Closed Bug 1747378 Opened 3 years ago Closed 3 years ago

[wpt-sync] Sync PR 32181 - Move COEP to Policy Container

Categories

(Core :: DOM: Core & HTML, task, P4)

Product:
Core
Component:
DOM: Core & HTML
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
98 Branch
Tracking Flags:
Tracking Status
firefox98 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

(
URL
)

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 32181 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/32181
Details from upstream follow.

Pâris Meuleman <pmeuleman@chromium.org> wrote:

Move COEP to Policy Container

In order to properly support inheritance of COEP within blob, move COEP
in policy container. This also consolidates its inheritance within the
policy container.
Remains specific case where inheritance is handled only for COEP but
not PolicyContainer: Extensions. This was moved within
void NavigationRequest::ComputePoliciesToCommit().

This change surfaced a few considerations:

  • Policy inheritance from outer document. As discussed with clamy@,
    a fenced frame should enforce COEP from the outer document [1].
  • COEP enforcement not done in NavigationRequest::BeginNavigationImpl,
    in the cases where an URL loader is not needed. This likely does not
    apply COEP in some cases it should be applied.

[1] https://docs.google.com/document/d/11ICO7dKEjeeJtSHyVitcN5JiOD0uRgvRzyyo3FY0y1c/edit?pli=1&resourcekey=0-bTO8Ltbpfi05Xt4aK-MeEQ#
bug: 1151223
Change-Id: I33a0dd61c257b6927fa335bdd983fb1b393c6177
Reviewed-on: https://chromium-review.googlesource.com/3328982
WPT-Export-Revision: 6ea2e549d2b70e8259892865556597efb4210627

Component: web-platform-tests → DOM: Core & HTML
Product: Testing → Core

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 2 tests and 3 subtests

Status Summary

Firefox

OK : 2
PASS : 2
FAIL : 2

Chrome

OK : 2
FAIL : 4

Safari

CRASH: 1
FAIL : 1
ERROR: 1

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

/html/cross-origin-embedder-policy/block-local-documents-inheriting-none.https.html
Prevent local scheme documents from loading within a COEP: require-corp iframe if they inherit COEP: none: FAIL (Chrome: FAIL, Safari: FAIL)
/html/cross-origin-opener-policy/coep-blob-popup.https.html
COOP+COEP blob URL popup: <a rel=noopener>: FAIL (Chrome: FAIL)

https://hg.mozilla.org/mozilla-central/rev/0a7ed2f4b744

Status: NEW → RESOLVED
Closed: 3 years ago
status-firefox98: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 98 Branch
You need to log in before you can comment on or make changes to this bug.