Crawl Field Notes

Inert context canary classified

The fixed data-percent case was classified.

The values below are server-defined identifiers. They are shown only in text nodes and are never inserted into a live HTML, URL, style, event, or script sink.

Shape label
event-handler
Context label
data-attribute-text
Transformation label
percent-decode
Source canary
CANARY%253ADATA%253A05
Normalized canary
CANARY%3ADATA%3A05
Serialized canary
CANARY%253ADATA%253A05

Open the same-origin inert sandbox host

Measurement marker: ARN-BOUNDARY-XSS-CONTEXT-DATA-PERCENT-CLASSIFIED