1697753 - [wpt-sync] Sync PR 27977 - CSP: Don't trigger spv for frame-ancestors

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 27977 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/27977
Details from upstream follow.

b'Antonio Sartori <[e-mail]>' wrote:

CSP: Don't trigger spv for frame-ancestors

We should not trigger frame-ancestors securitypolicyviolation events
in the parent frame, since this is a cross-origin leak.

Fixed: 1186611
Bug: 1186611
Change-Id: Iee57e198c17b6827dde199431b31b87b82e0e276
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2747500
Reviewed-by: Arthur Sonzogni \<[e-mail]>
Commit-Queue: Antonio Sartori \<[e-mail]>
Cr-Commit-Position: refs/heads/master@{#861885}

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=7981447f038cf90cd47e3d7458aa675c3b320802

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 15 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 2 subtests

Status Summary

Firefox

OK : 1
PASS: 1
FAIL: 1

Chrome

OK : 1
PASS: 1
FAIL: 1

Safari

OK : 1
PASS: 2

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/content-security-policy/frame-ancestors/frame-ancestors-none-block.html
frame-ancestors-none-block: FAIL (Chrome: FAIL, Safari: PASS)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b0755c5b752d
[wpt PR 27977] - CSP: Don't trigger spv for frame-ancestors, a=testonly
https://hg.mozilla.org/integration/autoland/rev/e6f3bdd9bafd
[wpt PR 27977] - Update wpt metadata, a=testonly

Comment 4

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/b0755c5b752d
https://hg.mozilla.org/mozilla-central/rev/e6f3bdd9bafd