Variations on type attribute of script tag

These scripts should execute

  1. no type attribute
  2. empty string
  3. text/javascript
  4. text/JAVASCRIPT
  5. TEXT/JAVASCRIPT
  6. 'text/javascript '
  7. ' text/javascript '
  8. text/jscript
  9. text/ecmascript
  10. text/livescript
  11. text/javascript1.0
  12. text/javascript1.1
  13. text/javascript1.2
  14. text/javascript1.3
  15. text/javascript1.4
  16. text/javascript1.5
  17. application/x-javascript

These scripts should not execute

  1. one space
  2. text/
  3. text/vbscript
  4. text/vbs
  5. text/xml
  6. text/javascript1
  7. text/javascript1.6
  8. application/jscript
  9. application/x-jscript
  10. application/livescript
  11. application/x-livescript
  12. application/ecmascript
  13. application/x-ecmascript
  14. application/javascript
  15. application/javascript1.2
  16. application/x-javascript1.2
  17. javascript
  18. jscript
  19. ecmascript
  20. livescript
  21. livescript1.1
  22. JAVASCRIPT
  23. JavaScript
  24. JavaScript 1
  25. JavaScript 1.0
  26. JavaScript 1.1
  27. JavaScript 1.1.1
  28. JavaScript 1.2
  29. JavaScript 1.3
  30. JavaScript 1.4
  31. JavaScript 1.5
  32. JavaScript 1.6
  33. JavaScript 1.7
  34. JavaScript 1.8
  35. JavaScript 1.9
  36. JavaScript 2
  37. JavaScript 2.1
  38. JavaScript 10
  39. JavaScript 10.0
  40. _javascript
  41. javascript_
  42. javascript_1.0
  43. javascript 1.0 x
  44. JavaScript1
  45. JavaScript1.0
  46. JavaScript1.1
  47. JavaScript1.2
  48. JavaScript1.3
  49. JavaScript1.4
  50. JavaScript1.4.1
  51. JavaScript1.5
  52. JavaScript1.6
  53. JavaScript1.7
  54. 1.0 javascript
  55. ' javascript '
  56. ' javascript1.1 '
  57. '   javascript   '
  58. ' javascript 1.0 '
  59. ' javascript  1.0 '
  60. jscript 1
  61. jscript 1.0
  62. ecmascript 1
  63. ecmascript 1.0
  64. livescript 1
  65. livescript 1.0
  66. ' jscript  1.0 '
  67. disabled_javascript
  68. xxxjavascriptxxx
  69. bogus

Variations on language attribute of script tag

These scripts should execute

  1. no language attribute
  2. empty string
  3. jscript
  4. ecmascript
  5. livescript
  6. javascript
  7. JAVASCRIPT
  8. JavaScript
  9. JavaScript1.0
  10. JavaScript1.1
  11. JavaScript1.2
  12. JavaScript1.3
  13. JavaScript1.4
  14. JavaScript1.5

These scripts should not execute

  1. one space
  2. vbscript
  3. livescript1.1
  4. JavaScript 1
  5. JavaScript 1.0
  6. JavaScript 1.1
  7. JavaScript 1.1.1
  8. JavaScript 1.2
  9. JavaScript 1.3
  10. JavaScript 1.4
  11. JavaScript 1.5
  12. JavaScript 1.6
  13. JavaScript 1.7
  14. JavaScript 1.8
  15. JavaScript 1.9
  16. JavaScript 2
  17. JavaScript 2.1
  18. JavaScript 10
  19. JavaScript 10.0
  20. _javascript
  21. javascript_
  22. javascript_1.0
  23. javascript 1.0 x
  24. JavaScript1
  25. JavaScript1.6
  26. JavaScript1.7
  27. JavaScript1.4.1
  28. 1.0 javascript
  29. ' javascript '
  30. ' javascript1.1 '
  31. '   javascript   '
  32. ' javascript 1.0 '
  33. ' javascript  1.0 '
  34. jscript 1
  35. jscript 1.0
  36. ecmascript 1
  37. ecmascript 1.0
  38. livescript 1
  39. livescript 1.0
  40. ' jscript  1.0 '
  41. disabled_javascript
  42. xxxjavascriptxxx
  43. bogus

Variations on combined type and language attributes of script tag

These scripts should execute

  1. empty string type, "javascript" language
  2. empty string language, "text/javascript" type
  3. "javascript" language, "text/javascript" type
  4. "bogus" language, "text/javascript" type
  5. "livescript" language, "text/javascript" type
  6. "javascript1.2" language, "text/javascript" type

These scripts should not execute

  1. "javascript" language, "bogus" type
  2. empty string type, "bogus" language
  3. empty string language, "bogus" type