1791651 - [wpt-sync] Sync PR 35981 - Unify security check for Javascript URL navigation

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 35981 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/35981
Details from upstream follow.

Jun Kokatsu <[e-mail]> wrote:

Unify security check for Javascript URL navigation

This change unifies CSP and Trusted Types check for Javascript URL
navigations.

Bug: 1365082
Change-Id: I46aea31a918c6397ea71fd5ab345bc9dc19d91c2
Reviewed-on: https://chromium-review.googlesource.com/3905476
WPT-Export-Revision: c06e968dea2e9f36eb7f31867d0c334af5b4ada3

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=6c504f71b03a65454b40624f51737168f989f2b0

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 10 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 8 subtests

Status Summary

Firefox

TIMEOUT: 2
NOTRUN : 7

Chrome

OK : 1
PASS : 8

Safari

TIMEOUT: 2
NOTRUN : 7

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /trusted-types/trusted-types-navigation.tentative.html [wpt.fyi]: SKIP [Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-isolated-process-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-windows10-32-2004-qr-debug, Gecko-windows10-32-2004-qr-opt, Gecko-windows10-64-2004-qr-debug, Gecko-windows10-64-2004-qr-opt], TIMEOUT [GitHub] (Chrome: OK, Safari: TIMEOUT)
  • Navigate a window with javascript:-urls in enforcing mode.: TIMEOUT (Chrome: PASS, Safari: TIMEOUT)
  • Navigate a window with javascript:-urls w/ default policy in enforcing mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Navigate a window with javascript:-urls in report-only mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Navigate a window with javascript:-urls w/ default policy in report-only mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Navigate a frame with javascript:-urls in enforcing mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Navigate a frame with javascript:-urls w/ default policy in enforcing mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Navigate a frame with javascript:-urls in report-only mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Navigate a frame with javascript:-urls w/ default policy in report-only mode.: NOTRUN (Chrome: PASS, Safari: NOTRUN)

Tests Disabled in Gecko Infrastructure

• /trusted-types/trusted-types-navigation.tentative.html [wpt.fyi]: SKIP [Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-isolated-process-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-windows10-32-2004-qr-debug, Gecko-windows10-32-2004-qr-opt, Gecko-windows10-64-2004-qr-debug, Gecko-windows10-64-2004-qr-opt], TIMEOUT [GitHub] (Chrome: OK, Safari: TIMEOUT)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5c2f10c65c28
[wpt PR 35981] - Unify security check for Javascript URL navigation, a=testonly

Comment 4

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/5c2f10c65c28