beefproject/beef — Issue #66: <xssrays> doesn't work in Chrome and Safari
Author: passbe
Created: 2011-12-10 21:21:48+00:00
State: open

Webkit is throwing the following error:
"Refused to execute a JavaScript script. Source code of script found within request"

See screenshot attached (same error for both Chrome 14 and Safari 5.0.5).

I still didn't investigated too much but I think the problem is around line 326, 346 and 348 of xssrays.js. On these lines we actually set the location.href of the created iFrame with some content that come from the script.
Google Code Issue: http://code.google.com/p/beef/issues/detail?id=544