1919729 - Strip "function" substrings in "Should sink type mismatch violation be blocked by Content Security Policy?"

Status: RESOLVED FIXED

(Core :: DOM: Security, task)

Description

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

https://w3c.github.io/trusted-types/dist/spec/#abstract-opdef-should-sink-type-mismatch-violation-be-blocked-by-content-security-policy

That was recently added to the spec.

Comment 1

[Frédéric Wang (:fredw)]

This is only for the new Function injection sink. I'm going to deal with it at in my patches for bug 1931288.

We don't have WPT tests for now, Luke is going to export the ones he wrote while working on WebKit.

Comment 2

[Frédéric Wang (:fredw)]

Attachment: Bug 1919729 - Strip "function anonymous" prefixes from Function samples. r=smaug

See https://w3c.github.io/trusted-types/dist/spec/#should-block-sink-type-mismatch

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/203b4e9b1d7c
Strip "function anonymous" prefixes from Function samples. r=smaug

Comment 4

[agoloman]

https://hg.mozilla.org/mozilla-central/rev/203b4e9b1d7c