Closed Bug 1625893 Opened 4 years ago Closed 4 years ago

[wpt-sync] Sync PR 22526 - DedicatedWorker should reject script w/o COEP when its parent has COEP

Categories

(Core :: DOM: Core & HTML, task, P4)

Product:
Core
Component:
DOM: Core & HTML
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla77
Tracking Flags:
Tracking Status
firefox77 --- fixed

People

(Reporter: mozilla.org, Unassigned)

References

(
URL
)

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 22526 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/22526
Details from upstream follow.

Yutaka Hirano <yhirano@chromium.org> wrote:

DedicatedWorker should reject script w/o COEP when its parent has COEP

[1] is changing how COEP is set to (dedicated) worker top-level scripts.
Before the change it inherited the parent policy. After the change it
gets the policy from the HTTP headers in the response, but the loading is
blocked when the parent has COEP: require-corp but the child doesn't have
COEP: require-corp.

As described in [2], this can be solved by a project called
PlzDedicatedWorker, but it will take time to ship it. As a short-term
fix, this implements the blocking part. No reporting is implemented.

This fix is important because this is a breaking change. We would like
to land this by M83.

1: https://github.com/WICG/cross-origin-embedder-policy/pull/13
2: https://docs.google.com/document/d/1eB34zYLuQHshN_Tt8BbLSehHyvxqWupVdB09CCbn7g4/edit

Bug: 1064920
Change-Id: I55fa951f18692d642c747cff168d8239de69efb6
Reviewed-on: https://chromium-review.googlesource.com/2126652
WPT-Export-Revision: 7525b5a4b67b6e5d99a6ee558bfd8a77aa8662c4

Component: web-platform-tests → DOM: Core & HTML
Product: Testing → Core
PR 22526 applied with additional changes from upstream: fb012e841bcff7cac0d96c044d918a7b811e055f
Pushed by wptsync@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/f85ad28a82e5
[wpt PR 22526] - DedicatedWorker should reject script w/o COEP when its parent has COEP, a=testonly
https://hg.mozilla.org/integration/autoland/rev/7a821b262b16
[wpt PR 22526] - Update wpt metadata, a=testonly
Test result changes from PR not available.

https://hg.mozilla.org/mozilla-central/rev/f85ad28a82e5
https://hg.mozilla.org/mozilla-central/rev/7a821b262b16

Status: NEW → RESOLVED
Closed: 4 years ago
status-firefox77: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla77
You need to log in before you can comment on or make changes to this bug.