Closed Bug 1943316 Opened 1 month ago Closed 25 days ago

[wpt-sync] Sync PR 50238 - Trusted Types: Improve testing of samples in violation reports.

Categories

(Core :: DOM: Security, task, P4)

Product:
Core
Component:
DOM: Security
Type:
task

Tracking

()

Status:
RESOLVED FIXED
Milestone:
136 Branch
Tracking Flags:
Tracking Status
firefox136 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

(Blocks 1 open bug,
URL
)

Details

(Whiteboard: [wptsync downstream])

Sync web-platform-tests PR 50238 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/50238
Details from upstream follow.

Frédéric Wang <fwang@igalia.com> wrote:

Trusted Types: Improve testing of samples in violation reports.

https://github.com/w3c/trusted-types/issues/576
https://github.com/w3c/trusted-types/issues/494

PR 50238 applied with additional changes from upstream: bb5f8351e2b19b1f4cfd16ca891ca638461c1b4b
Component: web-platform-tests → DOM: Security
Product: Testing → Core

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, and Chrome on GitHub CI

Total 12 tests and 5 subtests

Status Summary

Firefox

OK : 4
FAIL : 33
ERROR: 8

Chrome

OK : 12
PASS : 19
FAIL : 53

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

  • /trusted-types/TrustedTypePolicyFactory-createPolicy-cspTests-none.html [wpt.fyi]
    • Cannot create policy with name 'SomeName' - policy creation throws: FAIL (Chrome: PASS)
    • Cannot create policy with name 'default' - policy creation throws: FAIL (Chrome: PASS)
  • /trusted-types/TrustedTypePolicyFactory-createPolicy-cspTests.html [wpt.fyi]
    • Allowed-name policy creation works.: FAIL (Chrome: PASS)
    • Another allowed-name policy creation works.: FAIL (Chrome: PASS)
    • Non-allowed name policy creation throws.: FAIL (Chrome: PASS)
    • Duplicate name policy creation throws.: FAIL (Chrome: PASS)
  • /trusted-types/require-trusted-types-for-report-only.html [wpt.fyi]
    • Require trusted types for 'script' block create HTML.: FAIL (Chrome: FAIL)
    • Require trusted types for 'script' block create script.: FAIL (Chrome: FAIL)
    • Require trusted types for 'script' block create script URL.: FAIL (Chrome: FAIL)
    • Set require trusted types for 'script' without CSP for trusted types don't block policy creation and using.: FAIL (Chrome: PASS)
  • /trusted-types/require-trusted-types-for.html [wpt.fyi]
    • Require trusted types for 'script' block create HTML.: FAIL (Chrome: FAIL)
    • Require trusted types for 'script' block create script.: FAIL (Chrome: FAIL)
    • Require trusted types for 'script' block create script URL.: FAIL (Chrome: FAIL)
    • Set require trusted types for 'script' without CSP for trusted types don't block policy creation and using.: FAIL (Chrome: PASS)
  • /trusted-types/trusted-types-eval-reporting-no-unsafe-eval.html [wpt.fyi]: ERROR (Chrome: OK)
  • /trusted-types/trusted-types-eval-reporting-report-only.html [wpt.fyi]: ERROR (Chrome: OK)
  • /trusted-types/trusted-types-eval-reporting.html [wpt.fyi]: ERROR (Chrome: OK)
  • /trusted-types/trusted-types-report-only.html [wpt.fyi]: ERROR (Chrome: OK)
  • /trusted-types/trusted-types-reporting.html [wpt.fyi]: ERROR (Chrome: OK)
    • Trusted Type violation report: creating a forbidden policy.: FAIL (Chrome: FAIL)
    • Trusted Type violation report: creating a report-only-forbidden policy.: FAIL (Chrome: FAIL)
    • Trusted Type violation report: creating a forbidden-but-not-reported policy.: FAIL (Chrome: FAIL)
    • Trusted Type violation report: blocked URI and sample for insertAdjacentHTML: FAIL (Chrome: FAIL)
    • Trusted Type violation report: assign string to script url: FAIL (Chrome: FAIL)
    • Trusted Type violation report: assign string to html: FAIL (Chrome: FAIL)
    • Trusted Type violation report: assign trusted script to script; no report: FAIL (Chrome: FAIL)
    • Trusted Type violation report: assign trusted HTML to html; no report: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for innerHTML assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for text assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for script.src assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for script innerText assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for SVGScriptElement href assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for SVGScriptElement href assignment by setAttribute: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for SVGScriptElement text assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for eval: FAIL (Chrome: FAIL)
    • Trusted Type violation report: large values should be handled sanely.: FAIL (Chrome: FAIL)
    • Trusted Type violation report: sample for custom element assignment: FAIL (Chrome: FAIL)
    • Trusted Type violation report: Worker constructor: FAIL (Chrome: FAIL)
  • /trusted-types/trusted-types-source-file-path.html [wpt.fyi]: ERROR (Chrome: OK)
  • /trusted-types/trusted-types-svg-script-set-href.html [wpt.fyi]: ERROR (Chrome: OK)
  • /trusted-types/trusted-types-svg-script.html [wpt.fyi]: ERROR (Chrome: OK)
Pushed by wptsync@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/6f56182ba3f4 [wpt PR 50238] - Trusted Types: Improve testing of samples in violation reports., a=testonly https://hg.mozilla.org/integration/autoland/rev/1e52acccd2c1 [wpt PR 50238] - Update wpt metadata, a=testonly

https://hg.mozilla.org/mozilla-central/rev/6f56182ba3f4
https://hg.mozilla.org/mozilla-central/rev/1e52acccd2c1

Status: NEW → RESOLVED
Closed: 25 days ago
status-firefox136: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 136 Branch
You need to log in before you can comment on or make changes to this bug.