1871063 - CSP: Trigger securityviolationevents on the document when a SharedWorker is blocked

Status: RESOLVED FIXED

(Core :: DOM: Workers, defect)

Description

[Tom Schuster]

We currently have various failures in the content-security-policy/gen WPT folder related to new SharedWorker() not triggering a "securitypolicyviolation" event on the document.

This happens because we actually load the SharedWorker in the RemoteWorkerChild and we can't access the document in nsCSPContext::FireViolationEvent after blocking. We can workaround this by forwarding the error via PRemoteWorkerChild::SendError.

Comment 1

[Tom Schuster]

Attachment: Bug 1871063 - Forward CSP violations from creating a new SharedWorker. r?edenchuang

Comment 2

[Tom Schuster]

Attachment: Bug 1871063 - Update WPT meta data. r?edenchuang

Depends on D196968

Comment 3

[Tom Schuster]

Hi Andrew, can you have a look at or redirect the patch?

Comment 4

[Tom Schuster]

Thanks Eden.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/db0d5b6a75a4
Forward CSP violations from creating a new SharedWorker. r=edenchuang
https://hg.mozilla.org/integration/autoland/rev/9445b35a9902
Update WPT meta data. r=edenchuang

Comment 6

[Atila Butkovits]

https://hg.mozilla.org/mozilla-central/rev/db0d5b6a75a4
https://hg.mozilla.org/mozilla-central/rev/9445b35a9902