Closed Bug 1907928 Opened 6 months ago Closed 4 months ago

Implement reporting CSP violations for Trusted Types' "require-trusted-types-for" CSP directive

Categories

(Core :: DOM: Security, task)

task

Tracking

()

RESOLVED FIXED
132 Branch
Tracking Status
firefox132 --- fixed

People

(Reporter: mbrodesser-Igalia, Assigned: mbrodesser-Igalia)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog], [wptsync upstream])

Attachments

(3 files)

No description provided.
Whiteboard: [domsecurity-backlog]
Assignee: nobody → mbrodesser
Attachment #9414372 - Attachment description: WIP: Bug 1907928 part 1) Factor describing the scripted caller for Trusted-Type-CSP-violations out → Bug 1907928 part 1) Factor describing the scripted caller for Trusted-Type-CSP-violations out. r=tschuster
Attachment #9414374 - Attachment description: WIP: Bug 1907928 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML` → Bug 1907928 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster
Attachment #9414375 - Attachment description: WIP: Bug 1907928 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML` → Bug 1907928 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug
Attachment #9414372 - Attachment description: Bug 1907928 part 1) Factor describing the scripted caller for Trusted-Type-CSP-violations out. r=tschuster → Bug 1907928: part 1) Move some documentation from `TrustedTypePolicyFactory` to `CSPViolationData`. r=tschuster
Attachment #9414374 - Attachment description: Bug 1907928 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster → Bug 1907928: part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster
Attachment #9414375 - Attachment description: Bug 1907928 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug → Bug 1907928: part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug
Pushed by mbrodesser@igalia.com: https://hg.mozilla.org/integration/autoland/rev/3ef96952f1aa part 1) Move some documentation from `TrustedTypePolicyFactory` to `CSPViolationData`. r=tschuster https://hg.mozilla.org/integration/autoland/rev/c068236b5f19 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster https://hg.mozilla.org/integration/autoland/rev/c573bd00e0c3 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug,peterv
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/47925 for changes under testing/web-platform/tests
Whiteboard: [domsecurity-backlog] → [domsecurity-backlog], [wptsync upstream]
Status: NEW → RESOLVED
Closed: 4 months ago
Resolution: --- → FIXED
Target Milestone: --- → 132 Branch
Upstream PR merged by moz-wptsync-bot
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: