1500623 - isTrusted is false with postMessage

Status: RESOLVED DUPLICATE of bug 1502801

(Core :: DOM: Core & HTML, defect, P2)

Description

[Andrew McCreight [:mccr8]]

This WPT subtest fails in Firefox but not other browsers:
  window.onmessage = t.step_func_done(e => {
    assert_equals(e.isTrusted, true);
  });
  window.postMessage("ping", "*");

This is part of wpt/webmessaging/MessageEvent-trusted.html

Olli said:

(In reply to Olli Pettay [:smaug] from comment #6)
> To fix _this_ bug we either need to propagate user activation flag via
> postMessage or implement something close to what Google has proposed for a
> new model for user activation.
> 
> 
> MessageEvent-trusted.html shows an issue in 
> https://searchfox.org/mozilla-central/rev/ 9cb3e241502a2d47e2d5057ca771324a446b6695/dom/base/PostMessageEvent.cpp#201
> Apparently other browsers consider postMessage as trusted operation.
> I guess we should just always pass true there.

Comment 1

[Olli Pettay [:smaug][[e-mail]]]

https://html.spec.whatwg.org/#dom-window-postmessage
https://dom.spec.whatwg.org/#concept-event-create

So postMessage implementation doesn't follow the current spec.

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

MessagePort passes always true https://searchfox.org/mozilla-central/rev/9cb3e241502a2d47e2d5057ca771324a446b6695/dom/messagechannel/MessagePort.cpp#154-161

Comment 3

[Andrew McCreight [:mccr8]]

I don't think I'm actually going to get to this in the near term.