1616029 - [wpt-sync] Sync PR 21836 - SharedWorker: Use constructor origin for security origin

Status: RESOLVED FIXED

(Core :: DOM: Workers, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 21836 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/21836
Details from upstream follow.

Eriko Kurimoto <[e-mail]> wrote:

SharedWorker: Use constructor origin for security origin

This CL uses constructor origin for security origin.

Previously, we were using script_request_url to calculate security
origin because script url usually has the same origin with the
constructor.
However, it differs sometimes, for example, when script url is data URL.
By using constructor origin, HTTPState can be calculated correctly for
data URL and works as same as before for normal url like https://example.com.

Bug: 1048619, 881202
Change-Id: I78ef9a501b80fe03ad8b3d59d5e6b4d3b8ba2f6e
Reviewed-on: https://chromium-review.googlesource.com/2046803
WPT-Export-Revision: 1e26444e67fea83b732a895337415aadec1cfa99

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=1ec0b03069e4f0529b57695b7d07763d99caca33

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 4 subtests

Status Summary

Firefox

TIMEOUT: 1
ERROR : 1
NOTRUN : 3

Chrome

PASS : 1
TIMEOUT: 2
NOTRUN : 2

Safari

OK : 1
FAIL : 4

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/workers/modules/shared-worker-import-data-url-cross-origin.html: ERROR (Chrome: TIMEOUT, Safari: OK)
static import script from data: URL should be allowed.: NOTRUN (Chrome: TIMEOUT, Safari: FAIL)
static import data url from data: URL should be allowed.: TIMEOUT (Chrome: PASS, Safari: FAIL)
dynamic import script from data: URL should be blocked.: NOTRUN (Chrome: NOTRUN, Safari: FAIL)
dynamic import data url from data: URL should be allowed.: NOTRUN (Chrome: NOTRUN, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/40e1da754365
[wpt PR 21836] - SharedWorker: Use constructor origin for outside settings origin, a=testonly
https://hg.mozilla.org/integration/autoland/rev/861b3a86087f
[wpt PR 21836] - Update wpt metadata, a=testonly

Comment 4

[Bogdan Tara[:bogdan_tara | bogdant]]

https://hg.mozilla.org/mozilla-central/rev/40e1da754365
https://hg.mozilla.org/mozilla-central/rev/861b3a86087f