1938832 - [wpt-sync] Sync PR 49820 - [SRI Message Signatures] Drop the `alg` parameter.

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 49820 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/49820
Details from upstream follow.

Mike West <[e-mail]> wrote:

[SRI Message Signatures] Drop the alg parameter.

As per https://github.com/WICG/signature-based-sri/issues/33, the plan
is to reject the alg parameter entirely, rather than locking it to a
single value.

Bug: 385160702
Change-Id: Iba57570fd8d0136b1d68e143a2fde5f48cd69806
Reviewed-on: https://chromium-review.googlesource.com/6110599
WPT-Export-Revision: 21ef1c0801877be1e93e24f8d592d1284fcf0a2c

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=675ad98fea9cedae76f3478199ec87b7f11b7fb0

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 5 tests and 14 subtests

Status Summary

Firefox

OK : 4
PASS : 29
FAIL : 36
ERROR: 1

Chrome

OK : 5
PASS : 44
FAIL : 21

Safari

OK : 4
PASS : 29
FAIL : 36
ERROR: 1

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /subresource-integrity/signatures/tentative/fetch.any.worker.html [wpt.fyi]
  • fetch(): No signature, valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, one valid integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, no integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, malformed integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, matching integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, one valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
• /subresource-integrity/signatures/tentative/fetch.any.html [wpt.fyi]
  • fetch(): No signature, valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, one valid integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, no integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, malformed integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, matching integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, one valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
• /subresource-integrity/signatures/tentative/fetch.any.sharedworker.html [wpt.fyi]
  • fetch(): No signature, valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature, one valid integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, no integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, malformed integrity check: blocked.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Invalid signature, matching integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Invalid signature, one valid integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
• /subresource-integrity/signatures/tentative/path.window.html [wpt.fyi]
  • fetch(): Valid signature (signature=:W54PPjO6aWHvhTmDICG4EGLs461FrwYxXE/UkBH7dz9V5lnCtv3N6ZTmOxPRMkmADhRilem6W/Zq5SH9tVoxAg==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:W54PPjO6aWHvhTmDICG4EGLs461FrwYxXE/UkBH7dz9V5lnCtv3N6ZTmOxPRMkmADhRilem6W/Zq5SH9tVoxAg==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:W54PPjO6aWHvhTmDICG4EGLs461FrwYxXE/UkBH7dz9V5lnCtv3N6ZTmOxPRMkmADhRilem6W/Zq5SH9tVoxAg==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature (signature=:qF/RJ9L8bCpRx5cm6QW9qvqw7nU0ziwi6lLD6KkhT/ZgLS2c6O9s4UFXieM9+waU71YtNfTXQAQ4PeMSAVKlDQ==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:qF/RJ9L8bCpRx5cm6QW9qvqw7nU0ziwi6lLD6KkhT/ZgLS2c6O9s4UFXieM9+waU71YtNfTXQAQ4PeMSAVKlDQ==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:qF/RJ9L8bCpRx5cm6QW9qvqw7nU0ziwi6lLD6KkhT/ZgLS2c6O9s4UFXieM9+waU71YtNfTXQAQ4PeMSAVKlDQ==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
• /subresource-integrity/signatures/tentative/script.window.html [wpt.fyi]: ERROR (Chrome: OK, Safari: ERROR)
  • <script>: No signature, valid integrity check: loads.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature, mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signatures, integrity check matches neither: blocked.: FAIL (Chrome: PASS, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/1df1afcfe160
[wpt PR 49820] - [SRI Message Signatures] Drop the `alg` parameter., a=testonly
https://hg.mozilla.org/integration/autoland/rev/b7e4925bbca1
[wpt PR 49820] - Update wpt metadata, a=testonly

Comment 4

[amarc]

https://hg.mozilla.org/mozilla-central/rev/1df1afcfe160
https://hg.mozilla.org/mozilla-central/rev/b7e4925bbca1