Closed Bug 1749562 Opened 4 years ago Closed 4 years ago

[wpt-sync] Sync PR 32328 - [Third-Party Client Hint Delegation] (10) Detect/block document.write

Categories

(Testing :: web-platform-tests, task, P4)

task

Tracking

(firefox98 fixed)

RESOLVED FIXED
98 Branch
Tracking Status
firefox98 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

()

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 32328 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/32328
Details from upstream follow.

Ari Chivukula <arichiv@chromium.org> wrote:

[Third-Party Client Hint Delegation] (10) Detect/block document.write

We need to detect and block attempts to inject accept-ch meta-name
headers via document.write.

This CL is a part of a series:
(1) Add Feature
(2) Add 'name' identical to 'http-equiv' version
(3) Lock 'name' version to pre-execution text state
(4) Add third-party delegation parser
(5) Add ability to modify PermissionsPolicy
(6) Add 'name' support for third-party subresources
(7) Add ability to extract raw AllowLists
(8) Add 'name' support for third-party iframes
(9) Add webtests
(10) Detect/block document.write
(11) Enable by default

Bug: 1219359
Change-Id: I3d4efcd84993ddc8412650493a0c1b33975821ce
Reviewed-on: https://chromium-review.googlesource.com/3378749
WPT-Export-Revision: f222563926bf673235ea91a0660d649fd1cc4b83

PR 32328 applied with additional changes from upstream: fbe73367132b9216ef64df4c2e463ad2ecce92f6

CI Results

Ran 11 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 1 subtests

Status Summary

Firefox

OK : 1
PASS: 1

Chrome

OK : 1
FAIL: 1

Safari

OK : 1
PASS: 1

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 98 Branch
You need to log in before you can comment on or make changes to this bug.