1937449 - [wpt-sync] Sync PR 49700 - [Signature-based SRI] Send `Accept-Signatures`.

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 49700 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/49700
Details from upstream follow.

Mike West <[e-mail]> wrote:

[Signature-based SRI] Send Accept-Signatures.

As discussed in https://github.com/WICG/signature-based-sri/issues/21,
this CL sketches out what an Accept-Signatures header might look like.

Bug: 383409575
Change-Id: I8369aa4f3ea44ebfbdcb0daab111000863e017e0
Reviewed-on: https://chromium-review.googlesource.com/6087895
WPT-Export-Revision: 82a6ca7dab5b2b80e249164db28cf03e304f1b9e

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=e5a2c35ff8e3a8e478521cbedcc4332b480f1bf0

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 4 tests and 14 subtests

Status Summary

Firefox

OK : 3
PASS : 11
FAIL : 6
ERROR: 1

Chrome

OK : 4
PASS : 14
FAIL : 3

Safari

OK : 3
PASS : 11
FAIL : 6
ERROR: 1

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /subresource-integrity/signatures/tentative/fetch.any.sharedworker.html [wpt.fyi]
  • Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
• /subresource-integrity/signatures/tentative/fetch.any.worker.html [wpt.fyi]
  • Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
• /subresource-integrity/signatures/tentative/fetch.any.html [wpt.fyi]
  • Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
• /subresource-integrity/signatures/tentative/script.window.html [wpt.fyi]: ERROR (Chrome: OK, Safari: ERROR)
  • No signature, valid integrity check: loads.: FAIL (Chrome: PASS, Safari: FAIL)
  • Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • Valid signatures, integrity check matches neither: blocked.: FAIL (Chrome: PASS, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/6c92e4206aea
[wpt PR 49700] - [Signature-based SRI] Send `Accept-Signatures`., a=testonly
https://hg.mozilla.org/integration/autoland/rev/36e1777d9300
[wpt PR 49700] - Update wpt metadata, a=testonly

Comment 4

[Serban Stanca [:SerbanS]]

https://hg.mozilla.org/mozilla-central/rev/6c92e4206aea
https://hg.mozilla.org/mozilla-central/rev/36e1777d9300