[wpt-sync] Sync PR 27305 - Do not use plugin-types for trusted-types WPTs
Categories
(Core :: DOM: Security, task, P4)
Tracking
()
Tracking | Status | |
---|---|---|
firefox87 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [wptsync downstream][domsecurity-backlog])
Sync web-platform-tests PR 27305 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/27305
Details from upstream follow.
b'Antonio Sartori <antoniosartori@chromium.org>' wrote:
Do not use plugin-types for trusted-types WPTs
Some web platform tests for trusted types trigger a violation of the
CSP directive plugin-types to verify that a CSP violation trigger. The
plugin-types directive is specified with an invalid (hence in practice
empty) value. With the removal of the 'plugin-types' directive
implementations, these tests will break.This CL converts those tests to trigger violations of the 'object-src'
directive instead.Bug: 1168001
Change-Id: I042a7c600bc5c7caeb6dd87ff94b181b5fb66b6b
Reviewed-on: https://chromium-review.googlesource.com/2646825
WPT-Export-Revision: 8c8095d000146386e1988c3dcc111ff6a9021278
Assignee | ||
Updated•4 years ago
|
Updated•4 years ago
|
Assignee | ||
Updated•4 years ago
|
Assignee | ||
Comment 1•4 years ago
|
||
Assignee | ||
Comment 2•4 years ago
|
||
CI Results
Ran 15 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI
Total 4 tests and 18 subtests
Status Summary
Firefox
TIMEOUT: 2
ERROR : 3
NOTRUN : 17
Chrome
OK : 4
PASS : 27
Safari
TIMEOUT: 2
ERROR : 3
NOTRUN : 17
Links
Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base
Details
New Tests That Don't Pass
/trusted-types/trusted-types-eval-reporting-no-unsafe-eval.tentative.html: ERROR [GitHub
], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting-report-only.tentative.html: ERROR [GitHub
], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting.tentative.html: ERROR [GitHub
], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-reporting.tentative.html: SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
], TIMEOUT [GitHub
] (Chrome: OK, Safari: TIMEOUT)
Trusted Type violation report: creating a forbidden policy.: TIMEOUT (Chrome: PASS, Safari: TIMEOUT)
Trusted Type violation report: creating a report-only-forbidden policy.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: creating a forbidden-but-not-reported policy.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign string to script url: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign string to html: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign trusted script to script; no report: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: assign trusted HTML to html; no report: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for innerHTML assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for text assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for script.src assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for script innerText assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for SVGScriptElement href assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for SVGScriptElement href assignment by setAttribute: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for SVGScriptElement text assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for eval: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: large values should be handled sanely.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: sample for custom element assignment: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Trusted Type violation report: Worker constructor: NOTRUN (Chrome: PASS, Safari: NOTRUN)
Tests Disabled in Gecko Infrastructure
/trusted-types/trusted-types-eval-reporting-no-unsafe-eval.tentative.html: ERROR [GitHub
], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting-report-only.tentative.html: ERROR [GitHub
], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-eval-reporting.tentative.html: ERROR [GitHub
], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
] (Chrome: OK, Safari: ERROR)
/trusted-types/trusted-types-reporting.tentative.html: SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview
, Gecko-android-em-7.0-x86_64-opt-geckoview
, Gecko-android-em-7.0-x86_64-qr-debug-geckoview
, Gecko-android-em-7.0-x86_64-qr-opt-geckoview
, Gecko-linux1804-64-debug
, Gecko-linux1804-64-opt
, Gecko-linux1804-64-qr-debug
, Gecko-linux1804-64-qr-opt
, Gecko-linux1804-64-tsan-opt
, Gecko-windows10-64-debug
, Gecko-windows10-64-opt
, Gecko-windows10-64-qr-debug
, Gecko-windows10-64-qr-opt
, Gecko-windows7-32-debug
, Gecko-windows7-32-opt
], TIMEOUT [GitHub
] (Chrome: OK, Safari: TIMEOUT)
Updated•4 years ago
|
Comment 4•4 years ago
|
||
bugherder |
Description
•