1943618 - [wpt-sync] Sync PR 50274 - Prototyping "Inline Integrity"

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 50274 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/50274
Details from upstream follow.

Mike West <[e-mail]> wrote:

Prototyping "Inline Integrity"

This CL takes a first pass at implementing one spelling of the proposal
in https://mikewest.github.io/inline-integrity/. It only addresses
\<script> elements; if we decide that it's a reasonable direction,
adding support for \<style> should be pretty straightforward. If we
decide it's not a reasonable direction, this is easy to rip out. :)

Bug: 391907163
Change-Id: I35887e1c6d017ffbf3ea99f11bbd12f131c785e4
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6192623
Reviewed-by: Antonio Sartori \<[e-mail]>
Reviewed-by: Fredrik Söderquist \<[e-mail]>
Commit-Queue: Mike West \<[e-mail]>
Cr-Commit-Position: refs/heads/main@{#1410927}

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=64be1ec0f6b5b3ab0e1e759b05965cf57206492a

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, and Chrome on GitHub CI

Total 1 tests and 17 subtests

Status Summary

Firefox

OK : 1
PASS: 13
FAIL: 4

Chrome

OK : 1
PASS: 13
FAIL: 4

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /subresource-integrity/signatures/tentative/inline.html [wpt.fyi]
  • valid signature, no integrity => blocked: FAIL (Chrome: FAIL)
  • valid signature, invalid integrity => blocked: FAIL (Chrome: FAIL)
  • multiple signature, no integrity => blocked: FAIL (Chrome: FAIL)
  • multiple signature, invalid integrity => blocked: FAIL (Chrome: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/29c9e170aae1
[wpt PR 50274] - Prototyping "Inline Integrity", a=testonly
https://hg.mozilla.org/integration/autoland/rev/2edbeab06852
[wpt PR 50274] - Update wpt metadata, a=testonly

Comment 4

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/29c9e170aae1
https://hg.mozilla.org/mozilla-central/rev/2edbeab06852