<?xml version="1.0" encoding="utf-8"?>
<rss version="0.92">
<channel>
	<title>Safe RSS Test (RSS 0.92)</title>
	<link>http://safe_rss.website-security.org/</link>
	<description>Testing RSS readers for Safe RSS (RSS 0.92)</description>
	<lastBuildDate>Tue, 01 Oct 2007 07:39:05 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<item>
		<title>Testing obfuscated code</title>
		<description>
		<h5>Testing obfuscated code</h5>
		<p>When a pop-up dialog appears: Your aggregator <b>does not</b> block obfuscated code. This can indicate a security risk.</p>
<span style="display:none;background-image:url(&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;p&#116;:&#97;l&#101;rt('Your aggregator does not block obfuscated code. This can indicate a security risk.'))">
</span>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing JavaScript and the script tag</title>
		<description><h5>Testing JavaScript and the script tag</h5>
		<p>When a message red appears below: Your aggregator <b>does not</b> block execution of Javascript code. This can indicate a security risk.</p>
<script language="JavaScript">
<!--
document.write("<span style='color:red; font-size: 23pt;'>Your aggregator does not block execution of Javascript code. This can indicate a security risk. " + eval(2+2) + " :: + " document.domain + "</span>");
//-->
</script>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing the embed tag</title>
		<description><h5>Testing the embed tag</h5>
		<p>watch the space below this text. When a warning sign appears: Your aggregator <b>does not</b> block execution of embedded objects. This can indicate a security risk.</p>
		<embed SRC="http://safe_rss.website-security.org/warning.swf" HEIGHT="216" WIDTH="208"></embed>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing the object tag</title>
		<description><h5>Testing the object tag</h5>
		<p>watch the space below this text. When a warning sign appears: Your aggregator <b>does not</b> block execution of embedded objects. This can indicate a security risk.</p>
		<object type="image/gif" data="http://safe_rss.website-security.org/warning.gif" HEIGHT="216" WIDTH="208"></object>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing the iframe tag</title>
		<description><h5>Testing the iframe tag</h5>
		<iframe src="http://safe_rss.website-security.org/bad_iframe.html" height="1000" width="1000">-OK-</iframe>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing the meta tag</title>
		<description><h5>Testing meta-refresh</h5>
		<meta http-equiv="REFRESH" content="0; url=http://safe_rss.website-security.org/bad_metatag.html" />
		<p>-OK-</p>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing style attributes</title>
		<description><h5 style="background-image:url(javascript:alert('Your aggregator does not block execution of code in styles. This can indicate a security risk.'))">Testing style attributes</h5>
		<p>When a pop-up dialog appears: Your aggregator <b>does not</b> block execution of code in styles. This can indicate a security risk.</p>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing style tags</title>
		<description><span style="display:none">
		<style>
		 body {background-image:url(javascript:alert('Your aggregator does not block execution of code in styles. This can indicate a security risk.'));}
		</style>
		</span>
		<h5>Testing style tags</h5>
		<p>When a pop-up dialog appears: Your aggregator <b>does not</b> block execution of code in styles. This can indicate a security risk.</p>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing link tags</title>
		<description><link href="http://safe_rss.website-security.org/bad.css" type="text/css" rel="stylesheet" />
		<h5>Testing link tags</h5>
		<p><font color="#ffffff">When this page is completely red: Your aggregator <b>does not</b> block loading of external stylesheets. This can indicate a security risk.</font></p>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing executable expressions in styles</title>
		<description><h5 style="any: expression(window.location='http://safe_rss.website-security.org/bad_expression.html')">Testing executable expressions in styles</h5>
		<p>-OK-</p>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

	<item>
		<title>Testing frameset and frame tags</title>
		<description><frameset><frame src="http://safe_rss.website-security.org/bad_frame.html"></frame></frameset>
		<noframe>
		<h5>Testing frameset and frame tags</h5>
		<p>-OK-</p>
		</noframe>
		</description>
		<link>http://safe_rss.website-security.org/</link>
	</item>

</channel>
</rss>
