Bug 1570889 Comment 7 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on 
Quick note:
It's weird that we can get document COOP in anne's case but not the PoC

anne's wpt
2019-11-06 23:18:55.333341 UTC - [Parent 35641: Main Thread]: D/nsHttp nsHttpChannel::HasCrossOriginOpenerPolicyMismatch - doc:1 result:0 - compare:0
2019-11-06 23:18:55.333392 UTC - [Parent 35641: Main Thread]: D/nsHttp doc origin:https://web-platform.test:8443/html/cross-origin-opener-policy/popup-redirect-cache.https.html - res origin: https://www1.web-platform.test:8443/html/cross-origin-opener-policy/resources/coop-coep.py?coop=x&coep=x&channel=78c17a82-f46a-414e-855f-37dd5b3782f2

PoC
2019-11-06 23:23:42.523832 UTC - [Parent 35641: Main Thread]: D/nsHttp nsHttpChannel::HasCrossOriginOpenerPolicyMismatch - doc:0 result:0 - compare:1
2019-11-06 23:23:42.523840 UTC - [Parent 35641: Main Thread]: D/nsHttp doc origin:https://vuln.shhnjk.com/COOP_bypass.php - res origin: https://attack.shhnjk.com/copen.html

And I hit this in Nightly debug for anne's wpt
Nightly debug
JavaScript error: resource:///modules/sessionstore/SessionStore.jsm, line 2710: NS_ERROR_NOT_AVAILABLE: Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIProcessSwitchRequestor.crossOriginOpenerPolicy]


Maybe bug 1594166 could ease this at the moment?
Revision 1 by
on 
Quick note:
It's weird that we can get document COOP in anne's case but not the PoC

anne's wpt
2019-11-06 23:18:55.333341 UTC - [Parent 35641: Main Thread]: D/nsHttp nsHttpChannel::HasCrossOriginOpenerPolicyMismatch - doc:1 result:0 - compare:0
2019-11-06 23:18:55.333392 UTC - [Parent 35641: Main Thread]: D/nsHttp doc origin:https://web-platform.test:8443/html/cross-origin-opener-policy/blob-popup.https.html - res origin: https://www1.web-platform.test:8443/html/cross-origin-opener-policy/resources/coop-coep.py?coop=x&coep=x&channel=78c17a82-f46a-414e-855f-37dd5b3782f2

PoC
2019-11-06 23:23:42.523832 UTC - [Parent 35641: Main Thread]: D/nsHttp nsHttpChannel::HasCrossOriginOpenerPolicyMismatch - doc:0 result:0 - compare:1
2019-11-06 23:23:42.523840 UTC - [Parent 35641: Main Thread]: D/nsHttp doc origin:https://vuln.shhnjk.com/COOP_bypass.php - res origin: https://attack.shhnjk.com/copen.html

And I hit this in Nightly debug for anne's wpt
Nightly debug
JavaScript error: resource:///modules/sessionstore/SessionStore.jsm, line 2710: NS_ERROR_NOT_AVAILABLE: Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIProcessSwitchRequestor.crossOriginOpenerPolicy]


Maybe bug 1594166 could ease this at the moment?

Back to Bug 1570889 Comment 7