1973887 - [wpt-sync] Sync PR 53381 - __Http- cookie prefix

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 53381 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/53381
Details from upstream follow.

Yoav Weiss <[e-mail]> wrote:

__Http- cookie prefix

This CL implements the __Http- [1] cookie
prefixes. They enable site operators to know that a certain cookie was
issued with the HttpOnly attribute, and was not set by a malicious
script on the client side.

[1] https://github.com/httpwg/http-extensions/pull/3110

Bug: 426096760
Change-Id: I13205747406a8b3c33bd9f0e60abd7526eb9490d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6638647
Reviewed-by: Maks Orlovich \<[e-mail]>
Reviewed-by: Chris Fredrickson \<[e-mail]>
Commit-Queue: Yoav Weiss (@Shopify) \<[e-mail]>
Cr-Commit-Position: refs/heads/main@{#1478348}

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=5d3c6db3da91c3998c39db2181341d3a77c03539

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 3 tests and 7 subtests

Status Summary

Firefox

OK : 3
PASS: 41
FAIL: 8

Chrome

OK : 3
PASS: 41
FAIL: 8

Safari

OK : 3
PASS: 3
FAIL: 46

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /cookie-store/cookieStore_special_names.https.any.html [wpt.fyi]
  • cookieStore.set with __Http- prefix rejects: FAIL (Chrome: FAIL, Safari: FAIL)
  • cookieStore.set with __http- prefix rejects: FAIL (Chrome: FAIL, Safari: FAIL)
• /cookie-store/cookieStore_special_names.https.any.serviceworker.html [wpt.fyi]
  • cookieStore.set with __Http- prefix rejects: FAIL (Chrome: FAIL, Safari: FAIL)
  • cookieStore.set with __http- prefix rejects: FAIL (Chrome: FAIL, Safari: FAIL)
• /cookies/prefix/__Http.https.tentative.html [wpt.fyi]
  • __Http: Does not set via DOM 'Path=/': FAIL (Chrome: FAIL, Safari: FAIL)
  • __Http: Does not set via DOM 'Secure; Path=/': FAIL (Chrome: FAIL, Safari: FAIL)
  • __Http: Does not set via HTTP with 'Path=/;' (without Secure): FAIL (Chrome: FAIL, Safari: FAIL)
  • __Http: Does not set via HTTP with 'Secure; Path=/': FAIL (Chrome: FAIL, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/1b2b160e226f
https://hg.mozilla.org/integration/autoland/rev/b4221f9b8af8
[wpt PR 53381] - __Http- cookie prefix, a=testonly
https://github.com/mozilla-firefox/firefox/commit/a96dad764bda
https://hg.mozilla.org/integration/autoland/rev/cee5d3f0b04d
[wpt PR 53381] - Update wpt metadata, a=testonly

Comment 4

[amarc]

https://hg.mozilla.org/mozilla-central/rev/b4221f9b8af8
https://hg.mozilla.org/mozilla-central/rev/cee5d3f0b04d