Remove BLONS
This file was used in unit tests a while ago. It's not really a good
test list, and ideally would be replaced with coverage directed fuzzing
if we ever needed something like this in the future.
Tested: Delete only.
Signed-off-by: Ed Tanous <edtanous@google.com>
Change-Id: I9a7d3c422226e0366399ab43abd92f762e3e4fc7
diff --git a/include/big_list_of_naughty_strings.hpp b/include/big_list_of_naughty_strings.hpp
deleted file mode 100644
index 8438366..0000000
--- a/include/big_list_of_naughty_strings.hpp
+++ /dev/null
@@ -1,1412 +0,0 @@
-#pragma once
-
-// clang-format off
-
-const std::string naughty_strings[] = {
- // sourced from
- // https://raw.githubusercontent.com/minimaxir/big-list-of-naughty-strings/master/blns.txt
-
- // Reserved Strings
- //
- // Strings which may be used elsewhere in code
-
- "undefined", "undef", "null", "NULL", "(null)", "nil", "NIL", "true",
- "false", "True", "False", "TRUE", "FALSE", "None", "hasOwnProperty", "\\",
- "\\\\",
-
- // Numeric Strings
- //
- // Strings which can be interpreted as numeric
-
- "0", "1", "1.00", "$1.00", "1/2", "1E2", "1E02", "1E+02", "-1", "-1.00",
- "-$1.00", "-1/2", "-1E2", "-1E02", "-1E+02", "1/0", "0/0", "-2147483648/-1",
- "-9223372036854775808/-1", "-0", "-0.0", "+0", "+0.0", "0.00", "0..0", ".",
- "0.0.0", "0,00", "0,,0", ",", "0,0,0", "0.0/0", "1.0/0.0", "0.0/0.0",
- "1,0/0,0", "0,0/0,0", "--1", "-", "-.", "-,",
- "99999999999999999999999999999999999999999999999999999999999999999999999999"
- "9999999999999999999999",
- "NaN", "Infinity", "-Infinity", "INF", "1#INF", "-1#IND", "1#QNAN",
- "1#SNAN", "1#IND", "0x0", "0xffffffff", "0xffffffffffffffff", "0xabad1dea",
- "123456789012345678901234567890123456789", "1,000.00", "1 000.00",
- "1'000.00", "1,000,000.00", "1 000 000.00", "1'000'000.00", "1.000,00",
- "1 000,00", "1'000,00", "1.000.000,00", "1 000 000,00", "1'000'000,00",
- "01000", "08", "09", "2.2250738585072011e-308",
-
- // Special Characters
- //
- // ASCII punctuation. All of these characters may need to be escaped in
- // some
- // contexts. Divided into three groups based on (US-layout) keyboard
- // position.
-
- ",./;'[]\\-=", "<>?:\"{}|_+", "!@#$%^&*()`~",
-
- // Non-whitespace C0 controls: U+0001 through U+0008, U+000E through U+001F,
- // and U+007F (DEL)
- // Often forbidden to appear in various text-based file formats (e.g. XML),
- // or reused for internal delimiters on the theory that they should never
- // appear in input.
- // The next line may appear to be blank or mojibake in some viewers.
- " ",
-
- // Non-whitespace C1 controls: U+0080 through U+0084 and U+0086 through
- // U+009F.
- // Commonly misinterpreted as additional graphic characters.
- // The next line may appear to be blank, mojibake, or dingbats in some
- // viewers.
- "ￂﾀￂﾁￂﾂￂﾃￂﾄￂﾆￂﾇￂﾈￂﾉￂﾊￂﾋￂﾌￂﾍￂﾎￂﾏￂﾐￂﾑￂﾒￂﾓￂﾔￂﾕￂﾖￂﾗￂﾘￂﾙￂﾚￂﾛￂﾜￂﾝￂﾞￂﾟ",
-
- // Whitespace: all of the characters with category Zs, Zl, or Zp (in Unicode
- // version 8.0.0), plus U+0009 (HT), U+000B (VT), U+000C (FF), U+0085 (NEL),
- // and U+200B (ZERO WIDTH SPACE), which are in the C categories but are
- // often
- // treated as whitespace in some contexts.
- // This file unfortunately cannot express strings containing
- // U+0000, U+000A, or U+000D (NUL, LF, CR).
- // The next line may appear to be blank or mojibake in some viewers.
- // The next line may be flagged for \"trailing whitespace\" in some viewers.
- " ",
- " ￂﾅ "
- "￡ﾚﾀ￢ﾀﾀ￢ﾀﾁ￢ﾀﾂ￢ﾀﾃ￢ﾀﾄ￢ﾀﾅ￢ﾀﾆ￢ﾀﾇ￢ﾀﾈ￢ﾀﾉ￢ﾀﾊ￢ﾀﾋ￢ﾀﾨ￢ﾀﾩ￢ﾀﾯ￢ﾁﾟ￣ﾀﾀ",
-
- // Unicode additional control characters: all of the characters with
- // general category Cf (in Unicode 8.0.0).
- // The next line may appear to be blank or mojibake in some viewers.
- "ￂﾭﾀﾁﾂﾃﾄﾅﾜￛﾝￜﾏ￡ﾠﾎ￢"
- "ﾀ"
- "ﾋ"
- "￢"
- "ﾀ"
- "ﾌ"
- "￢"
- "ﾀ"
- "ﾍ"
- "￢"
- "ﾀ"
- "ﾎ"
- "￢"
- "ﾀ"
- "ﾏ"
- "￢"
- "ﾀ"
- "ﾪ"
- "￢"
- "ﾀ"
- "ﾫ"
- "￢"
- "ﾀ"
- "ﾬ"
- "￢"
- "ﾀﾭ￢ﾀﾮ￢ﾁﾠ￢ﾁﾡ￢ﾁﾢ￢ﾁﾣ￢ﾁﾤ￢ﾁﾦ￢"
- "ﾁ"
- "ﾧ"
- "￢"
- "ﾁ"
- "ﾨ"
- "￢"
- "ﾁ"
- "ﾩ"
- "￢"
- "ﾁ"
- "ﾪ"
- "￢"
- "ﾁ"
- "ﾫ"
- "￢"
- "ﾁ"
- "ﾬ"
- "￢"
- "ﾁ"
- "ﾭ"
- "￢"
- "ﾁ"
- "ﾮ"
- "￢"
- "ﾁ"
- "ﾯ"
- ""
- "ﾻ"
- ""
- "ﾹﾺﾻﾑﾂﾽﾛﾲﾠﾛﾲﾡﾛﾲﾢ"
- ""
- "ﾛ"
- "ﾲ"
- "ﾣ"
- ""
- "ﾝ"
- "ﾅ"
- "ﾳ"
- ""
- "ﾝ"
- "ﾅ"
- "ﾴ"
- ""
- "ﾝ"
- "ﾅ"
- "ﾵ"
- ""
- "ﾝ"
- "ﾅ"
- "ﾶ"
- "ﾝﾅﾷﾝﾅﾸﾝﾅﾹﾝﾅﾺﾠﾀﾁﾠﾀﾠ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾡ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾢ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾣ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾤ"
- "ﾠ"
- "ﾀﾥﾠﾀﾦﾠﾀﾧﾠﾀﾨﾠﾀﾩﾠﾀﾪﾠ"
- "ﾀ"
- "ﾫ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾬ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾭ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾮ"
- "ﾠﾀﾯﾠﾀﾰﾠﾀﾱﾠﾀﾲﾠﾀﾳﾠﾀﾴ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾵ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾶ"
- ""
- "ﾠ"
- "ﾀ"
- "ﾷ"
- "ﾠﾀﾸ"
- "ﾠﾀﾹﾠﾀﾺﾠﾀﾻﾠﾀﾼﾠﾀﾽﾠﾀﾾ"
- ""
- "ﾠ"
- "ﾀ"
- ""
- ""
- "ﾠ"
- "ﾁ"
- "ﾀ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾁ"
- "ﾠﾁﾂﾠﾁﾃﾠﾁﾄﾠﾁﾅﾠﾁﾆﾠﾁﾇ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾈ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾉ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾊ"
- "ﾠﾁﾋ"
- "ﾠﾁﾌﾠﾁﾍﾠﾁﾎﾠﾁﾏﾠﾁﾐﾠﾁﾑ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾒ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾓ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾔ"
- "ﾠﾁﾕﾠﾁﾖﾠﾁﾗﾠﾁﾘﾠﾁﾙﾠﾁﾚ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾛ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾜ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾝ"
- "ﾠﾁﾞ"
- "ﾠﾁﾟﾠﾁﾠﾠﾁﾡﾠﾁﾢﾠﾁﾣﾠﾁﾤ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾥ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾦ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾧ"
- "ﾠﾁﾨﾠﾁﾩﾠﾁﾪﾠﾁﾫﾠﾁﾬﾠﾁﾭ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾮ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾯ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾰ"
- "ﾠﾁﾱ"
- "ﾠﾁﾲﾠﾁﾳﾠﾁﾴﾠﾁﾵﾠﾁﾶﾠﾁﾷ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾸ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾹ"
- ""
- "ﾠ"
- "ﾁ"
- "ﾺ"
- "ﾠﾁﾻﾠﾁﾼﾠﾁﾽﾠﾁﾾﾠﾁ"
- "",
-
- // \"Byte order marks\", U+FEFF and U+FFFE, each on its own line.
- // The next two lines may appear to be blank or mojibake in some viewers.
- "ﾻ", "ﾾ",
-
- // Unicode Symbols
- //
- // Strings which contain common unicode symbols (e.g. smart quotes)
-
- "ￎﾩ￢ﾉﾈￃﾧ￢ﾈﾚ￢ﾈﾫￋﾜￂﾵ￢ﾉﾤ￢ﾉﾥￃﾷ", "ￃﾥￃﾟ￢ﾈﾂￆﾒￂﾩￋﾙ￢ﾈﾆￋﾚￂﾬ￢ﾀﾦￃﾦ",
- "ￅﾓ￢ﾈﾑￂﾴￂﾮ￢ﾀﾠￂﾥￂﾨￋﾆￃﾸￏﾀ￢ﾀ"
- "ﾜ"
- "￢"
- "ﾀ"
- "ﾘ",
- "ￂﾡ￢ﾄﾢￂﾣￂﾢ￢ﾈﾞￂﾧￂﾶ￢ﾀﾢￂﾪￂﾺ￢ﾀﾓ￢ﾉ"
- "ﾠ",
- "ￂﾸￋﾛￃﾇ￢ﾗﾊￄﾱￋﾜￃﾂￂﾯￋﾘￂ",
- "ￃﾅￃﾍￃﾎￃﾏￋﾝￃﾓￃﾔﾣￃﾒￃﾚￃﾆ￢"
- "ﾘ"
- "ﾃ",
- "ￅﾒ￢ﾀﾞￂﾴ￢ﾀﾰￋﾇￃﾁￂﾨￋﾆￃﾘ￢ﾈﾏ￢ﾀﾝ￢ﾀﾙ",
- "`￢ﾁﾄ￢ﾂﾬ￢ﾀﾹ￢ﾀﾺﾬﾁﾬﾂ￢ﾀﾡￂﾰￂ"
- "ﾷ"
- "￢"
- "ﾀ"
- "ﾚ"
- "￢"
- "ﾀ"
- "ﾔ"
- "ￂ"
- "ﾱ",
- "￢ﾅﾛ￢ﾅﾜ￢ﾅﾝ￢ﾅﾞ",
- "ﾁﾂﾃﾄﾅﾆﾇﾈﾉﾊﾋﾌ"
- ""
- "ﾍ"
- ""
- "ﾎ"
- ""
- "ﾏ"
- ""
- "ﾐ"
- ""
- "ﾑ"
- ""
- "ﾒ"
- "ﾓﾔﾕﾖﾗﾘﾙﾚﾛﾜﾝﾞ"
- ""
- "ﾟ"
- ""
- "ﾠ"
- ""
- "ﾡ"
- ""
- "ﾢ"
- ""
- "ﾣ"
- ""
- "ﾤ"
- "ﾥﾦ"
- "ﾧﾨﾩﾪﾫﾬﾭﾮﾯﾰﾱﾲ"
- ""
- "ﾳ"
- ""
- "ﾴ"
- ""
- "ﾵ"
- ""
- "ﾶ"
- ""
- "ﾷ"
- ""
- "ﾸ"
- "ﾹﾺﾻﾼﾽﾾﾀﾁﾂﾃﾄ"
- ""
- "ﾅ"
- ""
- "ﾆ"
- ""
- "ﾇ"
- ""
- "ﾈ"
- ""
- "ﾉ"
- ""
- "ﾊ"
- "ﾋﾌ"
- "ﾍﾎﾏ",
- "ﾠﾡﾢﾣﾤﾥﾦﾧﾨﾩ",
-
- // Unicode Subscript/Superscript/Accents
- //
- // Strings which contain unicode subscripts/superscripts; can cause
- // rendering issues
-
- "￢ﾁﾰ￢ﾁﾴ￢ﾁﾵ", "￢ﾂﾀ￢ﾂﾁ￢ﾂﾂ", "￢ﾁﾰ￢ﾁﾴ￢ﾁﾵ￢ﾂﾀ￢ﾂﾁ￢ﾂﾂ",
- "￠ﾸﾔ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠"
- "ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ"
- "￠ﾹﾉ￠"
- "ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ"
- "￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠"
- "ﾹﾇ￠ﾹﾇ"
- "￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ "
- "￠ﾸﾔ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠"
- "ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ"
- "￠ﾹﾉ￠"
- "ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ"
- "￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠"
- "ﾹﾇ￠ﾹﾇ"
- "￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ "
- "￠ﾸﾔ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠"
- "ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ"
- "￠ﾹﾉ￠"
- "ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ"
- "￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠"
- "ﾹﾇ￠ﾹﾇ"
- "￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾉ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ￠ﾹﾇ",
-
- // Quotation Marks
- //
- // Strings which contain misplaced quotation marks; can cause encoding
- // errors
-
- "'", "\"", "''", "\"\"", "'\"'", "\"''''\"'\"", "\"'\"'\"''''\"",
- "<foo val=￢ﾀﾜbar￢ﾀﾝ />", "<foo val=￢ﾀﾜbar￢ﾀﾝ />",
- "<foo val=￢ﾀﾝbar￢ﾀﾜ />", "<foo val=`bar' />",
-
- // Two-Byte Characters
- //
- // Strings which contain two-byte characters: can cause rendering issues or
- // character-length issues
-
- "ﾔﾰ￤ﾸﾭ￣ﾁﾕ￣ﾂﾓ￣ﾁﾫ￣ﾁﾂ￣ﾁﾒ￣ﾁﾦ"
- "￤"
- "ﾸ"
- "ﾋ"
- "￣"
- "ﾁ"
- "ﾕ"
- "￣"
- "ﾁ"
- "ﾄ",
- "￣ﾃﾑ￣ﾃﾼ￣ﾃﾆ￣ﾂﾣ￣ﾃﾼ￣ﾁﾸ￨ﾡﾌ￣ﾁﾋ￣ﾁﾪ￣ﾁﾄ￣ﾁﾋ", "￥ﾒﾌ￨ﾣﾽ￦ﾼﾢ￨ﾪﾞ",
- "￩ﾃﾨ￨ﾐﾽ￦ﾠﾼ", "￬ﾂﾬ￭ﾚﾌ￪ﾳﾼ￭ﾕﾙ￬ﾛﾐ ￬ﾖﾴ￭ﾕﾙ￬ﾗﾰ￪ﾵﾬ￬ﾆﾌ",
- "￬ﾰﾦ￬ﾰﾨ￫ﾥﾼ ￭ﾃﾀ￪ﾳﾠ ￬ﾘﾨ "
- "￭ﾎﾲ￬ﾋﾜ￫ﾧﾨ￪ﾳﾼ "
- "￬ﾑﾛ￫ﾋﾤ￫ﾦﾬ "
- "￫ﾘﾠ￫ﾰﾩ￪ﾰﾁ￭ﾕﾘ",
- "ﾤﾾ￦ﾜﾃﾧﾑ￥ﾭﾸ￩ﾙﾢ￨ﾪﾞ￥ﾭﾸﾠﾔ"
- ""
- "ﾩ"
- "ﾶ"
- "￦"
- "ﾉ"
- "ﾀ",
- "￬ﾚﾸ￫ﾞﾀ￫ﾰﾔ￭ﾆﾠ￫ﾥﾴ",
- "ﾠﾜﾎﾠﾜﾱﾠﾝﾹﾠﾱﾓﾠﾱﾸﾠﾲﾖ"
- ""
- "ﾠ"
- "ﾳ"
- "ﾏ",
-
- // Changing length when lowercased
- //
- // Characters which increase in length (2 to 3 bytes) when lowercased
- // Credit: https://twitter.com/jifa/status/625776454479970304
-
- "ﾺ", "ﾾ",
-
- // Japanese Emoticons
- //
- // Strings which consists of Japanese-style emoticons which are popular on
- // the web
-
- "￣ﾃﾽ￠ﾼﾼ￠ﾺﾈﾄￍﾜ￠ﾺﾈ￠ﾼﾽﾾﾉ "
- "￣ﾃﾽ￠ﾼﾼ￠ﾺﾈﾄￍﾜ￠ﾺﾈ￠ﾼﾽﾾﾉ",
- "(ﾽﾡ￢ﾗﾕ ￢ﾈﾀ ￢ﾗﾕﾽﾡ)",
- "ﾽﾀﾽﾨ(ￂﾴ￢ﾈﾀﾽﾀ￢ﾈﾩ", "__ﾾﾛ(,_,*)",
- "￣ﾃﾻ(ﾣ￢ﾈﾀﾣ)￣ﾃﾻ:*:",
- "ﾾﾟﾽﾥ￢ﾜ￣ﾃﾾ￢ﾕﾲ("
- "ﾽﾡ￢ﾗﾕ￢ﾀ￢ﾗﾕﾽﾡ)"
- "￢ﾕﾱ￢ﾜﾽﾥﾾﾟ",
- ",￣ﾀﾂ￣ﾃﾻ:*:￣ﾃﾻ￣ﾂﾜ￢ﾀﾙ( ￢ﾘﾻ ￏﾉ ￢ﾘﾻ )￣ﾀﾂ￣ﾃﾻ:*:￣ﾃﾻ￣ﾂﾜ￢ﾀﾙ",
- "(￢ﾕﾯￂﾰ￢ﾖﾡￂﾰﾼﾉ￢ﾕﾯﾸﾵ "
- "￢ﾔﾻ￢ﾔﾁ￢ﾔﾻ)",
- "(ﾾﾉ￠ﾲﾥﾛﾊ￠ﾲﾥﾼﾉﾾﾉﾻ "
- "￢ﾔﾻ￢ﾔﾁ￢ﾔﾻ",
- "￢ﾔﾬ￢ﾔﾀ￢ﾔﾬ￣ﾃﾎ( ￂﾺ _ ￂﾺ￣ﾃﾎ)", "( ￍﾡￂﾰ ￍﾜￊﾖ ￍﾡￂﾰ)",
-
- // Emoji
- //
- // Strings which contain Emoji; should be the same behavior as two-byte
- // characters, but not always
-
- "ﾟﾘﾍ", "ﾟﾑﾩﾟﾏﾽ",
- "ﾟﾑﾾ ﾟﾙﾇ ﾟﾒﾁ ﾟﾙﾅ ﾟﾙﾆ "
- "ﾟﾙﾋ "
- "ﾟﾙﾎ "
- "ﾟﾙﾍ",
- "ﾟﾐﾵ ﾟﾙﾈ ﾟﾙﾉ ﾟﾙﾊ",
- "￢ﾝﾤﾸﾏ ﾟﾒﾔ ﾟﾒﾌ ﾟﾒﾕ ﾟﾒﾞ "
- "ﾟﾒﾓ "
- "ﾟﾒﾗ "
- "ﾟﾒﾖ "
- "ﾟﾒﾘ "
- "ﾟﾒﾝ "
- "ﾟﾒﾟ ﾟﾒﾜ ﾟﾒﾛ ﾟﾒﾚ "
- "ﾟﾒﾙ",
- "￢ﾜﾋﾟﾏ ﾟﾒﾪﾟﾏ ﾟﾑﾐﾟﾏ "
- "ﾟﾙﾌﾟﾏ "
- "ﾟﾑﾏﾟﾏ "
- "ﾟﾙﾏﾟﾏ",
- "ﾟﾚﾾ ﾟﾆﾒ ﾟﾆﾓ ﾟﾆﾕ ﾟﾆﾖ "
- "ﾟﾆﾗ "
- "ﾟﾆﾙ "
- "ﾟﾏﾧ",
- "0ﾸﾏ￢ﾃﾣ 1ﾸﾏ￢ﾃﾣ 2ﾸﾏ￢ﾃﾣ "
- "3ﾸﾏ￢ﾃﾣ "
- "4ﾸﾏ￢ﾃﾣ "
- "5ﾸﾏ￢ﾃﾣ "
- "6ﾸﾏ￢ﾃﾣ 7ﾸﾏ￢ﾃﾣ 8ﾸﾏ￢ﾃﾣ "
- "9ﾸﾏ￢ﾃﾣ "
- "ﾟﾔﾟ",
-
- // Regional Indicator Symbols
- //
- // Regional Indicator Symbols can be displayed differently across
- // fonts, and have a number of special behaviors
-
- "ﾟﾇﾺﾟﾇﾸﾟﾇﾷﾟﾇﾺﾟﾇﾸ "
- "ﾟﾇﾦﾟﾇﾫﾟﾇﾦﾟﾇﾲﾟﾇﾸ",
- "ﾟﾇﾺﾟﾇﾸﾟﾇﾷﾟﾇﾺﾟﾇﾸﾟﾇﾦ"
- ""
- "ﾟ"
- "ﾇ"
- "ﾫ"
- ""
- "ﾟ"
- "ﾇ"
- "ﾦ"
- ""
- "ﾟ"
- "ﾇ"
- "ﾲ",
- "ﾟﾇﾺﾟﾇﾸﾟﾇﾷﾟﾇﾺﾟﾇﾸﾟﾇﾦ",
-
- // Unicode Numbers
- //
- // Strings which contain unicode numbers; if the code is localized, it
- // should see the input as numeric
-
- "ﾼﾑﾼﾒﾼﾓ", "ﾡﾢﾣ",
-
- // Right-To-Left Strings
- //
- // Strings which contain text that should be rendered RTL if possible (e.g.
- // Arabic, Hebrew)
-
- "ﾫﾅ ﾆﾁﾳ ﾳﾂﾷﾪ "
- "ﾈﾨﾧﾄﾪﾭﾯﾊﾯﾌ, "
- "ﾬﾲﾊﾱﾪﾊ "
- "ﾨﾧﾳﾪﾮﾯﾧﾅ ﾣﾆ "
- "ﾯﾆﾈ. ﾥﾰ ﾇﾆﾧﾟ "
- "ﾧﾄﾳﾪﾧﾱ "
- "ﾈﾪﾆﾵﾊﾨ ﾃﾧﾆ. "
- "ﾣﾇﾑﾄ "
- "ﾧﾊﾷﾧﾄﾊﾧﾌ "
- "ﾨﾱﾊﾷﾧﾆﾊﾧ-"
- "ﾁﾱﾆﾳﾧ "
- "ﾂﾯ "
- "ﾣﾮﾰ. ﾳﾄﾊﾅﾧﾆﾌ "
- "ﾥﾪﾁﾧﾂﾊﾩ "
- "ﾨﾊﾆ "
- "ﾅﾧ, ﾊﾰﾃﾱ "
- "ﾧﾄﾭﾯﾈﾯ "
- "ﾣﾊ "
- "ﾨﾹﾯ, ﾅﾹﾧﾅﾄﾩ "
- "ﾨﾈﾄﾆﾯﾧﾌ "
- "ﾧﾄﾥﾷﾄﾧﾂ ﾹﾄ "
- "ﾥﾊﾈ.",
- "ￗﾑￖﾰￖﾼￗﾨￖﾵￗﾐￗﾩￖﾴￗﾁￗﾙￗﾪ, ￗﾑￖﾸￖﾼￗﾨￖﾸￗﾐ ￗﾐￖﾱￗﾜￖﾹￗﾔￖﾴￗﾙￗﾝ, ￗﾐￖﾵￗﾪ "
- "ￗﾔￖﾷￗﾩￖﾸￖﾼￗﾁￗﾞￖﾷￗﾙￖﾴￗﾝ, ￗﾕￖﾰￗﾐￖﾵￗﾪ ￗﾔￖﾸￗﾐￖﾸￗﾨￖﾶￗﾥ",
- "ￗﾔￖﾸￗﾙￖﾰￗﾪￖﾸￗﾔtestﾧﾄﾵﾁ"
- "ﾭ"
- ""
- "ﾧ"
- ""
- "ﾪ"
- " "
- "ﾧﾄﾪﾑﾭﾈﾄ",
- "ﾷﾽ", "ﾷﾺ",
- "ﾅﾏﾆﾎﾧﾂﾎﾴﾎﾩﾏ "
- "ﾳﾏﾨﾏﾄﾐ "
- "ﾧﾐﾳﾒﾪﾐﾮﾒﾯﾎﾧﾅ"
- ""
- "ﾐ"
- " "
- "ﾧﾄﾄﾑﾏﾺﾎﾩﾐ ﾁﾐﾊ "
- "ﾧﾄﾆﾑﾏﾸﾏﾅﾐ "
- "ﾧﾄﾒﾂﾎﾧﾦﾐﾅﾎﾩﾐ "
- "ﾈﾎﾁﾐﾊﾅ "
- "ﾊﾎﾮﾏﾵﾑﾎ "
- "ﾧﾄﾪﾑﾎﾷﾒﾨﾐﾊﾂﾎ"
- ""
- "ﾧ"
- ""
- "ﾪ"
- ""
- "ﾏ"
- " "
- "ﾧﾄﾒﾭﾧﾳﾏﾈﾨﾐﾊﾑ"
- ""
- "ﾎ"
- ""
- "ﾩ"
- ""
- "ﾏ"
- ""
- "ﾌ"
- " ",
-
- // Trick Unicode
- //
- // Strings which contain unicode with unusual properties (e.g.
- // Right-to-left override) (c.f.
- // http://www.unicode.org/charts/PDF/U2000.pdf)
-
- "￢ﾀﾪ￢ﾀﾪtest￢ﾀﾪ", "￢ﾀﾫtest￢ﾀﾫ", "￢ﾀﾩtest￢ﾀﾩ",
- "test￢ﾁﾠtest￢ﾀﾫ", "￢ﾁﾦtest￢ﾁﾧ",
-
- // Zalgo Text
- //
- // Strings which contain \"corrupted\" text. The corruption will not appear
- // in non-HTML text, however. (via http://www.eeemo.net)
-
- "￡ﾹﾰￌﾺￌﾺￌﾕoￍﾞ "
- "ￌﾷiￌﾲￌﾬￍﾇￌﾪￍﾙnￌﾝￌﾗￍﾕvￌﾟￌﾜￌﾘￌﾦￍﾟoￌﾶￌﾙￌﾰￌ"
- "ﾠ"
- "k"
- "ￃ"
- "ﾨ"
- "ￍ"
- "ﾚ"
- "ￌ"
- "ﾮ"
- "ￌ"
- "ﾺ"
- "ￌ"
- "ﾪ"
- "ￌ"
- "ﾹ"
- "ￌ"
- "ﾱ"
- "ￌ"
- "ﾤ"
- " "
- "ￌﾖtￌﾝￍﾕￌﾳￌﾣￌﾻￌﾪￍﾞhￌﾼￍﾓￌﾲￌﾦￌﾳￌﾘￌﾲeￍﾇￌﾣￌﾰￌﾦￌﾬￍﾎ "
- "ￌﾢￌﾼￌﾻￌﾱￌﾘhￍﾚￍﾎￍﾙￌﾜￌﾣￌﾲￍﾅiￌﾦￌﾲￌﾣￌﾰￌﾤvￌﾻￍﾍeￌﾺￌﾭￌﾳￌﾪￌﾰ-"
- "mￌﾢiￍﾅnￌﾖￌﾺￌﾞￌﾲￌﾯￌﾰdￌﾵￌﾼￌﾟￍﾙￌﾩￌﾼￌﾘￌﾳ "
- "ￌﾞￌﾥￌﾱￌﾳￌﾭrￌﾛￌﾗￌﾘeￍﾙpￍﾠrￌﾼￌ"
- "ﾞ"
- "ￌ"
- "ﾻ"
- "ￌ"
- "ﾭ"
- "ￌ"
- "ﾗ"
- "e"
- "ￌ"
- "ﾺ"
- "ￌ"
- "ﾠ"
- "ￌ"
- "ﾣ"
- "ￍ"
- "ﾟ"
- "s"
- "ￌ"
- "ﾘ"
- "ￍ"
- "ﾇ"
- "ￌ"
- "ﾳ"
- "ￍ"
- "ﾍ"
- "ￌ"
- "ﾝ"
- "ￍ"
- "ﾉ"
- "e"
- "ￍ"
- "ﾉ"
- "ￌ"
- "ﾥ"
- "ￌ"
- "ﾯ"
- "ￌ"
- "ﾞ"
- "ￌ"
- "ﾲ"
- "ￍ"
- "ﾚ"
- "ￌ"
- "ﾬￍﾜￇﾹￌﾬￍﾎￍﾎￌﾟￌﾖￍﾇￌﾤtￍﾍￌﾬￌﾤￍﾓￌﾼￌﾭￍﾘￍﾅiￌﾪￌﾱnￍ"
- "ﾠ"
- "g"
- "ￌ"
- "ﾴ"
- "ￍ"
- "ﾉ"
- " "
- "ￍﾏￍﾉￍﾅcￌﾬￌﾟhￍﾡaￌﾫￌﾻￌﾯￍﾘoￌﾫￌﾟￌﾖￍﾍￌﾙￌﾝￍﾉsￌﾗￌﾦￌﾲ.ￌﾨￌﾹￍﾈￌﾣ",
- "ￌﾡￍﾓￌﾞￍﾅIￌﾗￌﾘￌﾦￍﾝnￍﾇￍﾇￍﾙvￌﾮￌﾫokￌﾲￌﾫￌﾙￍﾈiￌﾖￍﾙￌﾭￌﾹￌ"
- "ﾠ"
- "ￌ"
- "ﾞ"
- "n"
- "ￌ"
- "ﾡ"
- "ￌ"
- "ﾻ"
- "ￌ"
- "ﾮ"
- "ￌ"
- "ﾣ"
- "ￌ"
- "ﾺ"
- "g"
- "ￌ"
- "ﾲ"
- "ￍ"
- "ﾈ"
- "ￍ"
- "ﾙ"
- "ￌ"
- "ﾭ"
- "ￍﾙￌﾬￍﾎ ￌﾰtￍﾔￌﾦhￌﾞￌﾲeￌﾢￌﾤ "
- "ￍﾍￌﾬￌﾲￍﾖfￌﾴￌﾘￍﾕￌﾣￃﾨￍﾖ￡ﾺﾹￌﾥￌﾩlￍﾖￍﾔￍﾚiￍﾓￍﾚￌﾦￍ"
- "ﾠ"
- "n"
- "ￍ"
- "ﾖ"
- "ￍ"
- "ﾍ"
- "ￌ"
- "ﾗ"
- "ￍ"
- "ﾓ"
- "ￌ"
- "ﾳ"
- "ￌ"
- "ﾮ"
- "g"
- "ￍ"
- "ﾍ"
- " "
- "ￌﾨoￍﾚￌﾪￍﾡfￌﾘￌﾣￌﾬ "
- "ￌﾖￌﾘￍﾖￌﾟￍﾙￌﾮcￒﾉￍﾔￌﾫￍﾖￍﾓￍﾇￍﾖￍﾅhￌﾵￌﾤￌﾣￍﾚￍﾔￃﾡￌﾗￌﾼￍﾕￍﾅoￌﾼￌﾣￌﾥsￌﾱￍﾈￌﾺￌﾖￌﾦￌﾻￍﾢ."
- "ￌﾛￌﾖￌﾞￌﾠￌﾫￌﾰ",
- "ￌﾗￌﾺￍﾖￌﾹￌﾯￍﾓ￡ﾹﾮￌﾤￍﾍￌﾥￍﾇￍﾈhￌﾲￌﾁeￍﾏￍﾓￌﾼￌﾗￌﾙￌﾼￌﾣￍﾔ "
- "ￍﾇￌﾜￌﾱￌﾠￍﾓￍﾍￍﾅNￍﾕￍﾠeￌﾗￌﾱzￌ"
- "ﾘ"
- "ￌ"
- "ﾝ"
- "ￌ"
- "ﾜ"
- "ￌ"
- "ﾺ"
- "ￍ"
- "ﾙ"
- "p"
- "ￌ"
- "ﾤ"
- "ￌ"
- "ﾺ"
- "ￌ"
- "ﾹ"
- "ￍ"
- "ﾍ"
- "ￌ"
- "ﾯ"
- "ￍ"
- "ﾚ"
- "e"
- "ￌ"
- "ﾠ"
- "ￌ"
- "ﾻ"
- "ￌ"
- "ﾠ"
- "ￍ"
- "ﾜ"
- "r"
- "ￌ"
- "ﾨ"
- "ￌ"
- "ﾤ"
- "ￍ"
- "ﾍ"
- "ￌ"
- "ﾺ"
- "ￌﾖￍﾔￌﾖￌﾖdￌﾠￌﾟￌﾭￌﾬￌﾝￍﾟiￌﾦￍﾖ"
- "ￌ"
- "ﾩ"
- "ￍ"
- "ﾓ"
- "ￍ"
- "ﾔ"
- "ￌ"
- "ﾤ"
- "a"
- "ￌ"
- "ﾠ"
- "ￌ"
- "ﾗ"
- "ￌ"
- "ﾬ"
- "ￍ"
- "ﾉ"
- "ￌ"
- "ﾙ"
- "n"
- "ￍ"
- "ﾚ"
- "ￍ"
- "ﾜ"
- " "
- "ￌﾻￌﾞￌﾰￍﾚￍﾅhￌﾵￍﾉiￌﾳￌﾞvￌﾢￍﾇ￡ﾸﾙￍﾎￍﾟ-ￒﾉￌﾭￌﾩￌﾼￍﾔmￌﾤￌﾭￌﾫiￍﾕￍﾇￌﾝￌﾦnￌﾗￍﾙ￡ﾸﾍￌﾟ "
- "ￌﾯￌﾲￍﾕￍﾞￇﾫￌﾟￌﾯￌﾰￌﾲￍﾙￌﾻￌﾝf "
- "ￌﾪￌﾰￌﾰￌﾗￌﾖￌﾭￌﾘￍﾘcￌﾦￍﾍￌﾲￌﾞￍﾍￌﾩￌﾙ￡ﾸﾥￍﾚaￌﾮￍﾎￌﾟￌﾙￍﾜￆﾡￌﾩￌﾹￍﾎsￌﾤ.ￌﾝￌﾝ "
- "ￒﾉZￌﾡￌﾖￌﾜￍﾖￌﾰￌﾣￍﾉￌﾜaￍﾖￌﾰￍﾙￌﾬￍﾡlￌﾲￌﾫￌﾳￍﾍￌﾩgￌﾡￌﾟￌﾼￌﾱￍﾚￌﾞￌﾬￍﾅoￌﾗￍﾜ.ￌﾟ",
- "ￌﾦHￌﾬￌﾤￌﾗￌﾤￍﾝeￍﾜ ￌﾜￌﾥￌﾝￌﾻￍﾍￌﾟￌﾁwￌﾕhￌﾖￌﾯￍﾓoￌﾝￍﾙￌﾖￍﾎￌﾱￌﾮ "
- "ￒﾉￌﾺￌﾙￌﾞￌﾟￍﾈWￌﾷￌﾼￌﾭaￌﾺￌﾪￍﾍￄﾯￍﾈￍﾕￌﾭￍﾙￌﾯￌﾜtￌﾶￌﾼￌﾮsￌﾘￍﾙￍﾖￌﾕ "
- "ￌﾠￌﾫￌﾠBￌﾻￍﾍￍﾙￍﾉￌﾳￍﾅeￌﾵhￌﾵￌ"
- "ﾬ"
- "ￍ"
- "ﾇ"
- "ￌ"
- "ﾫ"
- "ￍ"
- "ﾙ"
- "i"
- "ￌ"
- "ﾹ"
- "ￍ"
- "ﾓ"
- "ￌ"
- "ﾳ"
- "ￌ"
- "ﾳ"
- "ￌ"
- "ﾮ"
- "ￍ"
- "ﾎ"
- "ￌ"
- "ﾫ"
- "ￌ"
- "ﾕ"
- "n"
- "ￍ"
- "ﾟ"
- "d"
- "ￌ"
- "ﾴ"
- "ￌ"
- "ﾪ"
- "ￌ"
- "ﾜ"
- "ￌ"
- "ﾖ"
- " "
- "ￌﾰￍﾉￌﾩￍﾇￍﾙￌﾲￍﾞￍﾅTￍﾖￌﾼￍﾓￌﾪￍﾢhￍﾏￍﾓￌﾮￌﾻeￌﾬￌﾝￌﾟￍﾅ "
- "ￌﾤￌﾹￌﾝWￍﾙￌﾞￌﾝￍﾔￍﾇￍﾝￍﾅaￍﾏￍﾓￍﾔￌﾹￌﾼￌﾣlￌﾴￍﾔￌﾰￌﾤￌﾟￍﾔ￡ﾸﾽￌﾫ.ￍﾕ",
- "Zￌﾮￌﾞￌﾠￍﾙￍﾔￍﾅ￡ﾸﾀￌﾗￌﾞￍﾈￌﾻￌ"
- "ﾗ"
- "￡"
- "ﾸ"
- "ﾶ"
- "ￍ"
- "ﾙ"
- "ￍ"
- "ﾎ"
- "ￌ"
- "ﾯ"
- "ￌ"
- "ﾹ"
- "ￌ"
- "ﾞ"
- "ￍ"
- "ﾓ"
- "G"
- "ￌ"
- "ﾻ"
- "O"
- "ￌ"
- "ﾭ"
- "ￌ"
- "ﾗ"
- "ￌ"
- "ﾮ",
-
- // Unicode Upsidedown
- //
- // Strings which contain unicode with an \"upsidedown\" effect (via
- // http://www.upsidedowntext.com)
-
- "ￋﾙﾐnb￡ﾴﾉlﾐ ﾐuￆﾃﾐﾯ ￇﾝﾹolop "
- "ￊﾇￇﾝ "
- "ￇﾝﾹoqﾐl "
- "ￊﾇn "
- "ￊﾇunp￡ﾴﾉp￡ﾴﾉﾔu￡ﾴﾉ ﾹodﾯￇﾝￊﾇ "
- "poﾯsn￡ﾴﾉￇﾝ "
- "op "
- "pￇﾝs "
- "'ￊﾇ￡ﾴﾉlￇﾝ "
- "ￆﾃu￡ﾴﾉﾔs￡ﾴﾉd￡ﾴﾉpﾐ "
- "ﾹnￊﾇￇﾝￊﾇﾔￇﾝsuoﾔ "
- "'ￊﾇￇﾝﾯﾐ "
- "ￊﾇ￡ﾴﾉs "
- "ﾹolop ﾯnsd￡ﾴﾉ "
- "ﾯￇﾝﾹoￋﾥ",
- "00ￋﾙￆﾖ$-",
-
- // Unicode font
- //
- // Strings which contain bold/italic/etc. versions of normal characters
-
- "ﾼﾴﾽﾈﾽﾅ ﾽﾑﾽﾕﾽﾉﾽﾃﾽﾋ "
- "ﾽﾂﾽﾒﾽﾏﾽﾗﾽﾎ "
- "ﾽﾆﾽﾏﾽﾘ ﾽﾊﾽﾕﾽﾍﾽﾐﾽﾓ "
- "ﾽﾏﾽﾖﾽﾅﾽﾒ "
- "ﾽﾔﾽﾈﾽﾅ "
- "ﾽﾌﾽﾁﾽﾚﾽﾙ ﾽﾄﾽﾏﾽﾇ",
- "ﾝﾐﾓﾝﾐﾡﾝﾐﾞ "
- "ﾝﾐﾪﾝﾐﾮﾝﾐﾢﾝﾐﾜﾝﾐﾤ "
- "ﾝﾐﾛﾝﾐﾫﾝﾐﾨﾝﾐﾰﾝﾐﾧ "
- "ﾝﾐﾟﾝﾐﾨﾝﾐﾱ "
- "ﾝﾐﾣﾝﾐﾮﾝﾐﾦﾝﾐﾩﾝﾐﾬ "
- "ﾝﾐﾨﾝﾐﾯﾝﾐﾞﾝﾐﾫ "
- "ﾝﾐﾭﾝﾐﾡﾝﾐﾞ "
- "ﾝﾐﾥﾝﾐﾚﾝﾐﾳﾝﾐﾲ "
- "ﾝﾐﾝﾝﾐﾨﾝﾐﾠ",
- "ﾝﾕﾝﾖﾍﾝﾖﾊ "
- "ﾝﾖﾖﾝﾖﾚﾝﾖﾎﾝﾖﾈﾝﾖﾐ "
- "ﾝﾖﾇﾝﾖﾗﾝﾖﾔﾝﾖﾜﾝﾖﾓ "
- "ﾝﾖﾋﾝﾖﾔﾝﾖﾝ "
- "ﾝﾖﾏﾝﾖﾚﾝﾖﾒﾝﾖﾕﾝﾖﾘ "
- "ﾝﾖﾔﾝﾖﾛﾝﾖﾊﾝﾖﾗ "
- "ﾝﾖﾙﾝﾖﾍﾝﾖﾊ "
- "ﾝﾖﾑﾝﾖﾆﾝﾖﾟﾝﾖﾞ "
- "ﾝﾖﾉﾝﾖﾔﾝﾖﾌ",
- "ﾝﾑﾻﾝﾒﾉﾝﾒﾆ "
- "ﾝﾒﾒﾝﾒﾖﾝﾒﾊﾝﾒﾄﾝﾒﾌ "
- "ﾝﾒﾃﾝﾒﾓﾝﾒﾐﾝﾒﾘﾝﾒﾏ "
- "ﾝﾒﾇﾝﾒﾐﾝﾒﾙ "
- "ﾝﾒﾋﾝﾒﾖﾝﾒﾎﾝﾒﾑﾝﾒﾔ "
- "ﾝﾒﾐﾝﾒﾗﾝﾒﾆﾝﾒﾓ "
- "ﾝﾒﾕﾝﾒﾉﾝﾒﾆ "
- "ﾝﾒﾍﾝﾒﾂﾝﾒﾛﾝﾒﾚ "
- "ﾝﾒﾅﾝﾒﾐﾝﾒﾈ",
- "ﾝﾓﾣﾝﾓﾱﾝﾓﾮ "
- "ﾝﾓﾺﾝﾓﾾﾝﾓﾲﾝﾓﾬﾝﾓﾴ "
- "ﾝﾓﾫﾝﾓﾻﾝﾓﾸﾝﾔﾀﾝﾓﾷ "
- "ﾝﾓﾯﾝﾓﾸﾝﾔﾁ "
- "ﾝﾓﾳﾝﾓﾾﾝﾓﾶﾝﾓﾹﾝﾓﾼ "
- "ﾝﾓﾸﾝﾓﾝﾓﾮﾝﾓﾻ "
- "ﾝﾓﾽﾝﾓﾱﾝﾓﾮ "
- "ﾝﾓﾵﾝﾓﾪﾝﾔﾃﾝﾔﾂ "
- "ﾝﾓﾭﾝﾓﾸﾝﾓﾰ",
- "ﾝﾕﾋﾝﾕﾙﾝﾕﾖ "
- "ﾝﾕﾢﾝﾕﾦﾝﾕﾚﾝﾕﾔﾝﾕﾜ "
- "ﾝﾕﾓﾝﾕﾣﾝﾕﾠﾝﾕﾨﾝﾕﾟ "
- "ﾝﾕﾗﾝﾕﾠﾝﾕﾩ "
- "ﾝﾕﾛﾝﾕﾦﾝﾕﾞﾝﾕﾡﾝﾕﾤ "
- "ﾝﾕﾠﾝﾕﾧﾝﾕﾖﾝﾕﾣ "
- "ﾝﾕﾥﾝﾕﾙﾝﾕﾖ "
- "ﾝﾕﾝﾝﾕﾒﾝﾕﾫﾝﾕﾪ "
- "ﾝﾕﾕﾝﾕﾠﾝﾕﾘ",
- "ﾝﾚﾃﾝﾚﾑﾝﾚﾎ "
- "ﾝﾚﾚﾝﾚﾞﾝﾚﾒﾝﾚﾌﾝﾚﾔ "
- "ﾝﾚﾋﾝﾚﾛﾝﾚﾘﾝﾚﾠﾝﾚﾗ "
- "ﾝﾚﾏﾝﾚﾘﾝﾚﾡ "
- "ﾝﾚﾓﾝﾚﾞﾝﾚﾖﾝﾚﾙﾝﾚﾜ "
- "ﾝﾚﾘﾝﾚﾟﾝﾚﾎﾝﾚﾛ "
- "ﾝﾚﾝﾝﾚﾑﾝﾚﾎ "
- "ﾝﾚﾕﾝﾚﾊﾝﾚﾣﾝﾚﾢ "
- "ﾝﾚﾍﾝﾚﾘﾝﾚﾐ",
- "￢ﾒﾯ￢ﾒﾣ￢ﾒﾠ ￢ﾒﾬ￢ﾒﾰ￢ﾒﾤ￢ﾒﾞ￢ﾒﾦ "
- "￢ﾒﾝ￢ﾒﾭ￢ﾒﾪ￢ﾒﾲ￢ﾒﾩ "
- "￢ﾒﾡ￢ﾒﾪ￢ﾒﾳ "
- "￢ﾒﾥ￢ﾒﾰ￢ﾒﾨ￢ﾒﾫ￢ﾒﾮ "
- "￢ﾒﾪ￢ﾒﾱ￢ﾒﾠ￢ﾒﾭ "
- "￢ﾒﾯ￢ﾒﾣ￢ﾒﾠ "
- "￢ﾒﾧ￢ﾒﾜ￢ﾒﾵ￢ﾒﾴ "
- "￢ﾒﾟ￢ﾒﾪ￢ﾒﾢ",
-
- // Script Injection
- //
- // Strings which attempt to invoke a benign script injection; shows
- // vulnerability to XSS
-
- "<script>alert(123)</script>",
- "<script>alert('123');</script>",
- "<img src=x onerror=alert(123) />",
- "<svg><script>123<1>alert(123)</script>", "\"><script>alert(123)</script>",
- "'><script>alert(123)</script>", "><script>alert(123)</script>",
- "</script><script>alert(123)</script>",
- "< / script >< script >alert(123)< / script >",
- " onfocus=JaVaSCript:alert(123) autofocus",
- "\" onfocus=JaVaSCript:alert(123) autofocus",
- "' onfocus=JaVaSCript:alert(123) autofocus",
- "ﾼﾜscriptﾼﾞalert(123)ﾼﾜ/scriptﾼﾞ",
- "<sc<script>ript>alert(123)</sc</script>ript>",
- "--><script>alert(123)</script>", "\";alert(123);t=\"", "';alert(123);t='",
- "JavaSCript:alert(123)", ";alert(123);", "src=JaVaSCript:prompt(132)",
- "\"><script>alert(123);</script x=\"", "'><script>alert(123);</script x='",
- "><script>alert(123);</script x=",
- "\" autofocus onkeyup=\"javascript:alert(123)",
- "' autofocus onkeyup='javascript:alert(123)",
- "<script\\x20type=\"text/javascript\">javascript:alert(1);</script>",
- "<script\\x3Etype=\"text/javascript\">javascript:alert(1);</script>",
- "<script\\x0Dtype=\"text/javascript\">javascript:alert(1);</script>",
- "<script\\x09type=\"text/javascript\">javascript:alert(1);</script>",
- "<script\\x0Ctype=\"text/javascript\">javascript:alert(1);</script>",
- "<script\\x2Ftype=\"text/javascript\">javascript:alert(1);</script>",
- "<script\\x0Atype=\"text/javascript\">javascript:alert(1);</script>",
- "'`\"><\\x3Cscript>javascript:alert(1)</script>",
- "'`\"><\\x00script>javascript:alert(1)</script>",
- "ABC<div style=\"x\\x3Aexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:expression\\x5C(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:expression\\x00(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:exp\\x00ression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:exp\\x5Cression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x0Aexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x09expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE3\\x80\\x80expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x84expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xC2\\xA0expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x80expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x8Aexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x0Dexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x0Cexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x87expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xEF\\xBB\\xBFexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x20expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x88expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x00expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x8Bexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x86expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x85expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x82expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\x0Bexpression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x81expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x83expression(javascript:alert(1)\">DEF",
- "ABC<div style=\"x:\\xE2\\x80\\x89expression(javascript:alert(1)\">DEF",
- "<a href=\"\\x0Bjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x0Fjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xC2\\xA0javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x05javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE1\\xA0\\x8Ejavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x18javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x11javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x88javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x89javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x80javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x17javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x03javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x0Ejavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x1Ajavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x00javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x10javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x82javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x20javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x13javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x09javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x8Ajavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x14javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x19javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\xAFjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x1Fjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x81javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x1Djavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x87javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x07javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE1\\x9A\\x80javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x83javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x04javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x01javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x08javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x84javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x86javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE3\\x80\\x80javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x12javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x0Djavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x0Ajavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x0Cjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x15javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\xA8javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x16javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x02javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x1Bjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x06javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\xA9javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x80\\x85javascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x1Ejavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\xE2\\x81\\x9Fjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"\\x1Cjavascript:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"javascript\\x00:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"javascript\\x3A:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"javascript\\x09:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"javascript\\x0D:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "<a href=\"javascript\\x0A:javascript:alert(1)\" "
- "id=\"fuzzelement1\">test</a>",
- "`\"'><img src=xxx:x \\x0Aonerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x22onerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x0Bonerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x0Donerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x2Fonerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x09onerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x0Conerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x00onerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x27onerror=javascript:alert(1)>",
- "`\"'><img src=xxx:x \\x20onerror=javascript:alert(1)>",
- "\"`'><script>\\x3Bjavascript:alert(1)</script>",
- "\"`'><script>\\x0Djavascript:alert(1)</script>",
- "\"`'><script>\\xEF\\xBB\\xBFjavascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x81javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x84javascript:alert(1)</script>",
- "\"`'><script>\\xE3\\x80\\x80javascript:alert(1)</script>",
- "\"`'><script>\\x09javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x89javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x85javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x88javascript:alert(1)</script>",
- "\"`'><script>\\x00javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\xA8javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x8Ajavascript:alert(1)</script>",
- "\"`'><script>\\xE1\\x9A\\x80javascript:alert(1)</script>",
- "\"`'><script>\\x0Cjavascript:alert(1)</script>",
- "\"`'><script>\\x2Bjavascript:alert(1)</script>",
- "\"`'><script>\\xF0\\x90\\x96\\x9Ajavascript:alert(1)</script>",
- "\"`'><script>-javascript:alert(1)</script>",
- "\"`'><script>\\x0Ajavascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\xAFjavascript:alert(1)</script>",
- "\"`'><script>\\x7Ejavascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x87javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x81\\x9Fjavascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\xA9javascript:alert(1)</script>",
- "\"`'><script>\\xC2\\x85javascript:alert(1)</script>",
- "\"`'><script>\\xEF\\xBF\\xAEjavascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x83javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x8Bjavascript:alert(1)</script>",
- "\"`'><script>\\xEF\\xBF\\xBEjavascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x80javascript:alert(1)</script>",
- "\"`'><script>\\x21javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x82javascript:alert(1)</script>",
- "\"`'><script>\\xE2\\x80\\x86javascript:alert(1)</script>",
- "\"`'><script>\\xE1\\xA0\\x8Ejavascript:alert(1)</script>",
- "\"`'><script>\\x0Bjavascript:alert(1)</script>",
- "\"`'><script>\\x20javascript:alert(1)</script>",
- "\"`'><script>\\xC2\\xA0javascript:alert(1)</script>",
- "<img \\x00src=x onerror=\"alert(1)\">",
- "<img \\x47src=x onerror=\"javascript:alert(1)\">",
- "<img \\x11src=x onerror=\"javascript:alert(1)\">",
- "<img \\x12src=x onerror=\"javascript:alert(1)\">",
- "<img\\x47src=x onerror=\"javascript:alert(1)\">",
- "<img\\x10src=x onerror=\"javascript:alert(1)\">",
- "<img\\x13src=x onerror=\"javascript:alert(1)\">",
- "<img\\x32src=x onerror=\"javascript:alert(1)\">",
- "<img\\x47src=x onerror=\"javascript:alert(1)\">",
- "<img\\x11src=x onerror=\"javascript:alert(1)\">",
- "<img \\x47src=x onerror=\"javascript:alert(1)\">",
- "<img \\x34src=x onerror=\"javascript:alert(1)\">",
- "<img \\x39src=x onerror=\"javascript:alert(1)\">",
- "<img \\x00src=x onerror=\"javascript:alert(1)\">",
- "<img src\\x09=x onerror=\"javascript:alert(1)\">",
- "<img src\\x10=x onerror=\"javascript:alert(1)\">",
- "<img src\\x13=x onerror=\"javascript:alert(1)\">",
- "<img src\\x32=x onerror=\"javascript:alert(1)\">",
- "<img src\\x12=x onerror=\"javascript:alert(1)\">",
- "<img src\\x11=x onerror=\"javascript:alert(1)\">",
- "<img src\\x00=x onerror=\"javascript:alert(1)\">",
- "<img src\\x47=x onerror=\"javascript:alert(1)\">",
- "<img src=x\\x09onerror=\"javascript:alert(1)\">",
- "<img src=x\\x10onerror=\"javascript:alert(1)\">",
- "<img src=x\\x11onerror=\"javascript:alert(1)\">",
- "<img src=x\\x12onerror=\"javascript:alert(1)\">",
- "<img src=x\\x13onerror=\"javascript:alert(1)\">",
- "<img[a][b][c]src[d]=x[e]onerror=[f]\"alert(1)\">",
- "<img src=x onerror=\\x09\"javascript:alert(1)\">",
- "<img src=x onerror=\\x10\"javascript:alert(1)\">",
- "<img src=x onerror=\\x11\"javascript:alert(1)\">",
- "<img src=x onerror=\\x12\"javascript:alert(1)\">",
- "<img src=x onerror=\\x32\"javascript:alert(1)\">",
- "<img src=x onerror=\\x00\"javascript:alert(1)\">",
- "<a "
- "href=javascript:javascript:alert(1)>XXX</"
- "a>",
- "<img src=\"x` `<script>javascript:alert(1)</script>\"` `>",
- "<img src onerror /\" '\"= alt=javascript:alert(1)//\">",
- "<title onpropertychange=javascript:alert(1)></title><title title=>",
- "<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x "
- "onerror=javascript:alert(1)></a>\">",
- "<!--[if]><script>javascript:alert(1)</script -->",
- "<!--[if<img src=x onerror=javascript:alert(1)//]> -->",
- "<script src=\"/\%(jscript)s\"></script>",
- "<script src=\"\\%(jscript)s\"></script>",
- "<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">",
- "<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>",
- "<IMG SRC=# onmouseover=\"alert('xxs')\">",
- "<IMG SRC= onmouseover=\"alert('xxs')\">",
- "<IMG onmouseover=\"alert('xxs')\">",
- "<IMG "
- "SRC=javascript:a&#"
- "108;ert('XSS')>",
- "<IMG "
- "SRC=javascr&#"
- "0000105pt:aler&#"
- "0000116&#"
- "0000040'XSS')>",
- "<IMG "
- "SRC=javascript:al&#"
- "x65rt('XSS')>",
- "<IMG SRC=\"jav ascript:alert('XSS');\">",
- "<IMG SRC=\"jav	ascript:alert('XSS');\">",
- "<IMG SRC=\"jav
ascript:alert('XSS');\">",
- "<IMG SRC=\"jav
ascript:alert('XSS');\">",
- "perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out",
- "<IMG SRC=\"  javascript:alert('XSS');\">",
- "<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
- "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>",
- "<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
- "<<SCRIPT>alert(\"XSS\");//<</SCRIPT>",
- "<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >",
- "<SCRIPT SRC=//ha.ckers.org/.j>", "<IMG SRC=\"javascript:alert('XSS')\"",
- "<iframe src=http://ha.ckers.org/scriptlet.html <", "\\\";alert('XSS');//",
- "<u oncopy=alert()> Copy me</u>",
- "<i onwheel=alert(1)> Scroll over me </i>", "<plaintext>",
- "http://a/%%30%30", "</textarea><script>alert(123)</script>",
-
- // SQL Injection
- //
- // Strings which can cause a SQL injection if inputs are not sanitized
-
- "1;DROP TABLE users", "1'; DROP TABLE users-- 1", "' OR 1=1 -- 1",
- "' OR '1'='1", " ", "%", "_",
-
- // Server Code Injection
- //
- // Strings which can cause user to run code on server as a privileged user
- //(c.f. https://news.ycombinator.com/item?id=7665153)
-
- "-", "--", "--version", "--help", "$USER",
- "/dev/null; touch /tmp/blns.fail ; echo", "`touch /tmp/blns.fail`",
- "$(touch /tmp/blns.fail)", "@{[system \"touch /tmp/blns.fail\"]}",
-
- // Command Injection (Ruby)
- //
- // Strings which can call system commands within Ruby/Rails applications
-
- "eval(\"puts 'hello world'\")", "System(\"ls -al /\")", "`ls -al /`",
- "Kernel.exec(\"ls -al /\")", "Kernel.exit(1)", "%x('ls -al /')",
-
- // XXE Injection (XML)
- //
- // String which can reveal system files when parsed by a badly configured
- // XML parser
-
- "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?><!DOCTYPE foo [ <!ELEMENT "
- "foo ANY ><!ENTITY xxe SYSTEM \"file:///etc/passwd\" >]><foo>&xxe;</foo>",
-
- // Unwanted Interpolation
- //
- // Strings which can be accidentally expanded into different strings if
- // evaluated in the wrong context, e.g. used as a printf format string or
- // via
- // Perl or
- // shell eval. Might expose sensitive data from the program doing the
- // interpolation, or might just represent the wrong string.
-
- "$HOME", "$ENV{'HOME'}", "%d", "%s", "{0}", "%*.*s", "File:///",
-
- // File Inclusion
- //
- // Strings which can cause user to pull in files that should not be a part
- // of a web server
-
- "../../../../../../../../../../../etc/passwd%00",
- "../../../../../../../../../../../etc/hosts",
-
- // Known CVEs and Vulnerabilities
- //
- // Strings that test for known vulnerabilities
-
- "() { 0; }; touch /tmp/blns.shellshock1.fail;",
- "() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }",
- "<<< %s(un='%s') = %u", "+++ATH0",
-
- // MSDOS/Windows Special Filenames
- //
- // Strings which are reserved characters in MSDOS/Windows
-
- "CON", "PRN", "AUX", "CLOCK$", "NUL", "A:", "ZZ:", "COM1", "LPT1", "LPT2",
- "LPT3", "COM2", "COM3", "COM4",
-
- // IRC specific strings
- //
- // Strings that may occur on IRC clients that make security products freak
- // out
-
- "DCC SEND STARTKEYLOGGER 0 0 0",
-
- // Scunthorpe Problem
- //
- // Innocuous strings which may be blocked by profanity filters
- //(https://en.wikipedia.org/wiki/Scunthorpe_problem)
-
- "Scunthorpe General Hospital", "Penistone Community Church",
- "Lightwater Country Park", "Jimmy Clitheroe", "Horniman Museum",
- "shitake mushrooms", "RomansInSussex.co.uk", "http://www.cum.qc.ca/",
- "Craig Cockburn, Software Specialist", "Linda Callahan",
- "Dr. Herman I. Libshitz", "magna cum laude", "Super Bowl XXX",
- "medieval erection of parapets", "evaluate", "mocha", "expression",
- "Arsenal canal", "classic", "Tyson Gay", "Dick Van Dyke", "basement",
-
- // Human injection
- //
- // Strings which may cause human to reinterpret worldview
-
- "If you're reading this, you've been in a coma for almost 20 years now. "
- "We're trying a new technique. We don't know where this message will end "
- "up in your "
- "dream, but we hope it works. Please wake up, we miss you.",
-
- // Terminal escape codes
- //
- // Strings which punish the fools who use cat/type on this file
-
- "Roses are [0;31mred[0m, violets are [0;34mblue. Hope you enjoy "
- "terminal hue",
- "But now...[20Cfor my greatest trick...[8m",
- "The quick brown fox... [Beeeep]",
-
- // iOS Vulnerabilities
- //
- // Strings which crashed iMessage in various versions of iOS
-
- "Powerﾄﾏﾄﾏﾵﾑﾨﾏﾄﾏﾄ"
- "ﾵ"
- ""
- "ﾑ"
- ""
- "ﾨ"
- ""
- "ﾏ"
- ""
- "ﾱ"
- ""
- "ﾱ"
- "ﾋ ￠ﾥﾣ ￠ﾥﾣh ￠ﾥﾣ "
- "￠ﾥﾣ￥ﾆﾗ",
- "ﾟﾏﾳ0ﾟﾌﾈﾸﾏ"};
-
-// clang-format on
\ No newline at end of file