[wpt-sync] Sync PR 14738 - Require TrustedURL in form.action and .formAction

RESOLVED FIXED in Firefox 67

Status

()

enhancement
P4
normal
RESOLVED FIXED
6 months ago
5 months ago

People

(Reporter: wptsync, Unassigned)

Tracking

unspecified
mozilla67
Points:
---

Firefox Tracking Flags

(firefox67 fixed)

Details

(Whiteboard: [wptsync downstream][domsecurity-backlog], )

Sync web-platform-tests PR 14738 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/14738
Details from upstream follow.

Jakub Vrana <jakubvrana@google.com> wrote:
>  Require TrustedURL in form.action and .formAction
>  
>  Bug: 739170
>  Change-Id: I50691fcab4f13fdaee47a4b4750ef7d3b4544848
>  Reviewed-on: https://chromium-review.googlesource.com/1397613
>  WPT-Export-Revision: 58cfcccdcf9896ed4135b48e398d9f6880852e48
Component: web-platform-tests → DOM: Security
Product: Testing → Core
Whiteboard: [wptsync downstream] → [wptsync downstream][domsecurity-backlog]
Whiteboard: [wptsync downstream][domsecurity-backlog] → [wptsync downstream]
Whiteboard: [wptsync downstream] → [wptsync downstream][domsecurity-backlog]
Ran 2 tests and 39 subtests
FAIL   : 39
ERROR  : 2

New tests that have failures or other problems:
/trusted-types/block-string-assignment-to-Element-setAttribute.tentative.html
    button.formAction accepts only TrustedURL: FAIL
    form.action accepts only TrustedURL: FAIL
    input.formAction accepts only TrustedURL: FAIL
/trusted-types/block-string-assignment-to-HTMLElement-generic.tentative.html
    button.formAction accepts only TrustedURL: FAIL
    form.action accepts only TrustedURL: FAIL
    input.formAction accepts only TrustedURL: FAIL
Pushed by james@hoppipolla.co.uk:
https://hg.mozilla.org/integration/mozilla-inbound/rev/586217e19762
[wpt PR 14738] - Require TrustedURL in form.action and .formAction, a=testonly
Pushed by james@hoppipolla.co.uk:
https://hg.mozilla.org/integration/mozilla-inbound/rev/e9816eb709f6
[wpt PR 14738] - Require TrustedURL in form.action and .formAction, a=testonly
Status: NEW → RESOLVED
Closed: 5 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla67
You need to log in before you can comment on or make changes to this bug.