1940794 - [wpt-sync] Sync PR 49999 - Verify the trusted type "sink" value for WorkerGlobalScope.importScri…

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 49999 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/49999
Details from upstream follow.

Frédéric Wang <[e-mail]> wrote:

Verify the trusted type "sink" value for WorkerGlobalScope.importScri…

…pts()

It's "Worker importScripts" by 1.2.1 of
https://html.spec.whatwg.org/multipage/workers.html#importing-scripts-and-libraries

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=653bdcccbc680e5e05cd879e402b6dbdfd897f6f

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 2 tests and 10 subtests

Status Summary

Firefox

OK : 2
PASS : 12
FAIL : 14
ERROR: 2

Chrome

OK : 2
PASS : 22
FAIL : 4

Safari

ERROR: 2

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /trusted-types/WorkerGlobalScope-importScripts.html [wpt.fyi]: ERROR [GitHub], OK [Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-debug, Gecko-windows11-64-2009-qr-opt] (Chrome: OK, Safari: ERROR)
  • importScripts with untrusted URLs throws in dedicated worker: FAIL (Chrome: PASS)
  • null is not a trusted script URL throws in dedicated worker: FAIL (Chrome: PASS)
  • importScripts with two URLs, both strings, in dedicated worker: FAIL (Chrome: PASS)
  • importScripts with two URLs, one trusted, in dedicated worker: FAIL (Chrome: PASS)
  • importScripts with untrusted URLs and default policy works in dedicated worker: FAIL (Chrome: FAIL)
  • importScripts with one trusted and one untrusted URLs and default policy works in dedicated worker: FAIL (Chrome: FAIL)
  • importScripts with untrusted URLs throws in shared worker: FAIL (Chrome: PASS)
  • null is not a trusted script URL throws in shared worker: FAIL (Chrome: PASS)
  • importScripts with two URLs, both strings, in shared worker: FAIL (Chrome: PASS)
  • importScripts with two URLs, one trusted, in shared worker: FAIL (Chrome: PASS)
  • importScripts with untrusted URLs and default policy works in shared worker: FAIL (Chrome: FAIL)
  • importScripts with one trusted and one untrusted URLs and default policy works in shared worker: FAIL (Chrome: FAIL)
• /trusted-types/worker-constructor.https.html [wpt.fyi]: ERROR [GitHub], OK [Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-debug, Gecko-windows11-64-2009-qr-opt] (Chrome: OK, Safari: ERROR)
  • Block ServiceWorker creation via String: FAIL (Chrome: PASS)
  • Create ServiceWorker via string with default policy.: FAIL (Chrome: PASS)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a3e832afb676
[wpt PR 49999] - Verify the trusted type "sink" value for WorkerGlobalScope.importScri…, a=testonly

Comment 4

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/a3e832afb676