Closed Bug 1558947 Opened 6 years ago Closed 6 years ago

[wpt-sync] Sync PR 17300 - Allow browsers to block mixed content requests from cross-origin tests.

Categories

(Core :: DOM: Networking, defect, P5)

defect

Tracking

()

RESOLVED FIXED
mozilla70
Tracking Status
firefox70 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

()

Details

(Whiteboard: [necko-triaged][wptsync downstream])

Sync web-platform-tests PR 17300 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/17300
Details from upstream follow.

Ryosuke Niwa <rniwa@webkit.org> wrote:

Allow browsers to block mixed content requests from cross-origin tests.

Gecko and Blink by default block mixed content requests.

As a result, header-referrer-strict-origin-when-cross-origin.https.html, header-referrer-strict-origin.https.html,
and beacon/headers/header-referrer-unsafe-url.https.html fail in those two browsers.

Allow the mixed content beacon requests to be blocked in these tests as allowed by the specification:
https://www.w3.org/TR/mixed-content/#should-block-fetch
https://www.w3.org/TR/mixed-content/#requirements-user-controls

Also fixed a bug in header-referrer-strict-origin-when-cross-origin.https.html that it was not testing cross-origin.

Component: web-platform-tests → DOM: Networking
Product: Testing → Core
Failed to get results from try push
Priority: P4 → P5
Whiteboard: [wptsync downstream] → [necko-triaged][wptsync downstream]
Pushed by james@hoppipolla.co.uk: https://hg.mozilla.org/integration/mozilla-inbound/rev/8549427c0ca2 [wpt PR 17300] - Allow browsers to block mixed content requests from cross-origin tests., a=testonly
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla70
You need to log in before you can comment on or make changes to this bug.