Crawl Field Notes

Inert context canary classified

The fixed url-scheme case was classified.

The values below are server-defined identifiers. They are shown only in text nodes and are never inserted into a live HTML, URL, style, event, or script sink.

Shape label
javascript-url
Context label
url-attribute-text
Transformation label
scheme-canonicalization
Source canary
canary-scheme%3Acontext-03
Normalized canary
canary-scheme:context-03
Serialized canary
canary-scheme:context-03

Open the same-origin inert sandbox host

Measurement marker: ARN-BOUNDARY-XSS-CONTEXT-URL-SCHEME-CLASSIFIED