1 CONSOLE WARNING: Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check http://xhr.spec.whatwg.org/.
2 Test that setRequestHeader properly checks for line feeds in header values.
4 %0AEvil%3A%20on -> SUCCESS, setRequestHeader() raised an exception SyntaxError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': ' Evil: on' is not a valid HTTP header field value.
6 %0DEvil%3A%20on -> SUCCESS, setRequestHeader() raised an exception SyntaxError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': ' Evil: on' is not a valid HTTP header field value.
8 %0D%0AEvil%3A%20on -> SUCCESS, setRequestHeader() raised an exception SyntaxError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': ' Evil: on' is not a valid HTTP header field value.
10 %0A%0DEvil%3A%20on -> SUCCESS, setRequestHeader() raised an exception SyntaxError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': ' Evil: on' is not a valid HTTP header field value.