Variations on type attribute of script tag

These scripts should execute

  1. no type attribute
  2. empty string
  3. text/javascript
  4. text/JAVASCRIPT
  5. TEXT/JAVASCRIPT
  6. 'text/javascript '
  7. ' text/javascript '
  8. text/jscript
  9. text/ecmascript
  10. text/livescript
  11. text/javascript1.0
  12. text/javascript1.1
  13. text/javascript1.2
  14. text/javascript1.3
  15. text/javascript1.4
  16. text/javascript1.5

These scripts should not execute

  1. one space
  2. text/
  3. text/vbscript
  4. text/vbs
  5. text/xml
  6. text/javascript1
  7. text/javascript1.6
  8. javascript
  9. jscript
  10. ecmascript
  11. livescript
  12. livescript1.1
  13. JAVASCRIPT
  14. JavaScript
  15. JavaScript 1
  16. JavaScript 1.0
  17. JavaScript 1.1
  18. JavaScript 1.1.1
  19. JavaScript 1.2
  20. JavaScript 1.3
  21. JavaScript 1.4
  22. JavaScript 1.5
  23. JavaScript 1.6
  24. JavaScript 1.7
  25. JavaScript 1.8
  26. JavaScript 1.9
  27. JavaScript 2
  28. JavaScript 2.1
  29. JavaScript 10
  30. JavaScript 10.0
  31. _javascript
  32. javascript_
  33. javascript_1.0
  34. javascript 1.0 x
  35. JavaScript1
  36. JavaScript1.0
  37. JavaScript1.1
  38. JavaScript1.2
  39. JavaScript1.3
  40. JavaScript1.4
  41. JavaScript1.4.1
  42. JavaScript1.5
  43. JavaScript1.6
  44. JavaScript1.7
  45. 1.0 javascript
  46. ' javascript '
  47. ' javascript1.1 '
  48. '   javascript   '
  49. ' javascript 1.0 '
  50. ' javascript  1.0 '
  51. jscript 1
  52. jscript 1.0
  53. ecmascript 1
  54. ecmascript 1.0
  55. livescript 1
  56. livescript 1.0
  57. ' jscript  1.0 '
  58. disabled_javascript
  59. xxxjavascriptxxx
  60. bogus

Variations on language attribute of script tag

These scripts should execute

  1. no language attribute
  2. empty string
  3. jscript
  4. ecmascript
  5. livescript
  6. javascript
  7. JAVASCRIPT
  8. JavaScript
  9. JavaScript1.0
  10. JavaScript1.1
  11. JavaScript1.2
  12. JavaScript1.3
  13. JavaScript1.4
  14. JavaScript1.5

These scripts should not execute

  1. one space
  2. vbscript
  3. livescript1.1
  4. JavaScript 1
  5. JavaScript 1.0
  6. JavaScript 1.1
  7. JavaScript 1.1.1
  8. JavaScript 1.2
  9. JavaScript 1.3
  10. JavaScript 1.4
  11. JavaScript 1.5
  12. JavaScript 1.6
  13. JavaScript 1.7
  14. JavaScript 1.8
  15. JavaScript 1.9
  16. JavaScript 2
  17. JavaScript 2.1
  18. JavaScript 10
  19. JavaScript 10.0
  20. _javascript
  21. javascript_
  22. javascript_1.0
  23. javascript 1.0 x
  24. JavaScript1
  25. JavaScript1.6
  26. JavaScript1.7
  27. JavaScript1.4.1
  28. 1.0 javascript
  29. ' javascript '
  30. ' javascript1.1 '
  31. '   javascript   '
  32. ' javascript 1.0 '
  33. ' javascript  1.0 '
  34. jscript 1
  35. jscript 1.0
  36. ecmascript 1
  37. ecmascript 1.0
  38. livescript 1
  39. livescript 1.0
  40. ' jscript  1.0 '
  41. disabled_javascript
  42. xxxjavascriptxxx
  43. bogus

Variations on combined type and language attributes of script tag

These scripts should execute

  1. empty string type, "javascript" language
  2. empty string language, "text/javascript" type
  3. "javascript" language, "text/javascript" type
  4. "bogus" language, "text/javascript" type
  5. "livescript" language, "text/javascript" type
  6. "javascript1.2" language, "text/javascript" type

These scripts should not execute

  1. "javascript" language, "bogus" type
  2. empty string type, "bogus" language
  3. empty string language, "bogus" type