1540119 - Investigate if CSP and Referrer are spec-compliant within nsWindowWatcher

Status: NEW

(Core :: DOM: Security, task, P3)

Description

[Christoph Kerschbaumer [:ckerschb]]

Within Bug 1529893 we did some groundwork to figure out what CSP to pass within nsWindowWatcher - while that is fine for now it's not entirely clear if Firefox (or even other browsers) are spec-compliant with regards to CSP and Referrer.

Within this bug we should do the following:
(a) Take dom/security/test/csp/test_uir_windowwatcher.html and convert it into a wpt test.
(b) Write a wpt test for the referrer similar to test_uir_windowwatcher.html.
(c) Investigate other browser behavior and compare spec behavior [1], because it seems that according to the spec HTML uses the entry global object as the relevant global object, which would be A (as in test_uir_windowwatcher.html). So according to that the referrer used within nsWindowWatcher is actually correct and the CSP we use is not. If that is correct or not we need to figure out.

[1] https://html.spec.whatwg.org/#window-open-steps