Closed
Bug 1949434
Opened 1 month ago
Closed 24 days ago
[wpt-sync] Sync PR 50823 - [Signature-based SRI] Test CORS integration.
Categories
(Core :: DOM: Security, task, P4)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
137 Branch
| Tracking | Status | |
|---|---|---|
| firefox137 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [wptsync downstream])
Sync web-platform-tests PR 50823 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/50823
Details from upstream follow.
Mike West <mkwst@chromium.org> wrote:
[Signature-based SRI] Test CORS integration.
This CL splits the fetch tests into server-initiated and
client-initiated on the one hand, and adds support for
cross-origin requests with and without CORS assertions. This is a
test-only change which does not impact Chromium's behavior.Bug: 375224898
Change-Id: Ia9cfce39d8d18287b3284ebce8b346808fc72e3d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6275129
Reviewed-by: Kent Tamura \<tkent@chromium.org>
Reviewed-by: Yoav Weiss (@Shopify) \<yoavweiss@chromium.org>
Commit-Queue: Mike West \<mkwst@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1422427}
|
Assignee | |
Comment 1•1 month ago
|
||
PR 50823 applied with additional changes from upstream: 9d6ac0436f310a81cae3a5ee4a263940036629b8
|
|
Assignee | |
Updated•1 month ago
|
Component: web-platform-tests → DOM: Security
Product: Testing → Core
|
|
Assignee | |
Comment 2•1 month ago
|
||
Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=fd4e9f13dfe30f1a51d96c36f78315ab017570d7
|
|
Assignee | |
Updated•1 month ago
|
Whiteboard: [wptsync downstream] → [wptsync downstream error]
|
|
Assignee | |
Updated•1 month ago
|
Whiteboard: [wptsync downstream error] → [wptsync downstream]
|
|
Assignee | |
Comment 3•1 month ago
|
||
Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=a7679cdbcf5a7d86e3fbd59abccc23d1f999ef41
|
|
Assignee | |
Comment 4•1 month ago
|
||
CI Results
Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI
Total 7 tests and 12 subtests
Status Summary
Firefox
OK : 6
PASS : 60
FAIL : 37
ERROR: 1
Chrome
OK : 7
PASS : 89
FAIL : 8
Safari
OK : 6
PASS : 60
FAIL : 37
ERROR: 1
Links
Details
New Tests That Don't Pass
- /subresource-integrity/signatures/tentative/client-initiated.cross-origin.window.html [wpt.fyi]
fetch(): No signature, valid integrity check, w/ cors: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature, matching integrity check, cors: loads.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature, mismatched integrity check, cors: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature, one valid integrity check, cors: loads.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Invalid signature, matching integrity check, cors: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Invalid signature, mismatched integrity check, cors: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Invalid signature, one valid integrity check, cors: loads.:FAIL(Chrome:PASS, Safari:FAIL)
- /subresource-integrity/signatures/tentative/client-initiated.same-origin.window.html [wpt.fyi]
fetch(): No signature, valid integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature, matching integrity check: loads.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature, mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature, one valid integrity check: loads.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Invalid signature, malformed integrity check: blocked.:FAIL(Chrome:FAIL, Safari:FAIL)fetch(): Invalid signature, matching integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Invalid signature, mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Invalid signature, one valid integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)
- /subresource-integrity/signatures/tentative/csp.window.html [wpt.fyi]
<script>: Valid signature, valid integrity check: loads.:FAIL(Chrome:FAIL, Safari:FAIL)<script>: Valid signatures, integrity check matches one: loads.:FAIL(Chrome:FAIL, Safari:FAIL)
- /subresource-integrity/signatures/tentative/inline.html [wpt.fyi]
- valid
signature, nointegrity=> blocked:FAIL(Chrome:PASS, Safari:FAIL) - valid
signature, invalidintegrity=> blocked:FAIL(Chrome:PASS, Safari:FAIL) - multiple
signature, nointegrity=> blocked:FAIL(Chrome:PASS, Safari:FAIL) - multiple
signature, invalidintegrity=> blocked:FAIL(Chrome:PASS, Safari:FAIL) - SVG valid
signature, nointegrity=> blocked:FAIL(Chrome:PASS, Safari:FAIL) - SVG valid
signature, invalidintegrity=> blocked:FAIL(Chrome:PASS, Safari:FAIL)
- valid
- /subresource-integrity/signatures/tentative/path.window.html [wpt.fyi]
fetch(): Valid signature (signature=:+sRkplliS3TanqASHirBTokxhOn6fRTodc7i6Q6PUMsSPP0RJ2Xdb/woWz0+JXaBXAfa55qj+N9paXP5j7DFCw==:), matching integrity check: loads.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature (signature=:+sRkplliS3TanqASHirBTokxhOn6fRTodc7i6Q6PUMsSPP0RJ2Xdb/woWz0+JXaBXAfa55qj+N9paXP5j7DFCw==:), mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)<script>: Valid signature (signature=:+sRkplliS3TanqASHirBTokxhOn6fRTodc7i6Q6PUMsSPP0RJ2Xdb/woWz0+JXaBXAfa55qj+N9paXP5j7DFCw==:), mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature (signature=:YPH2/cRdbR+DPhb1hVG1BgwCpzPLECsAyBavmb7QaXtCF1Hx2QyYp0ki1mi7UftMOnLVpBJdfdLb99Nzf0XqDg==:), matching integrity check: loads.:FAIL(Chrome:PASS, Safari:FAIL)fetch(): Valid signature (signature=:YPH2/cRdbR+DPhb1hVG1BgwCpzPLECsAyBavmb7QaXtCF1Hx2QyYp0ki1mi7UftMOnLVpBJdfdLb99Nzf0XqDg==:), mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)<script>: Valid signature (signature=:YPH2/cRdbR+DPhb1hVG1BgwCpzPLECsAyBavmb7QaXtCF1Hx2QyYp0ki1mi7UftMOnLVpBJdfdLb99Nzf0XqDg==:), mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)
- /subresource-integrity/signatures/tentative/script.window.html [wpt.fyi]:
ERROR(Chrome:OK, Safari:ERROR)<script>: No signature, integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)<script>: Valid signature, mismatched integrity check: blocked.:FAIL(Chrome:PASS, Safari:FAIL)<script>: Valid signatures, integrity check matches neither: blocked.:FAIL(Chrome:PASS, Safari:FAIL)
- /subresource-integrity/signatures/tentative/server-initiated.window.html [wpt.fyi]
fetch(): Invalid signature, same-origin: blocked.:FAIL(Chrome:FAIL, Safari:FAIL)fetch(): Invalid signature, cross-origin w/o cors, mode: no-cors: blocked.:FAIL(Chrome:FAIL, Safari:FAIL)fetch(): Invalid signature, same-origin w/ cors: blocked.:FAIL(Chrome:FAIL, Safari:FAIL)fetch(): Invalid signature, cross-origin w/ cors, mode: no-cors: blocked.:FAIL(Chrome:FAIL, Safari:FAIL)fetch(): Invalid signature, cross-origin w/ cors, mode: cors: blocked.:FAIL(Chrome:FAIL, Safari:FAIL)
Pushed by wptsync@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/e1c927df4d01
[wpt PR 50823] - [Signature-based SRI] Test CORS integration., a=testonly
https://hg.mozilla.org/integration/autoland/rev/2596d7cc1646
[wpt PR 50823] - Update wpt metadata, a=testonly
|
||
Comment 6•24 days ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/e1c927df4d01
https://hg.mozilla.org/mozilla-central/rev/2596d7cc1646
Status: NEW → RESOLVED
Closed: 24 days ago
status-firefox137:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 137 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•