1943831 - [wpt-sync] Sync PR 50289 - Support inline integrity checks on SVG script elements.

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 50289 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/50289
Details from upstream follow.

Mike West <[e-mail]> wrote:

Support inline integrity checks on SVG script elements.

Bug: 391907163
Change-Id: I55e67d9256ccbc05b2ffc432bd9dc258762af919
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6198224
Reviewed-by: Fredrik Söderquist \<[e-mail]>
Commit-Queue: Mike West \<[e-mail]>
Cr-Commit-Position: refs/heads/main@{#1411395}

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

PR 50289 applied with additional changes from upstream: d52c34a22d7409be629f26e0d95cb659c8d94384

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=1628bc41121c77206e6bb17f12c6bf00dd074d58

Comment 3

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 21 subtests

Status Summary

Firefox

OK : 1
PASS: 15
FAIL: 6

Chrome

OK : 1
PASS: 15
FAIL: 6

Safari

OK : 1
PASS: 15
FAIL: 6

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /subresource-integrity/signatures/tentative/inline.html [wpt.fyi]
  • valid signature, no integrity => blocked: FAIL (Chrome: FAIL, Safari: FAIL)
  • valid signature, invalid integrity => blocked: FAIL (Chrome: FAIL, Safari: FAIL)
  • multiple signature, no integrity => blocked: FAIL (Chrome: FAIL, Safari: FAIL)
  • multiple signature, invalid integrity => blocked: FAIL (Chrome: FAIL, Safari: FAIL)
  • SVG valid signature, no integrity => blocked: FAIL (Chrome: FAIL, Safari: FAIL)
  • SVG valid signature, invalid integrity => blocked: FAIL (Chrome: FAIL, Safari: FAIL)

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/99588ce73788
[wpt PR 50289] - Support inline integrity checks on SVG script elements., a=testonly
https://hg.mozilla.org/integration/autoland/rev/55e6c980ee7b
[wpt PR 50289] - Update wpt metadata, a=testonly

Comment 5

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/99588ce73788
https://hg.mozilla.org/mozilla-central/rev/55e6c980ee7b