1937813 - [wpt-sync] Sync PR 49723 - [Signature-based SRI] Add WPT for the `@path` derived component.

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 49723 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/49723
Details from upstream follow.

Mike West <[e-mail]> wrote:

[Signature-based SRI] Add WPT for the @path derived component.

https://chromium-review.googlesource.com/c/chromium/src/+/6089097 added
support for the @path derived component. It did not, however, include
web platform tests. This CL adds tests that verify the core behavior of
@path, and mildly refactor the existing tests to reuse infrastructure.

Bug: 383409584
Change-Id: I249addf031f5e72962b712435aa07a7338b1c0ac
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6097333
Reviewed-by: Joe DeBlasio \<[e-mail]>
Commit-Queue: Mike West \<[e-mail]>
Cr-Commit-Position: refs/heads/main@{#1397174}

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

PR 49723 applied with additional changes from upstream: 56c878bf3b3a963a3f8b23b1869626fcfcd54a1a, ee6608efe7e349ddba4864fbdfc9524ee023cf60, f4515a8ef1ad577e0b48e1609a29b80c664ebf69

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=3f8e21ac3ec839ba1429c9939d41055eb7c6ce3e

Comment 3

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 5 tests and 14 subtests

Status Summary

Firefox

OK : 4
PASS : 29
FAIL : 36
ERROR: 1

Chrome

OK : 5
PASS : 43
FAIL : 22

Safari

OK : 4
PASS : 29
FAIL : 36
ERROR: 1

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /subresource-integrity/signatures/tentative/fetch.any.worker.html [wpt.fyi]
  • fetch(): No signature, valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, one valid integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, no integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, malformed integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, matching integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, one valid integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
• /subresource-integrity/signatures/tentative/fetch.any.html [wpt.fyi]
  • fetch(): No signature, valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, one valid integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, no integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, malformed integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, matching integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, one valid integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
• /subresource-integrity/signatures/tentative/fetch.any.sharedworker.html [wpt.fyi]
  • fetch(): No signature, valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, one valid integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, no integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, malformed integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, matching integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, one valid integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
• /subresource-integrity/signatures/tentative/path.window.html [wpt.fyi]
  • fetch(): Valid signature (signature=:AEW2XbDmmBK71KBle0Dx1JAWAO7B4QdEH2Tw71c9nntjUmx8xF5t8xbsETRHFwULrvJ4STBFtdMVm5a7QIw5Cw==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:AEW2XbDmmBK71KBle0Dx1JAWAO7B4QdEH2Tw71c9nntjUmx8xF5t8xbsETRHFwULrvJ4STBFtdMVm5a7QIw5Cw==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:AEW2XbDmmBK71KBle0Dx1JAWAO7B4QdEH2Tw71c9nntjUmx8xF5t8xbsETRHFwULrvJ4STBFtdMVm5a7QIw5Cw==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature (signature=:NEmnhhW1aKxO+ReWQmmSF17i49ZEdtDC4lRI2CJDw2E/rz9j2a8f8kIwVk7W/BIuQ6kejTAQ2FReGmmkREXPDg==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:NEmnhhW1aKxO+ReWQmmSF17i49ZEdtDC4lRI2CJDw2E/rz9j2a8f8kIwVk7W/BIuQ6kejTAQ2FReGmmkREXPDg==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:NEmnhhW1aKxO+ReWQmmSF17i49ZEdtDC4lRI2CJDw2E/rz9j2a8f8kIwVk7W/BIuQ6kejTAQ2FReGmmkREXPDg==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
• /subresource-integrity/signatures/tentative/script.window.html [wpt.fyi]: ERROR (Chrome: OK, Safari: ERROR)
  • <script>: No signature, valid integrity check: loads.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signatures, integrity check matches neither: blocked.: FAIL (Chrome: PASS, Safari: FAIL)

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/adf7585988cf
[wpt PR 49723] - [Signature-based SRI] Add WPT for the `@path` derived component., a=testonly
https://hg.mozilla.org/integration/autoland/rev/1db9c1dc2aa9
[wpt PR 49723] - Update wpt metadata, a=testonly

Comment 5

[Atila Butkovits]

https://hg.mozilla.org/mozilla-central/rev/adf7585988cf
https://hg.mozilla.org/mozilla-central/rev/1db9c1dc2aa9