Closed Bug 1518114 Opened 2 years ago Closed 1 year ago

[wpt-sync] Sync PR 14738 - Require TrustedURL in form.action and .formAction

Categories

(Core :: DOM: Security, enhancement, P4)

enhancement

Tracking

()

RESOLVED FIXED
mozilla67
Tracking Status
firefox67 --- fixed

People

(Reporter: mozilla.org, Unassigned)

References

()

Details

(Whiteboard: [wptsync downstream][domsecurity-backlog])

Sync web-platform-tests PR 14738 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/14738
Details from upstream follow.

Jakub Vrana <jakubvrana@google.com> wrote:
>  Require TrustedURL in form.action and .formAction
>  
>  Bug: 739170
>  Change-Id: I50691fcab4f13fdaee47a4b4750ef7d3b4544848
>  Reviewed-on: https://chromium-review.googlesource.com/1397613
>  WPT-Export-Revision: 58cfcccdcf9896ed4135b48e398d9f6880852e48
Component: web-platform-tests → DOM: Security
Product: Testing → Core
Whiteboard: [wptsync downstream] → [wptsync downstream][domsecurity-backlog]
Whiteboard: [wptsync downstream][domsecurity-backlog] → [wptsync downstream]
Whiteboard: [wptsync downstream] → [wptsync downstream][domsecurity-backlog]
Ran 2 tests and 39 subtests
FAIL   : 39
ERROR  : 2

New tests that have failures or other problems:
/trusted-types/block-string-assignment-to-Element-setAttribute.tentative.html
    button.formAction accepts only TrustedURL: FAIL
    form.action accepts only TrustedURL: FAIL
    input.formAction accepts only TrustedURL: FAIL
/trusted-types/block-string-assignment-to-HTMLElement-generic.tentative.html
    button.formAction accepts only TrustedURL: FAIL
    form.action accepts only TrustedURL: FAIL
    input.formAction accepts only TrustedURL: FAIL
Pushed by james@hoppipolla.co.uk:
https://hg.mozilla.org/integration/mozilla-inbound/rev/586217e19762
[wpt PR 14738] - Require TrustedURL in form.action and .formAction, a=testonly
Pushed by james@hoppipolla.co.uk:
https://hg.mozilla.org/integration/mozilla-inbound/rev/e9816eb709f6
[wpt PR 14738] - Require TrustedURL in form.action and .formAction, a=testonly
Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla67
You need to log in before you can comment on or make changes to this bug.