1950708 - [wpt-sync] Sync PR 50973 - [SRI Message Signatures] `@status` should pull from the response.

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 50973 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/50973
Details from upstream follow.

Mike West <[e-mail]> wrote:

[SRI Message Signatures] @status should pull from the response.

We currently require (but ignore) the req parameter for the @status
derived component. This is incorrect, as @status refers to the
response, not the request. This CL drops that requirement.

Bug: 383409584
Change-Id: Ia070ea014e579bf5bcda28d7aecdf7879954e889
Reviewed-on: https://chromium-review.googlesource.com/6304801
WPT-Export-Revision: 816a968ac7459c36a1130971f4027aa4f8c4835c

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=39b06d624d36f207aabd1dfa87f65c0d1e3ec809

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests and 18 subtests

Status Summary

Firefox

OK : 1
PASS: 9
FAIL: 9

Chrome

OK : 1
PASS: 12
FAIL: 6

Safari

OK : 1
PASS: 9
FAIL: 9

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /subresource-integrity/signatures/tentative/status.window.html [wpt.fyi]
  • fetch(): Valid signature (signature=:BRhRykdW61eK1iEf+ZU+Skf1ErVh8DhogWlPISe3iR7ITX4eryLZwaTAzjsoijRo79gGWnvC8ZIPJoZkByNeBw==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:BRhRykdW61eK1iEf+ZU+Skf1ErVh8DhogWlPISe3iR7ITX4eryLZwaTAzjsoijRo79gGWnvC8ZIPJoZkByNeBw==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:BRhRykdW61eK1iEf+ZU+Skf1ErVh8DhogWlPISe3iR7ITX4eryLZwaTAzjsoijRo79gGWnvC8ZIPJoZkByNeBw==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature (signature=:kc+2CFqbwZ2SP47sGCfiP1u/Q0E+1nZlVlSM3VALQz0JNCVcmUKpt4T0t+bXOYdJuTyK89FjJx/rxzDmgCO8BQ==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:kc+2CFqbwZ2SP47sGCfiP1u/Q0E+1nZlVlSM3VALQz0JNCVcmUKpt4T0t+bXOYdJuTyK89FjJx/rxzDmgCO8BQ==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:kc+2CFqbwZ2SP47sGCfiP1u/Q0E+1nZlVlSM3VALQz0JNCVcmUKpt4T0t+bXOYdJuTyK89FjJx/rxzDmgCO8BQ==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • fetch(): Valid signature (signature=:lHSkRZowLG6kbE9rG4dbe4VW59VGZaJtB/xFErBZKATtWRBTcF4T+Ye0A9yFiI65vgYL+ifVo6U3aZUu7pIUAw==:), matching integrity check: loads.: FAIL (Chrome: FAIL, Safari: FAIL)
  • fetch(): Valid signature (signature=:lHSkRZowLG6kbE9rG4dbe4VW59VGZaJtB/xFErBZKATtWRBTcF4T+Ye0A9yFiI65vgYL+ifVo6U3aZUu7pIUAw==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)
  • <script>: Valid signature (signature=:lHSkRZowLG6kbE9rG4dbe4VW59VGZaJtB/xFErBZKATtWRBTcF4T+Ye0A9yFiI65vgYL+ifVo6U3aZUu7pIUAw==:), mismatched integrity check: blocked.: FAIL (Chrome: PASS, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/7ce3fe8779df
[wpt PR 50973] - [SRI Message Signatures] `@status` should pull from the response., a=testonly
https://hg.mozilla.org/integration/autoland/rev/66138153499b
[wpt PR 50973] - Update wpt metadata, a=testonly

Comment 4

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/7ce3fe8779df
https://hg.mozilla.org/mozilla-central/rev/66138153499b