1363634 - rewrite test_style_crossdomain.html

Status: RESOLVED FIXED

(Core :: DOM: Security, enhancement, P2)

Description

[Yoshi Cheng-Hao Huang [:allstars.chh][:allstarschh][:yoshi]]

dom/security/test/sri/test_style_crossdomain.html will use data:text/css for the CSS file, however it will fail if we turn off security.data_uri.inherit_security_context

Comment 1

[Yoshi Cheng-Hao Huang [:allstars.chh][:allstarschh][:yoshi]]

After checking the test, data:text/css should be considered as a CORS request, and should be blocked if crossorigin is not specified.

Comment 2

[Yoshi Cheng-Hao Huang [:allstars.chh][:allstarschh][:yoshi]]

Attachment: Patch.

Comment 3

[Christoph Kerschbaumer [:ckerschb]]

Comment on attachment 8867086 [details] [diff] [review]
Patch.

See: https://bugzilla.mozilla.org/show_bug.cgi?id=1364367#c2

Comment 4

[Yoshi Cheng-Hao Huang [:allstars.chh][:allstarschh][:yoshi]]

Attachment: Patch. v2

Comment 5

[Christoph Kerschbaumer [:ckerschb]]

Comment on attachment 8868407 [details] [diff] [review]
Patch. v2

Review of attachment 8868407 [details] [diff] [review]:
-----------------------------------------------------------------

Yeah, I think _legacy.html as postfix is just fine. thanks!

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/550bd3db9e02
rewrite test_style_crossdomain.html. r=ckerschb

Comment 7

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/550bd3db9e02

Comment 8

[Mike Conley (:mconley) (:⚙️)]

https://hg.mozilla.org/projects/cedar/rev/550bd3db9e02571fad48aefbc8dc5b03b809a6b1
Bug 1363634 - rewrite test_style_crossdomain.html. r=ckerschb