Closed Bug 1340891 Opened 8 years ago Closed 1 year ago

Browser should pass all the CSP test cases.

Categories

(Core :: DOM: Security, defect, P3)

Product:
Core
Component:
DOM: Security
Version:
51 Branch
Type:
defect

Tracking

()

Status:
RESOLVED INACTIVE

People

(Reporter: mishra.dhiraj95, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog2])

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:51.0) Gecko/20100101 Firefox/51.0 Build ID: 20170201180315 Steps to reproduce: Hi, I found out a very interesting url and repo which allows browsers to test CSP. When i was running that test case i figured out few of them was fail. In FF Linux. Actual results: Please visit : http://csptesting.herokuapp.com/ Run the test. I hope this may help to make mozilla more better in CSP :) Repo: https://github.com/eoftedal/csp-testing
The spec is public so there's no need to have a security bug about the bits of the spec we do/don't implement (correctly). Christoph, I assume nothing in that set of testcases comes as a surprise.
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Flags: needinfo?(ckerschb)
Resolution: --- → DUPLICATE
(In reply to :Gijs from comment #1) > Christoph, I assume nothing in that set of testcases comes as a surprise. Nope, definitely no need to hide that bug, but I would like to keep it open and have a look at those tests. In theory we should pass all (almost all) of them.
Blocks: csp-w3c-2
Status: RESOLVED → REOPENED
Component: Untriaged → DOM: Security
Ever confirmed: true
Flags: needinfo?(ckerschb)
Priority: -- → P3
Product: Firefox → Core
Resolution: DUPLICATE → ---
Whiteboard: [domsecurity-backlog2]
Severity: normal → S3

The web page is not available anymore. I think we can probably close this considering the wide test coverage the web-platform-tests provide.

Status: REOPENED → RESOLVED
Closed: 8 years ago → 1 year ago
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.