1567058 - Chapter 1: CSP: Write web-platform tests stressing javascript: navigations

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P3)

Description

[Christoph Kerschbaumer [:ckerschb}]

As a follow up to Bug 1555043 and also the discussions within github [1] we should write some more CSP web-platform tests to compliment testing/web-platform/tests/content-security-policy/navigation and stress javascript: navigations.

[1] https://github.com/whatwg/html/issues/4651#issuecomment-495050351

Comment 1

[Christoph Kerschbaumer [:ckerschb}]

Putting this one back in the backlog, we have some higher priority work to finish...

Comment 2

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 1) Transform <to-javascript-parent-initiated-parent-csp.html> to promised-based test. r=freddyb

Preparation for adding more tests.

Comment 3

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 2) Add tests for when the parent global has CSP and the target global hasn't. r=freddyb

Comment 4

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 3) Simplify <to-javascript-parent-initiated-child-csp.html>. r=freddyb

Preparation to add more tests in other patches.

Comment 5

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 4) Transform <to-javascript-parent-initiated-child-csp.html> to promise-test. r=freddyb

Preparation to add more tests. Those tests will have to use promises to
in order to not interfere each other.

Comment 6

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 6) Add missing tests to <to-javascript-parent-initiated-child-csp.html>. r=freddyb

Comment 7

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 5) Factor some code from <to-javascript-parent-initiated-parent-csp.html> out. r=freddyb

It'll be reused in a following part.

Comment 8

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Attachment: Bug 1567058: part 7) Add WPTs for `javascript:` URL navigations which check the order of the parent CSP and child CSP. r=freddyb

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3d9eb6589469
part 1) Transform <to-javascript-parent-initiated-parent-csp.html> to promised-based test. r=freddyb
https://hg.mozilla.org/integration/autoland/rev/30e5049bce41
part 2) Add tests for when the parent global has CSP and the target global hasn't. r=freddyb
https://hg.mozilla.org/integration/autoland/rev/5298fa9f2347
part 3) Simplify <to-javascript-parent-initiated-child-csp.html>. r=freddyb
https://hg.mozilla.org/integration/autoland/rev/0052fa7b2896
part 4) Transform <to-javascript-parent-initiated-child-csp.html> to promise-test. r=freddyb
https://hg.mozilla.org/integration/autoland/rev/17fa09f9fa7f
part 5) Factor some code from <to-javascript-parent-initiated-parent-csp.html> out. r=freddyb
https://hg.mozilla.org/integration/autoland/rev/c8ab9251d233
part 6) Add missing tests to <to-javascript-parent-initiated-child-csp.html>. r=freddyb

Comment 10

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/49217 for changes under testing/web-platform/tests

Comment 11

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/3d9eb6589469
https://hg.mozilla.org/mozilla-central/rev/30e5049bce41
https://hg.mozilla.org/mozilla-central/rev/5298fa9f2347
https://hg.mozilla.org/mozilla-central/rev/0052fa7b2896
https://hg.mozilla.org/mozilla-central/rev/17fa09f9fa7f
https://hg.mozilla.org/mozilla-central/rev/c8ab9251d233

Comment 12

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Upstream PR merged by moz-wptsync-bot

Comment 13

[Phabricator Automation]

Comment on attachment 9437741 [details]
Bug 1567058: part 7) Add WPTs for javascript: URL navigations which check the order of the parent CSP and child CSP. r=freddyb

Revision D229010 was moved to bug 1933142. Setting attachment 9437741 [details] to obsolete.