# # XSS Test Cases for 2025 Event Handler Updates # # This file contains test cases for newly added event handlers from: # - WebKit EventNames.json # - Chromium/Blink GlobalEventHandlers.idl # - Firefox/Gecko EventNameList.h # # Updated: 2025-10-16 # # # New Event Handlers - Standard Format Tests # Each event handler is tested in multiple contexts: # - As an attribute # - In unquoted value context # - In single-quoted value context # - In double-quoted value context # # # ACCESSKEYNOTFOUND (Firefox) #
    x onaccesskeynotfound=alert(1)>
    x' onaccesskeynotfound=alert(1)>
    x" onaccesskeynotfound=alert(1)>

    #
    # AFTERPAINT (Firefox)
    #
# # AFTERSCRIPTEXECUTE (Firefox) #
# Modern browser-specific events with payloads

# Progressive Web App related
# Touch and gesture events
# Gamepad API events
# Media events
# Scroll snap events (CSS Scroll Snap)
# Pointer events raw update # Legacy DOM mutation events (deprecated but may still work)
# Editor events
# Form state change events # WebGL context events # Device orientation and light
# Real-world attack scenarios with new events # Breaking out of attribute context value" onauxclick="alert(1) name' onbeforematch='alert(1) id oncommand=alert(1) data=" # Escaping JavaScript string in event handler
# Using in data attributes