1697394 - [wpt-sync] Sync PR 27904 - CSP: Add WPT for javascript URL inheritance

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 27904 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/27904
Details from upstream follow.

b'Antonio Sartori <[e-mail]>' wrote:

CSP: Add WPT for javascript URL inheritance

This CL adds a Web Platform Test checking that executing a Javascript
URL in the top frame keeps the Content Security Policies of the
document.

Bug: 1149272,971231
Change-Id: Ib696b0877d96a82f1546947e93ff0d324b1bbf94
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2739345
Commit-Queue: Antonio Sartori \<[e-mail]>
Reviewed-by: Arthur Sonzogni \<[e-mail]>
Cr-Commit-Position: refs/heads/master@{#861088}

Comment 1

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=e092244b1bf41b0c155b99bd6e299e7b51ab80ba

Comment 2

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

CI Results

Ran 15 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 1 subtests

Status Summary

Firefox

TIMEOUT: 2

Chrome

OK : 1
FAIL : 1

Safari

TIMEOUT: 2

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/content-security-policy/inheritance/javascript-url-open-in-main-window.html: TIMEOUT (Chrome: OK, Safari: TIMEOUT)
Executing Javascript URL keeps enforcing previous CSPs of the document.: TIMEOUT (Chrome: FAIL, Safari: TIMEOUT)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/45348548d72f
[wpt PR 27904] - CSP: Add WPT for javascript URL inheritance, a=testonly
https://hg.mozilla.org/integration/autoland/rev/5b60abf285e9
[wpt PR 27904] - Update wpt metadata, a=testonly

Comment 4

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/45348548d72f
https://hg.mozilla.org/mozilla-central/rev/5b60abf285e9