1811916 - [wpt-sync] Sync PR 38113 - Mixed Content behavior related to CORS requests

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 38113 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/38113
Details from upstream follow.

moztomer <[e-mail]> wrote:

Mixed Content behavior related to CORS requests

Intro

This patch is about testing mixed content behavior regarding CORS requests. It should run successfully for all chromium based browsers that enabled mixed content upgrading and Firefox nightly.

Some background:

Since the implementation of Mixed content seems to differ from the spec according to its behavior with CORS requests. In the spec it says mixed content should NOT upgrade any CORS requests.
But the yet-implemented versions of mixed content auto upgrading do so. This patch is ensuring that mixed content auto upgrading is upgrading CORS requests, that is towards the spec is likely to be adjusted to.

Test

1. Creates a type an element (img, audio or video) with HTTP URL.
2. Sets a crossOrigin attribute and a CORS header.
3. Adds element from step 1 to document.
   Expected result: URL of element gets successfully upgraded to HTTPS.

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=3130265d841311c9258e29905963f9fad456fb43

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 3 subtests

Status Summary

Firefox

OK : 1
PASS: 3

Chrome

OK : 1
PASS: 3

Safari

OK : 1
FAIL: 3

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/46ee328443e4
[wpt PR 38113] - Mixed Content behavior related to CORS requests, a=testonly

Comment 4

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/46ee328443e4