/xsinator.com

XS-Leak Browser Test Suite

Primary LanguageJavaScriptApache License 2.0Apache-2.0

XSinator.com

XS-Leak Browser Test Suite

Xsinator.com is an XS-Leak browser test suite that was created for the paper XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers.

Setup

  1. Clone the repository
  2. Change cross-origin domain in config.js
    • for local testing: let baseUrl = 'http://localhost:8000/'
  3. Build javascript: npm install && npm run build
  4. Get cert with certbot certbot certonly --standalone --cert-name "xsinator.com" -d "xsinator.com" -d "xsinator.xyz" -d "crossorigin.xsinator.xyz" --register-unsafely-without-email
  5. docker-compose up

Layout

  • /app/testcases - php testcases
  • /src - javascript src