1655871 - [wpt-sync] Sync PR 24793 - Clipboard API: Implemented the SVG clipboard reader and writer

Status: NEW

(Core :: DOM: Core & HTML, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 24793 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/24793
Details from upstream follow.

Dylan Sleeper <[e-mail]> wrote:

Clipboard API: Implemented the SVG clipboard reader and writer

This CL adds two subclasses: ClipboardSvgReader and
ClipboardSvgWriter. When SVG is read and written it is "sanitized"
which means that all script objects are removed from the SVG. They
are both entirely synchronous because it is impossible to use SVG
DOM nodes off of the main thread.

Bug: 1110511
Change-Id: Ic5d593bc518afa4809446e8247a7d0deb495a297

Reviewed-on: https://chromium-review.googlesource.com/2315220
WPT-Export-Revision: ba69647bb86f97df0d34f204260d9512bf49ded6

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=8086ffede1bcff48783b22b1be5f5148ddd6d3aa

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 12 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 2 tests and 1 subtests

Status Summary

Firefox

OK : 2
FAIL: 2

Chrome

OK : 2
FAIL: 2

Safari

OK : 2
FAIL: 2

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/clipboard-apis/async-svg-script-removal.https.html
Verify write and read clipboard with scripts removed given image/svg+xml: <svg> <script>const a = 5;</scr' + 'ipt>
<a href="javascript:alert(2)"> test </a> </svg>: FAIL (Chrome: FAIL, Safari: FAIL)
/clipboard-apis/async-write-svg-read-svg.https.html
Verify read and write of some image/svg+xml content: FAIL (Chrome: FAIL, Safari: FAIL)