Closed Bug 1898754 Opened 1 year ago Closed 1 year ago

[wpt-sync] Sync PR 46476 - [PEPC] Fix PEPC text being displaceable via CSS pseudo selectors

Categories

(Core :: DOM: Core & HTML, task, P4)

Product:
Core
Component:
DOM: Core & HTML
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
128 Branch
Tracking Flags:
Tracking Status
firefox128 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

(
URL
)

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 46476 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/46476
Details from upstream follow.

Andy Paicu <andypaicu@chromium.org> wrote:

[PEPC] Fix PEPC text being displaceable via CSS pseudo selectors

This fixes an exploit that uses the ::before CSS pseudo-selector that
displaces the text in the permission element and replaces it with
content chosen by the author. The added test is modeled after the
exploit.

Fixed: 342355738
Change-Id: Id2f05a9febe3d2f97662065d5c1a46a6ade260f3
Reviewed-on: https://chromium-review.googlesource.com/5563204
WPT-Export-Revision: 5974832652410b42735089c817a9cdf6a06f577e

Component: web-platform-tests → DOM: Core & HTML
Product: Testing → Core

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 2 tests

Status Summary

Firefox

FAIL: 2

Chrome

PASS: 1
FAIL: 1

Safari

FAIL: 2

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

Pushed by wptsync@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/f3c84677935d [wpt PR 46476] - [PEPC] Fix PEPC text being displaceable via CSS pseudo selectors, a=testonly https://hg.mozilla.org/integration/autoland/rev/3fc9fcb937ab [wpt PR 46476] - Update wpt metadata, a=testonly

https://hg.mozilla.org/mozilla-central/rev/f3c84677935d
https://hg.mozilla.org/mozilla-central/rev/3fc9fcb937ab

Status: NEW → RESOLVED
Closed: 1 year ago
status-firefox128: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 128 Branch
You need to log in before you can comment on or make changes to this bug.