Closed Bug 1688577 Opened 3 years ago Closed 3 years ago

[wpt-sync] Sync PR 27305 - Do not use plugin-types for trusted-types WPTs

Categories

(Core :: DOM: Security, task, P4)

Product:
Core
Component:
DOM: Security
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
87 Branch
Tracking Flags:
Tracking Status
firefox87 --- fixed

People

(Reporter: mozilla.org, Unassigned)

References

(
URL
)

Details

(Whiteboard: [wptsync downstream][domsecurity-backlog])

Sync web-platform-tests PR 27305 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/27305
Details from upstream follow.

b'Antonio Sartori <antoniosartori@chromium.org>' wrote:

Do not use plugin-types for trusted-types WPTs

Some web platform tests for trusted types trigger a violation of the
CSP directive plugin-types to verify that a CSP violation trigger. The
plugin-types directive is specified with an invalid (hence in practice
empty) value. With the removal of the 'plugin-types' directive
implementations, these tests will break.

This CL converts those tests to trigger violations of the 'object-src'
directive instead.

Bug: 1168001
Change-Id: I042a7c600bc5c7caeb6dd87ff94b181b5fb66b6b
Reviewed-on: https://chromium-review.googlesource.com/2646825
WPT-Export-Revision: 8c8095d000146386e1988c3dcc111ff6a9021278

Component: web-platform-tests → DOM: Security
Product: Testing → Core
Whiteboard: [wptsync downstream] → [wptsync downstream][domsecurity-backlog]
Whiteboard: [wptsync downstream][domsecurity-backlog] → [wptsync downstream]

CI Results

Ran 15 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 4 tests and 18 subtests

Status Summary

Firefox

TIMEOUT: 2
ERROR : 3
NOTRUN : 17

Chrome

OK : 4
PASS : 27

Safari

TIMEOUT: 2
ERROR : 3
NOTRUN : 17

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/trusted-types/trusted-types-eval-reporting-no-unsafe-eval.tentative.html: ERROR [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting-report-only.tentative.html: ERROR [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting.tentative.html: ERROR [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-reporting.tentative.html: SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt], TIMEOUT [GitHub] (Chrome: OK, Safari: TIMEOUT)
Trusted Type violation report: creating a forbidden policy.: TIMEOUT (Chrome: PASS, Safari: TIMEOUT)
Trusted Type violation report: creating a report-only-forbidden policy.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: creating a forbidden-but-not-reported policy.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign string to script url: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign string to html: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign trusted script to script; no report: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign trusted HTML to html; no report: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for innerHTML assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for text assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for script.src assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for script innerText assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for SVGScriptElement href assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for SVGScriptElement href assignment by setAttribute: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for SVGScriptElement text assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for eval: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: large values should be handled sanely.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for custom element assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: Worker constructor: NOTRUN (Chrome: PASS, Safari: NOTRUN)

Tests Disabled in Gecko Infrastructure

/trusted-types/trusted-types-eval-reporting-no-unsafe-eval.tentative.html: ERROR [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting-report-only.tentative.html: ERROR [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting.tentative.html: ERROR [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-reporting.tentative.html: SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-linux1804-64-tsan-opt, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug, Gecko-windows10-64-qr-opt, Gecko-windows7-32-debug, Gecko-windows7-32-opt], TIMEOUT [GitHub] (Chrome: OK, Safari: TIMEOUT)

Whiteboard: [wptsync downstream] → [wptsync downstream][domsecurity-backlog]
Pushed by wptsync@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/59d600442248
[wpt PR 27305] - Do not use plugin-types for trusted-types WPTs, a=testonly

https://hg.mozilla.org/mozilla-central/rev/59d600442248

Status: NEW → RESOLVED
Closed: 3 years ago
status-firefox87: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 87 Branch
You need to log in before you can comment on or make changes to this bug.