I’m developing a tool for XSS checking, using the Webkit WebView and Macruby. This works great, except that occasionally Safari’s XSS filter catches my URLs and refuses to execute evil scripts. Is there a way to disable this functionality, preferably programatically?
I’m developing a tool for XSS checking, using the Webkit WebView and Macruby. This
Share
So after some digging I found the solution. There’s an undocumented, private method called ‘setXSSAuditorEnabled’ on WebPreferences. So in my case, I did
view.preferences.XSSAuditorEnabled = falseto make it work.