Closed Bug 1715240 Opened 3 years ago Closed 3 years ago

[wpt-sync] Sync PR 29277 - [Credentialless] Block COEP:none request in safe COEP context shared worker

Categories

(Core :: DOM: Core & HTML, task, P4)

Product:
Core
Component:
DOM: Core & HTML
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
91 Branch
Tracking Flags:
Tracking Status
firefox91 --- fixed

People

(Reporter: mozilla.org, Unassigned)

References

(Blocks 1 open bug,
URL
)

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 29277 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/29277
Details from upstream follow.

b'Yifan Luo <lyf@chromium.org>' wrote:

[Credentialless] Block COEP:none request in safe COEP context shared worker

This CL target to block COEP:none cross-site request in COEP:require-corp
and COEP:credentialless shared worker.

Bug: 1200233
Change-Id: Iddc861d71b0e24da7ce1ac53cc634162d8b4edb3
Reviewed-on: https://chromium-review.googlesource.com/2919071
WPT-Export-Revision: 8a50684f5e0cf3e7fdf6f40de8fd109fd4f63d40

Component: web-platform-tests → DOM: Core & HTML
Product: Testing → Core

CI Results

Ran 12 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 3 tests and 6 subtests

Status Summary

Firefox

OK : 2[Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-tsan-opt, Gecko-windows10-32-qr-debug, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug] 3[GitHub]
PASS : 15[Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-tsan-opt, Gecko-windows10-32-qr-debug, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug] 17[GitHub]
FAIL : 15[Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-tsan-opt, Gecko-windows10-32-qr-debug, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug] 18[GitHub]

Chrome

OK : 3
PASS : 27
FAIL : 8

Safari

OK : 2
PASS : 1
FAIL : 30
TIMEOUT: 5

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/html/cross-origin-embedder-policy/credentialless/shared-worker.tentative.https.html: OK [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-tsan-opt, Gecko-windows10-32-qr-debug, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug] (Chrome: OK, Safari: TIMEOUT)
fetch same-origin: FAIL (Chrome: FAIL, Safari: TIMEOUT)
fetch cross-origin: FAIL (Chrome: FAIL, Safari: TIMEOUT)
fetch cross-origin + credentialless worker: FAIL (Chrome: FAIL, Safari: TIMEOUT)
/html/cross-origin-embedder-policy/cross-origin-isolated-permission.https.html
frame: origin = https://web-platform.test:8443, value = (): FAIL (Chrome: PASS, Safari: FAIL)
frame: origin = https://www1.web-platform.test:8443, value = undefined: FAIL (Chrome: PASS, Safari: FAIL)
frame: origin = https://www1.web-platform.test:8443, value = *: FAIL (Chrome: PASS, Safari: FAIL)
frame: origin = https://www1.web-platform.test:8443, value = self: FAIL (Chrome: PASS, Safari: FAIL)
frame: origin = https://www1.web-platform.test:8443, value = (): FAIL (Chrome: PASS, Safari: FAIL)
dedicated worker: scheme = https, value = (): FAIL (Chrome: PASS, Safari: FAIL)
dedicated worker: scheme = data, value = undefined: FAIL (Chrome: PASS, Safari: FAIL)
dedicated worker: scheme = data, value = *: FAIL (Chrome: PASS, Safari: FAIL)
dedicated worker: scheme = data, value = self: FAIL (Chrome: PASS, Safari: FAIL)
dedicated worker: scheme = data, value = (): FAIL (Chrome: PASS, Safari: FAIL)
dedicated worker: scheme = blob, value = (): FAIL (Chrome: PASS, Safari: FAIL)
shared worker: withCoopCoep = true: FAIL (Chrome: FAIL, Safari: FAIL)
service worker: withCoopCoep = true: FAIL (Chrome: FAIL, Safari: FAIL)
/html/cross-origin-embedder-policy/shared-workers.https.html
"require-corp" (derived from owner set due to use of local scheme - blob URL): FAIL (Chrome: FAIL, Safari: FAIL)
"require-corp" (derived from owner set due to use of local scheme - data URL): FAIL (Chrome: FAIL, Safari: FAIL)

Tests Disabled in Gecko Infrastructure

/html/cross-origin-embedder-policy/credentialless/shared-worker.tentative.https.html: OK [GitHub], SKIP [Gecko-android-em-7.0-x86_64-debug-geckoview, Gecko-android-em-7.0-x86_64-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-debug, Gecko-linux1804-64-opt, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-tsan-opt, Gecko-windows10-32-qr-debug, Gecko-windows10-64-debug, Gecko-windows10-64-opt, Gecko-windows10-64-qr-debug] (Chrome: OK, Safari: TIMEOUT)

Pushed by wptsync@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/832e01d25bf8
[wpt PR 29277] - [Credentialless] Block COEP:none request in safe COEP context shared worker, a=testonly
https://hg.mozilla.org/integration/autoland/rev/5511973d92ad
[wpt PR 29277] - Update wpt metadata, a=testonly

https://hg.mozilla.org/mozilla-central/rev/832e01d25bf8
https://hg.mozilla.org/mozilla-central/rev/5511973d92ad

Status: NEW → RESOLVED
Closed: 3 years ago
status-firefox91: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 91 Branch
You need to log in before you can comment on or make changes to this bug.