[wpt-sync] Sync PR 17300 - Allow browsers to block mixed content requests from cross-origin tests.
Categories
(Core :: DOM: Networking, defect, P5)
Tracking
()
Tracking | Status | |
---|---|---|
firefox70 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [necko-triaged][wptsync downstream])
Sync web-platform-tests PR 17300 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/17300
Details from upstream follow.
Ryosuke Niwa <rniwa@webkit.org> wrote:
Allow browsers to block mixed content requests from cross-origin tests.
Gecko and Blink by default block mixed content requests.
As a result, header-referrer-strict-origin-when-cross-origin.https.html, header-referrer-strict-origin.https.html,
and beacon/headers/header-referrer-unsafe-url.https.html fail in those two browsers.Allow the mixed content beacon requests to be blocked in these tests as allowed by the specification:
https://www.w3.org/TR/mixed-content/#should-block-fetch
https://www.w3.org/TR/mixed-content/#requirements-user-controlsAlso fixed a bug in header-referrer-strict-origin-when-cross-origin.https.html that it was not testing cross-origin.
Assignee | ||
Updated•6 years ago
|
Assignee | ||
Comment 1•6 years ago
|
||
Assignee | ||
Comment 2•6 years ago
|
||
Assignee | ||
Comment 3•6 years ago
|
||
Assignee | ||
Comment 4•6 years ago
|
||
Updated•6 years ago
|
Assignee | ||
Comment 5•6 years ago
|
||
Assignee | ||
Comment 6•6 years ago
|
||
Comment 8•6 years ago
|
||
bugherder |
Description
•