Skip to main content

I156 DOM clobbering / fragment-state probe

Marker: i156-marker-1227

I156 marker paragraph

plain div with id
span with id anchor with id i156

Built-in clobber probes (id only; name is expected to be stripped by the sanitizer):

cs
MJS
BODY
GEBI
LOCATION
TITLE
CLIP
UB
CS2

Non-builtin window/document clobber probes:

CYP
DBG
PL
PL2
PH
NM
EA

Duplicate tab-panel ids (README lives inside #description, before the real later panels):

DUP-FILES
DUP-HISTORY
DUP-SECURITY
DUP-METADATA
DUP-DESCRIPTION

Pseudo-modal with allowed div/class/id attributes (URL fragment :target state):

MathJax expressions:

$$\require{color}\color{red}{\text{I156-REQUIRE-COLOR}}$$

Inline math: $\require{html}\href{javascript:alert(document.domain)}{I156-HREF-JS}$

$$\require{html}\href{javascript:alert(1)}{I156-BLOCK-HREF}$$

Metadata

Release files for i77-test-alpha 122.7.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for i77-test-alpha 122.7.2
File Size Uploaded Provenance Actions
i77_test_alpha-122.7.2.tar.gz 1.5 kB Without provenance Details for i77_test_alpha-122.7.2.tar.gz

Release files / i77_test_alpha-122.7.2.tar.gz

Download URL i77_test_alpha-122.7.2.tar.gz
Size 1.5 kB
Tags Source
SHA-256 checksum
How to use checksums
11f0e86374b6c5dbd6616bfb064e22aac57d329410ce6a5ebf8dc5dda5db7f26
BLAKE2b-256 checksum
How to use checksums
6375434ceb0fddf2ee8702dd0a4901f71b2dd7f75ad5726890f8e7d21fa991f5
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.3

Security for i77-test-alpha 122.7.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

122.7.2 This release

1 release file No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page