u{1b}[0;34mblue. Hope you enjoy terminal hue"), | |
| 1529 | + s: d.fetch("%*.*s"), | |
| 1530 | + script_alert_123_script: d.fetch("'><script>alert(123)</script>"), | |
| 1531 | + script_alert_123_script_1: d.fetch("<script>alert(123)</script>"), | |
| 1532 | + script_alert_123_script_x: d.fetch("'><script>alert(123);</script x='"), | |
| 1533 | + script_javascript_alert_1_script: d.fetch("\"`'><script>-javascript:alert(1)</script>"), | |
| 1534 | + script_script_alert_123_script: d.fetch("< / script >< script >alert(123)< / script >"), | |
| 1535 | + script_src_jscript_s_script: d.fetch("<script src=\"/\\%(jscript)s\"></script>"), | |
| 1536 | + script_x0_ajavascript_alert_1_script: d.fetch("\"`'><script>\\x0Ajavascript:alert(1)</script>"), | |
| 1537 | + script_x0_bjavascript_alert_1_script: d.fetch("\"`'><script>\\x0Bjavascript:alert(1)</script>"), | |
| 1538 | + script_x0_ctype_text_javascript_javascript_alert_1_script: d.fetch("<script\\x0Ctype=\"text/javascript\">javascript:alert(1);</script>"), | |
| 1539 | + script_x20_javascript_alert_1_script: d.fetch("\"`'><script>\\x20javascript:alert(1)</script>"), | |
| 1540 | + script_x2_bjavascript_alert_1_script: d.fetch("\"`'><script>\\x2Bjavascript:alert(1)</script>"), | |
| 1541 | + script_x2_ftype_text_javascript_javascript_alert_1_script: d.fetch("<script\\x2Ftype=\"text/javascript\">javascript:alert(1);</script>"), | |
| 1542 | + script_x7_ejavascript_alert_1_script: d.fetch("\"`'><script>\\x7Ejavascript:alert(1)</script>"), | |
| 1543 | + script_x_e2_x80_x80_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x80javascript:alert(1)</script>"), | |
| 1544 | + script_x_e2_x80_x82_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x82javascript:alert(1)</script>"), | |
| 1545 | + script_x_e2_x80_x83_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x83javascript:alert(1)</script>"), | |
| 1546 | + script_x_e2_x80_x84_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x84javascript:alert(1)</script>"), | |
| 1547 | + script_x_e2_x80_x88_javascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x88javascript:alert(1)</script>"), | |
| 1548 | + script_x_e2_x80_x8_bjavascript_alert_1_script: d.fetch("\"`'><script>\\xE2\\x80\\x8Bjavascript:alert(1)</script>"), | |
| 1549 | + script_x_ef_x_bf_x_a_ejavascript_alert_1_script: d.fetch("\"`'><script>\\xEF\\xBF\\xAEjavascript:alert(1)</script>"), | |
| 1550 | + script_x_ef_x_bf_x_b_ejavascript_alert_1_script: d.fetch("\"`'><script>\\xEF\\xBF\\xBEjavascript:alert(1)</script>"), | |
| 1551 | + scunthorpe_general_hospital: d.fetch("Scunthorpe General Hospital"), | |
| 1552 | + server_code_injection: d.fetch("#\tServer Code Injection"), | |
| 1553 | + shitake_mushrooms: d.fetch("shitake mushrooms"), | |
| 1554 | + special_characters: d.fetch("#\tSpecial Characters"), | |
| 1555 | + src_ja_va_s_cript_prompt_132: d.fetch("src=JaVaSCript:prompt(132)"), | |
| 1556 | + strings_which_can_be_interpreted_as_numeric: d.fetch("#\tStrings which can be interpreted as numeric"), | |
| 1557 | + strings_which_can_cause_a_sql_injection_if_inputs_are_not_sanitized: d.fetch("#\tStrings which can cause a SQL injection if inputs are not sanitized"), | |
| 1558 | + strings_which_can_cause_user_to_pull_in_files_that_should_not_be_a_part_of_a_web_server: d.fetch("#\tStrings which can cause user to pull in files that should not be a part of a web server"), | |
| 1559 | + strings_which_can_cause_user_to_run_code_on_server_as_a_privileged_user_c_f_https_news_ycombinator_com_item_id_7665153: d.fetch("#\tStrings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)"), | |
| 1560 | + strings_which_contain_corrupted_text_the_corruption_will_not_appear_in_non_html_text_however_via_http_www_eeemo_net: d.fetch("#\tStrings which contain \"corrupted\" text. The corruption will not appear in non-HTML text, however. (via http://www.eeemo.net)"), | |
| 1561 | + strings_which_contain_unicode_with_an_upsidedown_effect_via_http_www_upsidedowntext_com: d.fetch("#\tStrings which contain unicode with an \"upsidedown\" effect (via http://www.upsidedowntext.com)"), | |
| 1562 | + strings_which_contain_unicode_with_unusual_properties_e_g_right_to_left_override_c_f_http_www_unicode_org_charts_pdf_u2000_pdf: d.fetch("#\tStrings which contain unicode with unusual properties (e.g. Right-to-left override) (c.f. http://www.unicode.org/charts/PDF/U2000.pdf)"), | |
| 1563 | + strings_which_punish_the_fools_who_use_cat_type_on_this_file: d.fetch("#\tStrings which punish the fools who use cat/type on this file"), | |
| 1564 | + svg_script_1231_alert_123_script: d.fetch("<svg><script>123<1>alert(123)</script>"), | |
| 1565 | + system_ls_al: d.fetch("System(\"ls -al /\")"), | |
| 1566 | + system_touch_tmp_blns_fail: d.fetch("@{[system \"touch /tmp/blns.fail\"]}"), | |
| 1567 | + test_test: d.fetch("test\u{2060}test\u{202b}"), | |
| 1568 | + the_00: d.fetch("+0.0"), | |
| 1569 | + the_000: d.fetch("0.0.0"), | |
| 1570 | + the_00_1: d.fetch("0,,0"), | |
| 1571 | + the_00_2: d.fetch("0/0"), | |
| 1572 | + the_0_touch_tmp_blns_shellshock1_fail: d.fetch("() { 0; }; touch /tmp/blns.shellshock1.fail;"), | |
| 1573 | + the_0_xabad1_dea: d.fetch("0xabad1dea"), | |
| 1574 | + the_0_xffffffff: d.fetch("0xffffffff"), | |
| 1575 | + the_0️: d.fetch("\u{1f3f3}0\u{1f308}️"), | |
| 1576 | + the_0️1️2️3️4️5️6️7️8️9️: d.fetch("0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ \u{1f51f}"), | |
| 1577 | + the_1: d.fetch("\"''''\"'\""), | |
| 1578 | + the_10: d.fetch("⅛⅜⅝⅞"), | |
| 1579 | + the_100: d.fetch("-$1.00"), | |
| 1580 | + the_100000: d.fetch("1 000,00"), | |
| 1581 | + the_100000000: d.fetch("1'000'000,00"), | |
| 1582 | + the_100000000_1: d.fetch("1.000.000,00"), | |
| 1583 | + the_100000_1: d.fetch("1.000,00"), | |
| 1584 | + the_11: d.fetch("✋\u{1f3ff} \u{1f4aa}\u{1f3ff} \u{1f450}\u{1f3ff} \u{1f64c}\u{1f3ff} \u{1f44f}\u{1f3ff} \u{1f64f}\u{1f3ff}"), | |
| 1585 | + the_12: d.fetch("-1/2"), | |
| 1586 | + the_13: d.fetch("・( ̄∀ ̄)・:*:"), | |
| 1587 | + the_14: d.fetch("\u{1d413}\u{1d421}\u{1d41e} \u{1d42a}\u{1d42e}\u{1d422}\u{1d41c}\u{1d424} \u{1d41b}\u{1d42b}\u{1d428}\u{1d430}\u{1d427} \u{1d41f}\u{1d428}\u{1d431} \u{1d423}\u{1d42e}\u{1d426}\u{1d429}\u{1d42c} \u{1d428}\u{1d42f}\u{1d41e}\u{1d42b} \u{1d42d}\u{1d421}\u{1d41e} \u{1d425}\u{1d41a}\u{1d433}\u{1d432} \u{1d41d}\u{1d428}\u{1d420}"), | |
| 1588 | + the_15: d.fetch("\u{1d683}\u{1d691}\u{1d68e} \u{1d69a}\u{1d69e}\u{1d692}\u{1d68c}\u{1d694} \u{1d68b}\u{1d69b}\u{1d698}\u{1d6a0}\u{1d697} \u{1d68f}\u{1d698}\u{1d6a1} \u{1d693}\u{1d69e}\u{1d696}\u{1d699}\u{1d69c} \u{1d698}\u{1d69f}\u{1d68e}\u{1d69b} \u{1d69d}\u{1d691}\u{1d68e} \u{1d695}\u{1d68a}\u{1d6a3}\u{1d6a2} \u{1d68d}\u{1d698}\u{1d690}"), | |
| 1589 | + the_16: d.fetch("\u{1f435} \u{1f648} \u{1f649} \u{1f64a}"), | |
| 1590 | + the_17: d.fetch("\u{1f47e} \u{1f647} \u{1f481} \u{1f645} \u{1f646} \u{1f64b} \u{1f64e} \u{1f64d}"), | |
| 1591 | + the_1_e2: d.fetch("-1E2"), | |
| 1592 | + the_1_e_02: d.fetch("-1E+02"), | |
| 1593 | + the_1_ind: d.fetch("-1#IND"), | |
| 1594 | + the_2: d.fetch("%"), | |
| 1595 | + the_3: d.fetch("''"), | |
| 1596 | + the_4: d.fetch("-"), | |
| 1597 | + the_5: d.fetch("--"), | |
| 1598 | + the_6: d.fetch("."), | |
| 1599 | + the_7: d.fetch("\\\\"), | |
| 1600 | + the_8: d.fetch("_"), | |
| 1601 | + the_9: d.fetch("⁰⁴⁵"), | |
| 1602 | + the_92233720368547758081: d.fetch("-9223372036854775808/-1"), | |
| 1603 | + the_١٢٣: d.fetch("١٢٣"), | |
| 1604 | + title_onpropertychange_javascript_alert_1_title_title_title: d.fetch("<title onpropertychange=javascript:alert(1)></title><title title=>"), | |
| 1605 | + treated_as_whitespace_in_some_contexts: d.fetch("# treated as whitespace in some contexts."), | |
| 1606 | + trick_unicode: d.fetch("#\tTrick Unicode"), | |
| 1607 | + undefined: d.fetch("undefined"), | |
| 1608 | + unicode_additional_control_characters_all_of_the_characters_with: d.fetch("# Unicode additional control characters: all of the characters with"), | |
| 1609 | + unicode_subscript_superscript_accents: d.fetch("#\tUnicode Subscript/Superscript/Accents"), | |
| 1610 | + unicode_upsidedown: d.fetch("#\tUnicode Upsidedown"), | |
| 1611 | + user: d.fetch("$USER"), | |
| 1612 | + version: d.fetch("--version"), | |
| 1613 | + version_800_plus_u_0009_ht_u_000_b_vt_u_000_c_ff_u_0085_nel: d.fetch("# version 8.0.0), plus U+0009 (HT), U+000B (VT), U+000C (FF), U+0085 (NEL),"), | |
| 1614 | + whitespace_all_of_the_characters_with_category_zs_zl_or_zp_in_unicode: d.fetch("# Whitespace: all of the characters with category Zs, Zl, or Zp (in Unicode"), | |
| 1615 | + xml_version_10_encoding_iso_88591_doctype_foo_element_foo_any_entity_xxe_system_file_etc_passwd_foo_xxe_foo: d.fetch("<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>"), | |
| 1616 | + xxe_injection_xml: d.fetch("# XXE Injection (XML)"), | |
| 1617 | + zalgo_text: d.fetch("#\tZalgo Text"), | |
| 1618 | + zz: d.fetch("ZZ:"), | |
| 1619 | + åíîï_óô_òúæ: d.fetch("ÅÍÎÏ˝ÓÔ\u{f8ff}ÒÚÆ☃"), | |
| 1620 | + ω: d.fetch(",。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’"), | |
| 1621 | + ёђѓєѕіїјљњћќѝўџабвгдежзийклмнопрстуфхцчшщъыьэю_яабвгдежзийклмнопрстуфхцчшщъыьэюя: d.fetch("ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя"), | |
| 1622 | + בְּרֵאשִׁיתבָּרָאאֱלֹהִיםאֵתהַשָּׁמַיִםוְאֵתהָאָרֶץ: d.fetch("בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ"), | |
| 1623 | + مُنَاقَشَةُسُبُلِاِسْتِخْدَامِاللُّغَةِفِيالنُّظُمِالْقَائِمَةِوَفِيميَخُصَّالتَّطْبِيقَاتُالْحاسُوبِيَّةُ: d.fetch("مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ، "), | |
| 1624 | + ṯ_h_e_n_e_z_p_e_r_d_i_a_n_h_i_v_ḙ_m_i_n_ḍ_ǫ_f_c_ḥ_a_ơ_s_z_a_l_g_o: d.fetch("̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟"), | |
| 1625 | + ノº_ºノ: d.fetch("┬─┬ノ( º _ ºノ)"), | |
| 1626 | + 울란바토르: d.fetch("울란바토르"), | |
| 1627 | + the_quick_brown_fox_jumps_over_the_lazy_dog: d.fetch("The quick brown fox jumps over the lazy dog"), | |
| 1628 | + ノಥ益ಥノ: d.fetch("(ノಥ益ಥ)ノ\u{feff} ┻━┻"), | |
| 1629 | + ) | |
| 1630 | + end | |
| 1631 | + | |
| 1632 | + def self.from_json!(json) | |
| 1633 | + from_dynamic!(JSON.parse(json)) | |
| 1634 | + end | |
| 1635 | + | |
| 1636 | + def to_dynamic | |
| 1637 | + { | |
| 1638 | + "\u{2070e}\u{20731}\u{20779}\u{20c53}\u{20c78}\u{20c96}\u{20ccf}" => _10, | |
| 1639 | + "A:" => a, | |
| 1640 | + "<a href=\"\\x00javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x00_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1641 | + "<a href=\"\\x03javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x03_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1642 | + "<a href=\"\\x06javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x06_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1643 | + "<a href=\"\\x07javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x07_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1644 | + "<a href=\"\\x0Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x0_bjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1645 | + "<a href=\"\\x12javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x12_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1646 | + "<a href=\"\\x14javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x14_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1647 | + "<a href=\"\\x15javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x15_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1648 | + "<a href=\"\\x18javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x18_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1649 | + "<a href=\"\\x1Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x1_bjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1650 | + "<a href=\"\\x1Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x1_cjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1651 | + "<a href=\"\\x20javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x20_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1652 | + "<a href=\"\\xE2\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1653 | + "<a href=\"\\xE2\\x80\\x85javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x85_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1654 | + "<a href=\"\\xE2\\x80\\x88javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x88_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1655 | + "<a href=\"\\xE2\\x80\\x89javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x89_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1656 | + "<a href=\"\\xE2\\x80\\x8Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x80_x8_ajavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1657 | + "<a href=\"\\xE2\\x81\\x9Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e2_x81_x9_fjavascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1658 | + "<a href=\"\\xE3\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>" => a_href_x_e3_x80_x80_javascript_javascript_alert_1_id_fuzzelement1_test_a, | |
| 1659 | + "ABC<div style=\"x:expression\\x00(javascript:alert(1)\">DEF" => abc_div_style_x_expression_x00_javascript_alert_1_def, | |
| 1660 | + "ABC<div style=\"x:\\x00expression(javascript:alert(1)\">DEF" => abc_div_style_x_x00_expression_javascript_alert_1_def, | |
| 1661 | + "ABC<div style=\"x:\\x0Cexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x0_cexpression_javascript_alert_1_def, | |
| 1662 | + "ABC<div style=\"x:\\xE2\\x80\\x81expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x81_expression_javascript_alert_1_def, | |
| 1663 | + "ABC<div style=\"x:\\xE2\\x80\\x86expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x86_expression_javascript_alert_1_def, | |
| 1664 | + "ABC<div style=\"x:\\xE2\\x80\\x88expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e2_x80_x88_expression_javascript_alert_1_def, | |
| 1665 | + "ABC<div style=\"x:\\xE3\\x80\\x80expression(javascript:alert(1)\">DEF" => abc_div_style_x_x_e3_x80_x80_expression_javascript_alert_1_def, | |
| 1666 | + "ABC<div style=\"x:\\xEF\\xBB\\xBFexpression(javascript:alert(1)\">DEF" => abc_div_style_x_x_ef_x_bb_x_b_fexpression_javascript_alert_1_def, | |
| 1667 | + "# and U+007F (DEL)" => and_u_007_f_del, | |
| 1668 | + "# ASCII punctuation. All of these characters may need to be escaped in some" => ascii_punctuation_all_of_these_characters_may_need_to_be_escaped_in_some, | |
| 1669 | + "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>" => body_onload_alert_xss, | |
| 1670 | + "\"'\"'\"''''\"" => c, | |
| 1671 | + "-0.0" => c_00, | |
| 1672 | + "0.0/0" => c_000, | |
| 1673 | + "--1" => c_1, | |
| 1674 | + "-1.00" => c_100, | |
| 1675 | + "1,000.00" => c_100000, | |
| 1676 | + "1,000,000.00" => c_100000000, | |
| 1677 | + "1E+02" => c_1_e_02, | |
| 1678 | + "><script>alert(123)</script>" => c_script_alert_123_script, | |
| 1679 | + "\u{2029}test\u{2029}" => c_test, | |
| 1680 | + "true" => c_true, | |
| 1681 | + "CLOCK$" => clock, | |
| 1682 | + "COM2" => com2, | |
| 1683 | + "COM4" => com4, | |
| 1684 | + "Craig Cockburn, Software Specialist" => craig_cockburn_software_specialist, | |
| 1685 | + "DCC SEND STARTKEYLOGGER 0 0 0" => dcc_send_startkeylogger_000, | |
| 1686 | + "dontMakeAMap" => dont_make_a_map, | |
| 1687 | + "#\tEmoji" => emoji, | |
| 1688 | + "\"\"" => empty, | |
| 1689 | + "evaluate" => evaluate, | |
| 1690 | + "<foo val=“bar” />" => foo_val_bar, | |
| 1691 | + "hasOwnProperty" => has_own_property, | |
| 1692 | + "Horniman Museum" => horniman_museum, | |
| 1693 | + "http://www.cum.qc.ca/" => http_www_cum_qc_ca, | |
| 1694 | + "<i onwheel=alert(1)> Scroll over me </i>" => i_onwheel_alert_1_scroll_over_me_i, | |
| 1695 | + "<img[a][b][c]src[d]=x[e]onerror=[f]\"alert(1)\">" => img_a_b_c_src_d_x_e_onerror_f_alert_1, | |
| 1696 | + "<IMG onmouseover=\"alert('xxs')\">" => img_onmouseover_alert_xxs, | |
| 1697 | + "<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">" => img_script_alert_xss_script, | |
| 1698 | + "<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>" => img_src_javascript_alert_string_from_char_code_888383, | |
| 1699 | + "<IMG SRC=\"javascript:alert('XSS')\"" => img_src_javascript_alert_xss, | |
| 1700 | + "<img src onerror /\" '\"= alt=javascript:alert(1)//\">" => img_src_onerror_alt_javascript_alert_1, | |
| 1701 | + "<img src\\x10=x onerror=\"javascript:alert(1)\">" => img_src_x10_x_onerror_javascript_alert_1, | |
| 1702 | + "<img src\\x12=x onerror=\"javascript:alert(1)\">" => img_src_x12_x_onerror_javascript_alert_1, | |
| 1703 | + "<img src\\x13=x onerror=\"javascript:alert(1)\">" => img_src_x13_x_onerror_javascript_alert_1, | |
| 1704 | + "<img src\\x32=x onerror=\"javascript:alert(1)\">" => img_src_x32_x_onerror_javascript_alert_1, | |
| 1705 | + "<img src\\x47=x onerror=\"javascript:alert(1)\">" => img_src_x47_x_onerror_javascript_alert_1, | |
| 1706 | + "<img src=x onerror=alert(123) />" => img_src_x_onerror_alert_123, | |
| 1707 | + "<img src=x onerror=\\x10\"javascript:alert(1)\">" => img_src_x_onerror_x10_javascript_alert_1, | |
| 1708 | + "<img src=x onerror=\\x32\"javascript:alert(1)\">" => img_src_x_onerror_x32_javascript_alert_1, | |
| 1709 | + "<img src=\"x` `<script>javascript:alert(1)</script>\"` `>" => img_src_x_script_javascript_alert_1_script, | |
| 1710 | + "`\"'><img src=xxx:x \\x09onerror=javascript:alert(1)>" => img_src_xxx_x_x09_onerror_javascript_alert_1, | |
| 1711 | + "`\"'><img src=xxx:x \\x20onerror=javascript:alert(1)>" => img_src_xxx_x_x20_onerror_javascript_alert_1, | |
| 1712 | + "`\"'><img src=xxx:x \\x22onerror=javascript:alert(1)>" => img_src_xxx_x_x22_onerror_javascript_alert_1, | |
| 1713 | + "`\"'><img src=xxx:x \\x27onerror=javascript:alert(1)>" => img_src_xxx_x_x27_onerror_javascript_alert_1, | |
| 1714 | + "<img\\x11src=x onerror=\"javascript:alert(1)\">" => img_x11_src_x_onerror_javascript_alert_1, | |
| 1715 | + "<img \\x34src=x onerror=\"javascript:alert(1)\">" => img_x34_src_x_onerror_javascript_alert_1, | |
| 1716 | + "<img\\x47src=x onerror=\"javascript:alert(1)\">" => img_x47_src_x_onerror_javascript_alert_1, | |
| 1717 | + "Infinity" => infinity, | |
| 1718 | + "JavaSCript:alert(123)" => java_s_cript_alert_123, | |
| 1719 | + "LPT1" => lpt1, | |
| 1720 | + "<script>alert('123');</script>" => lt_script_gt_alert_3912339_lt_script_gt, | |
| 1721 | + "magna cum laude" => magna_cum_laude, | |
| 1722 | + "medieval erection of parapets" => medieval_erection_of_parapets, | |
| 1723 | + "mocha" => mocha, | |
| 1724 | + "NaN" => na_n, | |
| 1725 | + "# Non-whitespace C0 controls: U+0001 through U+0008, U+000E through U+001F," => non_whitespace_c0_controls_u_0001_through_u_0008_u_000_e_through_u_001_f, | |
| 1726 | + "NULL" => null, | |
| 1727 | + "' onfocus=JaVaSCript:alert(123) autofocus" => onfocus_ja_va_s_cript_alert_123_autofocus, | |
| 1728 | + "# or reused for internal delimiters on the theory that they should never" => or_reused_for_internal_delimiters_on_the_theory_that_they_should_never, | |
| 1729 | + "<plaintext>" => plaintext, | |
| 1730 | + "Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗" => power_لُلُصّبُلُلصّبُررًॣॣ_h_冗, | |
| 1731 | + "#\tRight-To-Left Strings" => right_to_left_strings, | |
| 1732 | + "Roses are \u{1b}[0;31mred\u{1b}[0m, violets are \u{1b}[0;34mblue. Hope you enjoy terminal hue" => roses_are_031_mred_0_m_violets_are_034_mblue_hope_you_enjoy_terminal_hue, | |
| 1733 | + "%*.*s" => s, | |
| 1734 | + "'><script>alert(123)</script>" => script_alert_123_script, | |
| 1735 | + "<script>alert(123)</script>" => script_alert_123_script_1, | |
| 1736 | + "'><script>alert(123);</script x='" => script_alert_123_script_x, | |
| 1737 | + "\"`'><script>-javascript:alert(1)</script>" => script_javascript_alert_1_script, | |
| 1738 | + "< / script >< script >alert(123)< / script >" => script_script_alert_123_script, | |
| 1739 | + "<script src=\"/\\%(jscript)s\"></script>" => script_src_jscript_s_script, | |
| 1740 | + "\"`'><script>\\x0Ajavascript:alert(1)</script>" => script_x0_ajavascript_alert_1_script, | |
| 1741 | + "\"`'><script>\\x0Bjavascript:alert(1)</script>" => script_x0_bjavascript_alert_1_script, | |
| 1742 | + "<script\\x0Ctype=\"text/javascript\">javascript:alert(1);</script>" => script_x0_ctype_text_javascript_javascript_alert_1_script, | |
| 1743 | + "\"`'><script>\\x20javascript:alert(1)</script>" => script_x20_javascript_alert_1_script, | |
| 1744 | + "\"`'><script>\\x2Bjavascript:alert(1)</script>" => script_x2_bjavascript_alert_1_script, | |
| 1745 | + "<script\\x2Ftype=\"text/javascript\">javascript:alert(1);</script>" => script_x2_ftype_text_javascript_javascript_alert_1_script, | |
| 1746 | + "\"`'><script>\\x7Ejavascript:alert(1)</script>" => script_x7_ejavascript_alert_1_script, | |
| 1747 | + "\"`'><script>\\xE2\\x80\\x80javascript:alert(1)</script>" => script_x_e2_x80_x80_javascript_alert_1_script, | |
| 1748 | + "\"`'><script>\\xE2\\x80\\x82javascript:alert(1)</script>" => script_x_e2_x80_x82_javascript_alert_1_script, | |
| 1749 | + "\"`'><script>\\xE2\\x80\\x83javascript:alert(1)</script>" => script_x_e2_x80_x83_javascript_alert_1_script, | |
| 1750 | + "\"`'><script>\\xE2\\x80\\x84javascript:alert(1)</script>" => script_x_e2_x80_x84_javascript_alert_1_script, | |
| 1751 | + "\"`'><script>\\xE2\\x80\\x88javascript:alert(1)</script>" => script_x_e2_x80_x88_javascript_alert_1_script, | |
| 1752 | + "\"`'><script>\\xE2\\x80\\x8Bjavascript:alert(1)</script>" => script_x_e2_x80_x8_bjavascript_alert_1_script, | |
| 1753 | + "\"`'><script>\\xEF\\xBF\\xAEjavascript:alert(1)</script>" => script_x_ef_x_bf_x_a_ejavascript_alert_1_script, | |
| 1754 | + "\"`'><script>\\xEF\\xBF\\xBEjavascript:alert(1)</script>" => script_x_ef_x_bf_x_b_ejavascript_alert_1_script, | |
| 1755 | + "Scunthorpe General Hospital" => scunthorpe_general_hospital, | |
| 1756 | + "#\tServer Code Injection" => server_code_injection, | |
| 1757 | + "shitake mushrooms" => shitake_mushrooms, | |
| 1758 | + "#\tSpecial Characters" => special_characters, | |
| 1759 | + "src=JaVaSCript:prompt(132)" => src_ja_va_s_cript_prompt_132, | |
| 1760 | + "#\tStrings which can be interpreted as numeric" => strings_which_can_be_interpreted_as_numeric, | |
| 1761 | + "#\tStrings which can cause a SQL injection if inputs are not sanitized" => strings_which_can_cause_a_sql_injection_if_inputs_are_not_sanitized, | |
| 1762 | + "#\tStrings which can cause user to pull in files that should not be a part of a web server" => strings_which_can_cause_user_to_pull_in_files_that_should_not_be_a_part_of_a_web_server, | |
| 1763 | + "#\tStrings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)" => strings_which_can_cause_user_to_run_code_on_server_as_a_privileged_user_c_f_https_news_ycombinator_com_item_id_7665153, | |
| 1764 | + "#\tStrings which contain \"corrupted\" text. The corruption will not appear in non-HTML text, however. (via http://www.eeemo.net)" => strings_which_contain_corrupted_text_the_corruption_will_not_appear_in_non_html_text_however_via_http_www_eeemo_net, | |
| 1765 | + "#\tStrings which contain unicode with an \"upsidedown\" effect (via http://www.upsidedowntext.com)" => strings_which_contain_unicode_with_an_upsidedown_effect_via_http_www_upsidedowntext_com, | |
| 1766 | + "#\tStrings which contain unicode with unusual properties (e.g. Right-to-left override) (c.f. http://www.unicode.org/charts/PDF/U2000.pdf)" => strings_which_contain_unicode_with_unusual_properties_e_g_right_to_left_override_c_f_http_www_unicode_org_charts_pdf_u2000_pdf, | |
| 1767 | + "#\tStrings which punish the fools who use cat/type on this file" => strings_which_punish_the_fools_who_use_cat_type_on_this_file, | |
| 1768 | + "<svg><script>123<1>alert(123)</script>" => svg_script_1231_alert_123_script, | |
| 1769 | + "System(\"ls -al /\")" => system_ls_al, | |
| 1770 | + "@{[system \"touch /tmp/blns.fail\"]}" => system_touch_tmp_blns_fail, | |
| 1771 | + "test\u{2060}test\u{202b}" => test_test, | |
| 1772 | + "+0.0" => the_00, | |
| 1773 | + "0.0.0" => the_000, | |
| 1774 | + "0,,0" => the_00_1, | |
| 1775 | + "0/0" => the_00_2, | |
| 1776 | + "() { 0; }; touch /tmp/blns.shellshock1.fail;" => the_0_touch_tmp_blns_shellshock1_fail, | |
| 1777 | + "0xabad1dea" => the_0_xabad1_dea, | |
| 1778 | + "0xffffffff" => the_0_xffffffff, | |
| 1779 | + "\u{1f3f3}0\u{1f308}️" => the_0️, | |
| 1780 | + "0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ \u{1f51f}" => the_0️1️2️3️4️5️6️7️8️9️, | |
| 1781 | + "\"''''\"'\"" => the_1, | |
| 1782 | + "⅛⅜⅝⅞" => the_10, | |
| 1783 | + "-$1.00" => the_100, | |
| 1784 | + "1 000,00" => the_100000, | |
| 1785 | + "1'000'000,00" => the_100000000, | |
| 1786 | + "1.000.000,00" => the_100000000_1, | |
| 1787 | + "1.000,00" => the_100000_1, | |
| 1788 | + "✋\u{1f3ff} \u{1f4aa}\u{1f3ff} \u{1f450}\u{1f3ff} \u{1f64c}\u{1f3ff} \u{1f44f}\u{1f3ff} \u{1f64f}\u{1f3ff}" => the_11, | |
| 1789 | + "-1/2" => the_12, | |
| 1790 | + "・( ̄∀ ̄)・:*:" => the_13, | |
| 1791 | + "\u{1d413}\u{1d421}\u{1d41e} \u{1d42a}\u{1d42e}\u{1d422}\u{1d41c}\u{1d424} \u{1d41b}\u{1d42b}\u{1d428}\u{1d430}\u{1d427} \u{1d41f}\u{1d428}\u{1d431} \u{1d423}\u{1d42e}\u{1d426}\u{1d429}\u{1d42c} \u{1d428}\u{1d42f}\u{1d41e}\u{1d42b} \u{1d42d}\u{1d421}\u{1d41e} \u{1d425}\u{1d41a}\u{1d433}\u{1d432} \u{1d41d}\u{1d428}\u{1d420}" => the_14, | |
| 1792 | + "\u{1d683}\u{1d691}\u{1d68e} \u{1d69a}\u{1d69e}\u{1d692}\u{1d68c}\u{1d694} \u{1d68b}\u{1d69b}\u{1d698}\u{1d6a0}\u{1d697} \u{1d68f}\u{1d698}\u{1d6a1} \u{1d693}\u{1d69e}\u{1d696}\u{1d699}\u{1d69c} \u{1d698}\u{1d69f}\u{1d68e}\u{1d69b} \u{1d69d}\u{1d691}\u{1d68e} \u{1d695}\u{1d68a}\u{1d6a3}\u{1d6a2} \u{1d68d}\u{1d698}\u{1d690}" => the_15, | |
| 1793 | + "\u{1f435} \u{1f648} \u{1f649} \u{1f64a}" => the_16, | |
| 1794 | + "\u{1f47e} \u{1f647} \u{1f481} \u{1f645} \u{1f646} \u{1f64b} \u{1f64e} \u{1f64d}" => the_17, | |
| 1795 | + "-1E2" => the_1_e2, | |
| 1796 | + "-1E+02" => the_1_e_02, | |
| 1797 | + "-1#IND" => the_1_ind, | |
| 1798 | + "%" => the_2, | |
| 1799 | + "''" => the_3, | |
| 1800 | + "-" => the_4, | |
| 1801 | + "--" => the_5, | |
| 1802 | + "." => the_6, | |
| 1803 | + "\\\\" => the_7, | |
| 1804 | + "_" => the_8, | |
| 1805 | + "⁰⁴⁵" => the_9, | |
| 1806 | + "-9223372036854775808/-1" => the_92233720368547758081, | |
| 1807 | + "١٢٣" => the_١٢٣, | |
| 1808 | + "<title onpropertychange=javascript:alert(1)></title><title title=>" => title_onpropertychange_javascript_alert_1_title_title_title, | |
| 1809 | + "# treated as whitespace in some contexts." => treated_as_whitespace_in_some_contexts, | |
| 1810 | + "#\tTrick Unicode" => trick_unicode, | |
| 1811 | + "undefined" => undefined, | |
| 1812 | + "# Unicode additional control characters: all of the characters with" => unicode_additional_control_characters_all_of_the_characters_with, | |
| 1813 | + "#\tUnicode Subscript/Superscript/Accents" => unicode_subscript_superscript_accents, | |
| 1814 | + "#\tUnicode Upsidedown" => unicode_upsidedown, | |
| 1815 | + "$USER" => user, | |
| 1816 | + "--version" => version, | |
| 1817 | + "# version 8.0.0), plus U+0009 (HT), U+000B (VT), U+000C (FF), U+0085 (NEL)," => version_800_plus_u_0009_ht_u_000_b_vt_u_000_c_ff_u_0085_nel, | |
| 1818 | + "# Whitespace: all of the characters with category Zs, Zl, or Zp (in Unicode" => whitespace_all_of_the_characters_with_category_zs_zl_or_zp_in_unicode, | |
| 1819 | + "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>" => xml_version_10_encoding_iso_88591_doctype_foo_element_foo_any_entity_xxe_system_file_etc_passwd_foo_xxe_foo, | |
| 1820 | + "# XXE Injection (XML)" => xxe_injection_xml, | |
| 1821 | + "#\tZalgo Text" => zalgo_text, | |
| 1822 | + "ZZ:" => zz, | |
| 1823 | + "ÅÍÎÏ˝ÓÔ\u{f8ff}ÒÚÆ☃" => åíîï_óô_òúæ, | |
| 1824 | + ",。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’" => ω, | |
| 1825 | + "ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя" => ёђѓєѕіїјљњћќѝўџабвгдежзийклмнопрстуфхцчшщъыьэю_яабвгдежзийклмнопрстуфхцчшщъыьэюя, | |
| 1826 | + "בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ" => בְּרֵאשִׁיתבָּרָאאֱלֹהִיםאֵתהַשָּׁמַיִםוְאֵתהָאָרֶץ, | |
| 1827 | + "مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ، " => مُنَاقَشَةُسُبُلِاِسْتِخْدَامِاللُّغَةِفِيالنُّظُمِالْقَائِمَةِوَفِيميَخُصَّالتَّطْبِيقَاتُالْحاسُوبِيَّةُ, | |
| 1828 | + "̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟" => ṯ_h_e_n_e_z_p_e_r_d_i_a_n_h_i_v_ḙ_m_i_n_ḍ_ǫ_f_c_ḥ_a_ơ_s_z_a_l_g_o, | |
| 1829 | + "┬─┬ノ( º _ ºノ)" => ノº_ºノ, | |
| 1830 | + "울란바토르" => 울란바토르, | |
| 1831 | + "The quick brown fox jumps over the lazy dog" => the_quick_brown_fox_jumps_over_the_lazy_dog, | |
| 1832 | + "(ノಥ益ಥ)ノ\u{feff} ┻━┻" => ノಥ益ಥノ, | |
| 1833 | + } | |
| 1834 | + end | |
| 1835 | + | |
| 1836 | + def to_json(options = nil) | |
| 1837 | + JSON.generate(to_dynamic, options) | |
| 1838 | + end | |
| 1839 | +end | |
| 1840 | + | |
| 1841 | +class TopLevel < Dry::Struct | |
| 1842 | + attribute :a, A | |
| 1843 | + attribute :b, B | |
| 1844 | + attribute :c, C | |
| 1845 | + | |
| 1846 | + def self.from_dynamic!(d) | |
| 1847 | + d = Types::Hash[d] | |
| 1848 | + new( | |
| 1849 | + a: A.from_dynamic!(d.fetch("a")), | |
| 1850 | + b: B.from_dynamic!(d.fetch("b")), | |
| 1851 | + c: C.from_dynamic!(d.fetch("c")), | |
| 1852 | + ) | |
| 1853 | + end | |
| 1854 | + | |
| 1855 | + def self.from_json!(json) | |
| 1856 | + from_dynamic!(JSON.parse(json)) | |
| 1857 | + end | |
| 1858 | + | |
| 1859 | + def to_dynamic | |
| 1860 | + { | |
| 1861 | + "a" => a.to_dynamic, | |
| 1862 | + "b" => b.to_dynamic, | |
| 1863 | + "c" => c.to_dynamic, | |
| 1864 | + } | |
| 1865 | + end | |
| 1866 | + | |
| 1867 | + def to_json(options = nil) | |
| 1868 | + JSON.generate(to_dynamic, options) | |
| 1869 | + end | |
| 1870 | +end |
No generated files match these filters.