1884839 - [wpt-sync] Sync PR 45034 - Add tests

Status: RESOLVED FIXED

(Core :: DOM: Networking, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 45034 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/45034
Details from upstream follow.

Jun Kokatsu <[e-mail]> wrote:

Add tests

Change-Id: Ia3360404630c1c22b1dad14ed930c0517f66b6e7
Reviewed-on: https://chromium-review.googlesource.com/5362504
WPT-Export-Revision: b97b654af4291174e28e4ba9ed7a89f754b5e320

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=ca82e5521aeb99e0a6bd10ee80c2af407ef0648a

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=329d88aa2154814b999017ab59eb8bcc137529f3

Comment 3

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 4 tests and 1 subtests

Status Summary

Firefox

OK : 3
PASS : 33
FAIL : 20
TIMEOUT: 1
ERROR : 1

Chrome

OK : 3
PASS : 46
FAIL : 7
TIMEOUT: 1
ERROR : 1

Safari

OK : 3
PASS : 29
FAIL : 24
TIMEOUT: 1
ERROR : 1

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

Firefox-only Failures

• /fetch/security/dangling-markup/dangling-markup-mitigation.tentative.html [wpt.fyi]
  • <img id="dangling" src="/images/green-1x1.png?img= <b">: FAIL
  • <img id="dangling" src="/images/green-1x1.png?img=< b">: FAIL

New Tests That Don't Pass

• /fetch/security/dangling-markup/dangling-markup-mitigation-allowed-apis.tentative.https.html [wpt.fyi]
  • Does not block xhr: FAIL (Chrome: FAIL, Safari: FAIL)
  • Does not block EventSource: FAIL (Chrome: FAIL, Safari: FAIL)
  • Does not block fetch: FAIL (Chrome: FAIL, Safari: FAIL)
  • Does not block Worker: FAIL (Chrome: FAIL, Safari: FAIL)
  • Does not block importScripts: FAIL (Chrome: FAIL, Safari: FAIL)
• /fetch/security/dangling-markup/dangling-markup-mitigation-data-url.tentative.sub.html [wpt.fyi]
  • <iframe id="dangling"\n src="data:text/html,\n <img\n onload='window.parent.postMessage("loaded", "");'\n onerror='window.parent.postMessage("error", "");'\n src='http://web-platform.test:8000/images/gr&#10;een-256x256.png?&lt;'>\n ">\n </iframe>: FAIL (Chrome: PASS, Safari: FAIL)
  • <iframe id="dangling"\n src=" data:text/html,\n <img\n onload='window.parent.postMessage("loaded", "");'\n onerror='window.parent.postMessage("error", "");'\n src='http://web-platform.test:8000/images/gr&#10;een-256x256.png?&lt;'>\n ">\n </iframe>: FAIL (Chrome: PASS, Safari: FAIL)
  • <iframe id="dangling"\n src="\ndata:text/html,\n <img\n onload='window.parent.postMessage("loaded", "");'\n onerror='window.parent.postMessage("error", "");'\n src='http://web-platform.test:8000/images/gr&#10;een-256x256.png?&lt;'>\n ">\n </iframe>: FAIL (Chrome: PASS, Safari: FAIL)
  • <iframe id="dangling"\n src=" data:text/html,\n <img\n onload='window.parent.postMessage("loaded", "");'\n onerror='window.parent.postMessage("error", "");'\n src='http://web-platform.test:8000/images/gr&#10;een-256x256.png?&lt;'>\n ">\n </iframe>: FAIL (Chrome: PASS, Safari: FAIL)
  • <iframe id="dangling"\n src="\tdata:text/html,\n <img\n onload='window.parent.postMessage("loaded", "");'\n onerror='window.parent.postMessage("error", "");'\n src='http://web-platform.test:8000/images/gr&#10;een-256x256.png?&lt;'>\n ">\n </iframe>: FAIL (Chrome: PASS, Safari: FAIL)
  • <iframe id="dangling"\n src="\rdata:text/html,\n <img\n onload='window.parent.postMessage("loaded", "");'\n onerror='window.parent.postMessage("error", "");'\n src='http://web-platform.test:8000/images/gr&#10;een-256x256.png?&lt;'>\n ">\n </iframe>: FAIL (Chrome: PASS, Safari: FAIL)
• /fetch/security/dangling-markup/dangling-markup-mitigation.tentative.html [wpt.fyi]
  • Fetch: /images/gre\nen-1x1.png?img=<: FAIL (Chrome: PASS, Safari: FAIL)
  • Fetch: /images/gre\ren-1x1.png?img=<: FAIL (Chrome: PASS, Safari: FAIL)
  • Fetch: /images/gre\ten-1x1.png?img=<: FAIL (Chrome: PASS, Safari: FAIL)
  • Fetch: /images/green-1x1.png?<\n=block: FAIL (Chrome: PASS, Safari: FAIL)
  • Fetch: /images/green-1x1.png?<\r=block: FAIL (Chrome: PASS, Safari: FAIL)
  • Fetch: /images/green-1x1.png?<\t=block: FAIL (Chrome: PASS, Safari: FAIL)
  • <img id="dangling" src="/images/green-1x1.png?img= <b">: FAIL (Chrome: PASS, Safari: PASS)
  • <img id="dangling" src="/images/green-1x1.png?img=< b">: FAIL (Chrome: PASS, Safari: PASS)
  • \n <img id="dangling" src="/images/green-1x1.png?img=\n <\n b\n ">\n : FAIL (Chrome: PASS, Safari: FAIL)
• /fetch/security/dangling-markup/dangling-markup-mitigation.tentative.https.html [wpt.fyi]: ERROR (Chrome: ERROR, Safari: ERROR)
  • Only blocks dangling markup requests: TIMEOUT (Chrome: TIMEOUT, Safari: TIMEOUT)

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/15f73ac18b37
[wpt PR 45034] - Add more tests for dangling markup mitigation, a=testonly
https://hg.mozilla.org/integration/autoland/rev/80f230eb8af1
[wpt PR 45034] - Update wpt metadata, a=testonly

Comment 5

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/15f73ac18b37
https://hg.mozilla.org/mozilla-central/rev/80f230eb8af1