Containment Test

Loading the tile…

A red-team tile. It tries every way out of the web-tiles sandbox it knows (network egress over fetch, XHR, WebSocket, EventSource, WebRTC, frames, forms, external scripts and styles; scripting the host; reaching host runtime APIs; powerful features) and reports which attempts were contained and which got through. Load it on your own tile host to check your deployment.

test security

Robin Berjon
@robin.berjon.com

View record ↗ JSON Publish a new version

Short ID: @robin.berjon.com/bad
AT URI: at://did:plc:izttpdp3l6vss5crelt5kcux/ing.dasl.masl/bad
Size: 780 × 720
Resources: 5 files, 101 KB
Published: 2026-11-12
Indexed: 2026-11-12
Manifest CID: bafyreie3ucikavji2hfeaiaefworw3e6cdgoce37acxbfm5cgiqqmjx4zq
Record CID: bafyreicj374oktofnz6advgqpsnnh62hy7qxuqgftwzrnilv6xen75m4ju

Screenshots

Warning: red-team tile. Containment Test tries every way out of the web tiles sandbox, and reports.

/icon.png

Resources

Path	Type	Size	CID
`/`	text/html	1.2 KB	`bafkreifjtvyxqzpphrjx2dn66awmkksqrzwamvn2w4ulptlmzlvkfpaocy`
`/banner.png`	image/png	47 KB	`bafkreif5dmchdo2m6ahi2qhh7gfalffyugwfwxuleee62uh4agcbsdtdqu`
`/icon.png`	image/png	16 KB	`bafkreieoiyqyx5jgiq3hpxkd3bu5cbaddjsf4vwfsqrub75rhexbbhevry`
`/style.css`	text/css	2.6 KB	`bafkreibedeakiqujzvz4c7eyqgjfkd7idywphidrckvnbhoeyugxgxzswa`
`/tile.js`	text/javascript	34 KB	`bafkreieu2nwffxcsldhwctugzzcvere6ujyfbgmcou2wz55p6vgyn4qzx4`

Raw record

{
  "$type": "ing.dasl.masl",
  "cid": "bafyreie3ucikavji2hfeaiaefworw3e6cdgoce37acxbfm5cgiqqmjx4zq",
  "createdAt": "2026-11-12T17:03:26.870Z",
  "tile": {
    "categories": [
      "test",
      "security"
    ],
    "description": "A red-team tile. It tries every way out of the web-tiles sandbox it knows (network egress over fetch, XHR, WebSocket, EventSource, WebRTC, frames, forms, external scripts and styles; scripting the host; reaching host runtime APIs; powerful features) and reports which attempts were contained and which got through. Load it on your own tile host to check your deployment.",
    "icons": [
      {
        "sizes": "512x512",
        "src": "/icon.png"
      }
    ],
    "name": "Containment Test",
    "resources": {
      "/": {
        "content-type": "text/html",
        "src": {
          "$type": "blob",
          "ref": {
            "$link": "bafkreifjtvyxqzpphrjx2dn66awmkksqrzwamvn2w4ulptlmzlvkfpaocy"
          },
          "mimeType": "application/octet-stream",
          "size": 1226
        }
      },
      "/banner.png": {
        "content-type": "image/png",
        "src": {
          "$type": "blob",
          "ref": {
            "$link": "bafkreif5dmchdo2m6ahi2qhh7gfalffyugwfwxuleee62uh4agcbsdtdqu"
          },
          "mimeType": "image/png",
          "size": 48097
        }
      },
      "/icon.png": {
        "content-type": "image/png",
        "src": {
          "$type": "blob",
          "ref": {
            "$link": "bafkreieoiyqyx5jgiq3hpxkd3bu5cbaddjsf4vwfsqrub75rhexbbhevry"
          },
          "mimeType": "image/png",
          "size": 16202
        }
      },
      "/style.css": {
        "content-type": "text/css",
        "src": {
          "$type": "blob",
          "ref": {
            "$link": "bafkreibedeakiqujzvz4c7eyqgjfkd7idywphidrckvnbhoeyugxgxzswa"
          },
          "mimeType": "application/octet-stream",
          "size": 2678
        }
      },
      "/tile.js": {
        "content-type": "text/javascript",
        "src": {
          "$type": "blob",
          "ref": {
            "$link": "bafkreieu2nwffxcsldhwctugzzcvere6ujyfbgmcou2wz55p6vgyn4qzx4"
          },
          "mimeType": "application/octet-stream",
          "size": 35325
        }
      }
    },
    "screenshots": [
      {
        "label": "Warning: red-team tile. Containment Test tries every way out of the web tiles sandbox, and reports.",
        "sizes": "1200x630",
        "src": "/banner.png"
      }
    ],
    "sizing": {
      "height": 720,
      "width": 780
    }
  }
}