Closed Bug 1717950 Opened 3 years ago Closed 3 years ago

[wpt-sync] Sync PR 29468 - Test the javascript: URL security check

Categories

(Core :: DOM: Core & HTML, task, P4)

task

Tracking

()

RESOLVED FIXED
91 Branch
Tracking Status
firefox91 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

(Blocks 1 open bug, )

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 29468 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/29468
Details from upstream follow.

b'Domenic Denicola <d@domenic.me>' wrote:

Test the javascript: URL security check

Follows https://github.com/whatwg/html/pull/6801.

Component: web-platform-tests → DOM: Core & HTML
Product: Testing → Core

CI Results

Ran 12 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 3 tests and 1 subtests

Status Summary

Firefox

OK : 2
PASS : 3
FAIL : 3
TIMEOUT: 2

Chrome

OK : 3
PASS : 5
FAIL : 2

Safari

OK : 3
PASS : 4
FAIL : 3

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

Firefox-only Failures

/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-failure.sub.html
cross-origin-domain but same-origin, setting src: FAIL
/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-same-origin-domain.sub.html: TIMEOUT

New Tests That Don't Pass

/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-failure.sub.html
cross-origin-domain but same-origin, setting src: FAIL (Chrome: PASS, Safari: PASS)
cross-origin-domain but same-origin, setting location.href: FAIL (Chrome: FAIL, Safari: PASS)
/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-multi-globals.sub.html
Using iframeEl.src: FAIL (Chrome: PASS, Safari: FAIL)
/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-same-origin-domain.sub.html: TIMEOUT (Chrome: OK, Safari: OK)
javascript: URL security check for same-origin-domain but not same-origin: TIMEOUT (Chrome: PASS, Safari: FAIL)

Pushed by wptsync@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/a09e84abb17e
[wpt PR 29468] - Test the javascript: URL security check, a=testonly
https://hg.mozilla.org/integration/autoland/rev/23810391cc50
[wpt PR 29468] - Update wpt metadata, a=testonly
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → 91 Branch
You need to log in before you can comment on or make changes to this bug.