[wpt-sync] Sync PR 43905 - [CSP] Add .tentative to nonce-hiding tests for dangling html/body
Categories
(Core :: DOM: Security, task, P4)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox123 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [wptsync downstream])
Sync web-platform-tests PR 43905 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/43905
Details from upstream follow.
Jonathan Hao <phao@chromium.org> wrote:
[CSP] Add .tentative to nonce-hiding tests for dangling html/body
Because the HTML standard does not cover the behavior yet.
Bug: 1513216
Change-Id: I38062c5689b4bdf07b7e639357cb845be092fe31
Reviewed-on: https://chromium-review.googlesource.com/5177663
WPT-Export-Revision: 7cfa0729451cfb327048b74b86224b72eccffb05
| Assignee | ||
Updated•2 years ago
|
| Assignee | ||
Comment 1•2 years ago
|
||
| Assignee | ||
Comment 2•2 years ago
|
||
| Assignee | ||
Comment 3•2 years ago
|
||
CI Results
Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI
Total 1 tests and 2 subtests
Status Summary
Firefox
OK : 1
FAIL: 2
Chrome
OK : 1
PASS: 2
Safari
OK : 1
FAIL: 2
Links
Details
New Tests That Don't Pass
- /content-security-policy/nonce-hiding/dangling-html-or-body.tentative.html [wpt.fyi]
- Nonces don't leak via CSS side-channels when a dangling body is injected.:
FAIL(Chrome:PASS, Safari:FAIL) - Nonces don't leak via CSS side-channels when a dangling html is injected.:
FAIL(Chrome:PASS, Safari:FAIL)
- Nonces don't leak via CSS side-channels when a dangling body is injected.:
Comment 5•2 years ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/4ed7c2cb594b
https://hg.mozilla.org/mozilla-central/rev/cf5002934d77
Description
•