Closed
Bug 1907928
Opened 6 months ago
Closed 4 months ago
Implement reporting CSP violations for Trusted Types' "require-trusted-types-for" CSP directive
Categories
(Core :: DOM: Security, task)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
132 Branch
Tracking | Status | |
---|---|---|
firefox132 | --- | fixed |
People
(Reporter: mbrodesser-Igalia, Assigned: mbrodesser-Igalia)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-backlog], [wptsync upstream])
Attachments
(3 files)
No description provided.
Updated•6 months ago
|
Whiteboard: [domsecurity-backlog]
Assignee | ||
Updated•6 months ago
|
Assignee: nobody → mbrodesser
Assignee | ||
Comment 1•6 months ago
|
||
The new function will get a new caller in a following part.
Assignee | ||
Comment 2•6 months ago
|
||
Depends on D217439
Assignee | ||
Comment 3•6 months ago
|
||
Depends on D217441
Updated•6 months ago
|
Attachment #9414372 -
Attachment description: WIP: Bug 1907928 part 1) Factor describing the scripted caller for Trusted-Type-CSP-violations out → Bug 1907928 part 1) Factor describing the scripted caller for Trusted-Type-CSP-violations out. r=tschuster
Updated•6 months ago
|
Attachment #9414374 -
Attachment description: WIP: Bug 1907928 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML` → Bug 1907928 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster
Updated•6 months ago
|
Attachment #9414375 -
Attachment description: WIP: Bug 1907928 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML` → Bug 1907928 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug
Updated•5 months ago
|
Attachment #9414372 -
Attachment description: Bug 1907928 part 1) Factor describing the scripted caller for Trusted-Type-CSP-violations out. r=tschuster → Bug 1907928: part 1) Move some documentation from `TrustedTypePolicyFactory` to `CSPViolationData`. r=tschuster
Updated•5 months ago
|
Attachment #9414374 -
Attachment description: Bug 1907928 part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster → Bug 1907928: part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster
Updated•5 months ago
|
Attachment #9414375 -
Attachment description: Bug 1907928 part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug → Bug 1907928: part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug
Pushed by mbrodesser@igalia.com:
https://hg.mozilla.org/integration/autoland/rev/3ef96952f1aa
part 1) Move some documentation from `TrustedTypePolicyFactory` to `CSPViolationData`. r=tschuster
https://hg.mozilla.org/integration/autoland/rev/c068236b5f19
part 2) Add WPT for checking reported CSP violations of sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster
https://hg.mozilla.org/integration/autoland/rev/c573bd00e0c3
part 3) Implement reporting violations for sink type mismatches for `Element.insertAdjacentHTML`. r=tschuster,smaug,peterv
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/47925 for changes under testing/web-platform/tests
Whiteboard: [domsecurity-backlog] → [domsecurity-backlog], [wptsync upstream]
Comment 6•4 months ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/3ef96952f1aa
https://hg.mozilla.org/mozilla-central/rev/c068236b5f19
https://hg.mozilla.org/mozilla-central/rev/c573bd00e0c3
Status: NEW → RESOLVED
Closed: 4 months ago
status-firefox132:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 132 Branch
Upstream PR merged by moz-wptsync-bot
You need to log in
before you can comment on or make changes to this bug.
Description
•