[wpt-sync] Sync PR 54050 - [Trusted Types] Ensure moveBefore pre-conditions are met.
Categories
(Core :: DOM: Security, task, P4)
Tracking
()
Tracking | Status | |
---|---|---|
firefox143 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
()
Details
(Whiteboard: [wptsync downstream])
Sync web-platform-tests PR 54050 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/54050
Details from upstream follow.
Daniel Vogelheim <vogelheim@chromium.org> wrote:
[Trusted Types] Ensure moveBefore pre-conditions are met.
The "Setting script source via Element.moveBefore() drops trustworthiness" subtest of
trusted-types/script-enforcement-001.html fails, since moveBefore requires several
preconditions that the test setup doesn't meet. Fix this so that moveBefore can
run successfully.
Assignee | ||
Updated•2 months ago
|
Assignee | ||
Comment 1•2 months ago
|
||
Assignee | ||
Comment 2•2 months ago
|
||
CI Results
Ran 11 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI
Total 223 tests
Status Summary
Firefox
OK
: 204[Gecko-android-em-7.0-x86_64-qr-debug-geckoview] 209[Gecko-linux2404-64-debug, Gecko-windows11-32-24h2-debug, Gecko-windows11-64-24h2-debug] 213[Gecko-android-em-7.0-x86_64-qr-opt-geckoview] 214[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview] 218[Gecko-linux2404-64-opt, Gecko-windows11-32-24h2-opt, Gecko-windows11-64-24h2-opt]
PASS
: 1[Gecko-linux2204-64-wayland-debug, Gecko-linux2204-64-wayland-opt] 3325[Gecko-android-em-7.0-x86_64-qr-debug-geckoview] 3326[Gecko-windows11-32-24h2-debug, Gecko-windows11-64-24h2-debug] 3327[Gecko-linux2404-64-debug] 3362[Gecko-android-em-7.0-x86_64-qr-opt-geckoview] 3363[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview] 3364[Gecko-linux2404-64-opt, Gecko-windows11-32-24h2-opt] 3366[Gecko-windows11-64-24h2-opt]
FAIL
: 174[Gecko-linux2404-64-debug, Gecko-windows11-64-24h2-opt] 175[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-windows11-32-24h2-debug, Gecko-windows11-64-24h2-debug] 176[Gecko-linux2404-64-opt, Gecko-windows11-32-24h2-opt]
TIMEOUT
: 2[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview] 4[Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview]
ERROR
: 1[GitHub] 4[Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-24h2-debug, Gecko-windows11-32-24h2-opt, Gecko-windows11-64-24h2-debug, Gecko-windows11-64-24h2-opt] 7[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview]
NOTRUN
: 2
Chrome
OK
: 1
PASS
: 26
FAIL
: 6
Safari
OK
: 1
PASS
: 31
FAIL
: 1
Links
Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base
Details
New Tests That Don't Pass
- /trusted-types/HTMLScriptElement-internal-slot.html [wpt.fyi]
- Test TT application when manipulating <script> elements during loading.:
FAIL
- Test TT application when manipulating <script> elements during loading.:
- /trusted-types/SVGScriptElement-internal-slot.html [wpt.fyi]
- Test TT application when manipulating <script> elements during loading.:
FAIL
- Test TT application when manipulating <script> elements during loading.:
- /trusted-types/ServiceWorker-eval.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/ServiceWorkerContainer-register-from-ServiceWorker.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/TrustedTypePolicyFactory-blocking.tentative.html [wpt.fyi]
- Block Trusted Type policy creation by event listener.:
FAIL
- Trusted Type policy creation.:
FAIL
- Block only default Trusted Type policy creation.:
FAIL
- Policy creation called before addEventListener function will not reached the listener.:
FAIL
- Block Trusted Type policy creation by event listener.:
- /trusted-types/block-text-node-insertion-into-script-element.html [wpt.fyi]:
ERROR
- Regression test: Bypass via insertAdjacentText, initial comment.:
FAIL
- Regression test: Bypass via insertAdjacentText, textContent.:
FAIL
- Regression test: Bypass via appendChild into off-document script element.:
FAIL
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],PASS
[Gecko-linux2404-64-debug
] - Regression test: Bypass via appendChild into live script element.:
FAIL
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
],PASS
[Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
] - Spot tests around script + innerHTML interaction.:
FAIL
- Test that default policy applies.:
FAIL
- Test that default policy applies to module script.:
FAIL
- Test a failing default policy.:
FAIL
- Spot tests around script + innerHTML interaction with default policy.:
FAIL
- Regression test: Bypass via insertAdjacentText, initial comment.:
- /trusted-types/block-text-node-insertion-into-svg-script-element.html [wpt.fyi]:
ERROR
- Regression test: Bypass via insertAdjacentText, textContent. svg:script:
FAIL
- Regression test: Bypass via appendChild into off-document script element. svg:script:
FAIL
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],PASS
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
] - Regression test: Bypass via appendChild into live script element. svg:script:
FAIL
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
],PASS
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-windows11-64-24h2-opt
] - Spot tests around script + innerHTML interaction.:
FAIL
- Test that default policy applies. svg:script:
FAIL
- Test that default policy applies with module script. svg:script:
FAIL
- Test a failing default policy. svg:script:
FAIL
- Spot tests around script + innerHTML interaction with default policy.:
FAIL
- Regression test: Bypass via insertAdjacentText, textContent. svg:script:
- /trusted-types/navigate-to-javascript-url-001.html [wpt.fyi]:
ERROR
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
],OK
[Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
] - /trusted-types/navigate-to-javascript-url-003.html [wpt.fyi]:
ERROR
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
],OK
[Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
] - /trusted-types/navigate-to-javascript-url-004.html [wpt.fyi]:
ERROR
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
],OK
[Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
] - /trusted-types/script-enforcement-001-outerHTML.xhtml [wpt.fyi]
- Script source set via TrustedHTML sink Element.outerHTML drops trustworthiness.:
FAIL
- Script source set via TrustedHTML sink Element.outerHTML drops trustworthiness.:
- /trusted-types/script-enforcement-001.html [wpt.fyi]:
ERROR
[GitHub
],OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
] (Chrome:OK
, Safari:OK
)- Script source set via TrustedHTML sink Element.innerHTML drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Script source set via TrustedHTML sink Element.setHTMLUnsafe() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Script source set via Node.nodeValue drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.data drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.appendData() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.insertData() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.replaceData() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.deleteData() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.before() drops trustworthiness.:
FAIL
(Chrome:FAIL
, Safari:PASS
) - Setting script source via CharacterData.after() drops trustworthiness.:
FAIL
(Chrome:FAIL
, Safari:PASS
) - Setting script source via CharacterData.remove() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via CharacterData.replaceWith() drops trustworthiness.:
FAIL
(Chrome:FAIL
, Safari:PASS
) - Setting script source via Node.appendChild() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Node.insertBefore() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Node.replaceChild() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Node.removeChild() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Element.prepend() drops trustworthiness.:
FAIL
(Chrome:FAIL
, Safari:PASS
) - Setting script source via Element.append() drops trustworthiness.:
FAIL
(Chrome:FAIL
, Safari:PASS
) - Setting script source via Element.replaceChildren() drops trustworthiness.:
FAIL
(Chrome:FAIL
, Safari:PASS
) - Setting script source via Element.moveBefore() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - Setting script source via TrustedHTML sink Node.insertAdjacentHTML() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Node.insertAdjacentText() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Range.insertNode() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Setting script source via Range.deleteContents() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Cloning a script via Node.cloneNode() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
) - Cloning a script via Range.cloneContents() drops trustworthiness.:
FAIL
(Chrome:PASS
, Safari:PASS
)
- Script source set via TrustedHTML sink Element.innerHTML drops trustworthiness.:
- /trusted-types/script-enforcement-002-outerHTML.xhtml [wpt.fyi]
- Default policy's calls when setting script source via Element.outerHTML.:
FAIL
- Default policy's calls when setting script source via Element.outerHTML.:
- /trusted-types/script-enforcement-002.html [wpt.fyi]
- Default policy's calls when setting script source via Element.innerHTML.:
FAIL
- Default policy's calls when setting script source via Element.setHTMLUnsafe().:
FAIL
- Default policy's calls when setting script source via Node.nodeValue.:
FAIL
- Default policy's calls when setting script source via CharacterData.data.:
FAIL
- Default policy's calls when setting script source via CharacterData.appendData().:
FAIL
- Default policy's calls when setting script source via CharacterData.insertData().:
FAIL
- Default policy's calls when setting script source via CharacterData.replaceData().:
FAIL
- Default policy's calls when setting script source via CharacterData.deleteData().:
FAIL
- Default policy's calls when setting script source via CharacterData.before().:
FAIL
- Default policy's calls when setting script source via CharacterData.after().:
FAIL
- Default policy's calls when setting script source via CharacterData.remove().:
FAIL
- Default policy's calls when setting script source via CharacterData.replaceWith().:
FAIL
- Default policy's calls when setting script source via Node.appendChild().:
FAIL
- Default policy's calls when setting script source via Node.insertBefore().:
FAIL
- Default policy's calls when setting script source via Node.replaceChild().:
FAIL
- Default policy's calls when setting script source via Node.removeChild().:
FAIL
- Default policy's calls when setting script source via Element.prepend().:
FAIL
- Default policy's calls when setting script source via Element.append().:
FAIL
- Default policy's calls when setting script source via Element.replaceChildren().:
FAIL
- Default policy's calls when setting script source via Element.moveBefore().:
FAIL
- Default policy's calls when setting script source via Node.insertAdjacentText().:
FAIL
- Default policy's calls when setting script source via Node.insertAdjacentHTML().:
FAIL
- Default policy's calls when setting source via Range.insertNode().:
FAIL
- Default policy's calls when setting script source via Range.deleteContents().:
FAIL
- Default policy's calls when cloning a script via Node.cloneNode().:
FAIL
- Default policy's calls when cloning a script via Range.cloneContents().:
FAIL
- Default policy's calls when setting script source via Element.innerHTML.:
- /trusted-types/script-enforcement-003.html [wpt.fyi]
- Script source set via Element.textContent drops trustworthiness.:
FAIL
- Script source set via TrustedHTML sink Element.innerHTML drops trustworthiness.:
FAIL
- Script source set via TrustedHTML sink Element.outerHTML drops trustworthiness.:
FAIL
- Script source set via TrustedHTML sink Element.setHTMLUnsafe() drops trustworthiness.:
FAIL
- Script source set via Node.nodeValue drops trustworthiness.:
FAIL
- Setting script source via CharacterData.data drops trustworthiness.:
FAIL
- Setting script source via CharacterData.appendData() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.insertData() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.replaceData() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.deleteData() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.before() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.after() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.remove() drops trustworthiness.:
FAIL
- Setting script source via CharacterData.replaceWith() drops trustworthiness.:
FAIL
- Setting script source via Node.appendChild() drops trustworthiness.:
FAIL
- Setting script source via Node.insertBefore() drops trustworthiness.:
FAIL
- Setting script source via Node.replaceChild() drops trustworthiness.:
FAIL
- Setting script source via Node.removeChild() drops trustworthiness.:
FAIL
- Setting script source via Element.prepend() drops trustworthiness.:
FAIL
- Setting script source via Element.append() drops trustworthiness.:
FAIL
- Setting script source via Element.replaceChildren() drops trustworthiness.:
FAIL
- Setting script source via ElementmoveBefore() drops trustworthiness.:
FAIL
- Setting script source via TrustedHTML sink Node.insertAdjacentHTML() drops trustworthiness.:
FAIL
- Setting script source via Node.insertAdjacentText() drops trustworthiness.:
FAIL
- Setting script source via Range.insertNode() drops trustworthiness.:
FAIL
- Setting script source via Range.deleteContents() drops trustworthiness.:
FAIL
- Cloning a script via Node.cloneNode() drops trustworthiness.:
FAIL
- Cloning a script via Range.cloneContents() drops trustworthiness.:
FAIL
- Script source set via Element.textContent drops trustworthiness.:
- /trusted-types/script-enforcement-004.html [wpt.fyi]
- Default policy's calls when setting script source via SVGScriptElement.textContent.:
FAIL
- Default policy's calls when setting script source via Element.innerHTML.:
FAIL
- Default policy's calls when setting script source via Element.outerHTML.:
FAIL
- Default policy's calls when setting script source via Element.setHTMLUnsafe().:
FAIL
- Default policy's calls when setting script source via Node.nodeValue.:
FAIL
- Default policy's calls when setting script source via CharacterData.data.:
FAIL
- Default policy's calls when setting script source via CharacterData.appendData().:
FAIL
- Default policy's calls when setting script source via CharacterData.insertData().:
FAIL
- Default policy's calls when setting script source via CharacterData.replaceData().:
FAIL
- Default policy's calls when setting script source via CharacterData.deleteData().:
FAIL
- Default policy's calls when setting script source via CharacterData.before().:
FAIL
- Default policy's calls when setting script source via CharacterData.after().:
FAIL
- Default policy's calls when setting script source via CharacterData.remove().:
FAIL
- Default policy's calls when setting script source via CharacterData.replaceWith().:
FAIL
- Default policy's calls when setting script source via Node.appendChild().:
FAIL
- Default policy's calls when setting script source via Node.insertBefore().:
FAIL
- Default policy's calls when setting script source via Node.replaceChild().:
FAIL
- Default policy's calls when setting script source via Node.removeChild().:
FAIL
- Default policy's calls when setting script source via Element.prepend().:
FAIL
- Default policy's calls when setting script source via Element.append().:
FAIL
- Default policy's calls when setting script source via Element.replaceChildren().:
FAIL
- Default policy's calls when setting script source via Element.moveBefore().:
FAIL
- Default policy's calls when setting script source via Node.insertAdjacentText().:
FAIL
- Default policy's calls when setting script source via Node.insertAdjacentHTML().:
FAIL
- Default policy's calls when setting source via Range.insertNode().:
FAIL
- Default policy's calls when setting script source via Range.deleteContents().:
FAIL
- Default policy's calls when cloning a script via Node.cloneNode().:
FAIL
- Default policy's calls when cloning a script via Range.cloneContents().:
FAIL
- Default policy's calls when setting script source via SVGScriptElement.textContent.:
- /trusted-types/script-enforcement-005.html [wpt.fyi]
- Empty HTMLScriptElement is executed if the default policy makes it non-empty.:
FAIL
- Non-empty HTMLScriptElement is not executed if the default policy makes it empty.:
FAIL
- Empty SVGScriptElement is executed if the default policy makes it non-empty.:
FAIL
- Non-empty SVGScriptElement is not executed if the default policy makes it empty.:
FAIL
- Empty HTMLScriptElement is executed if the default policy makes it non-empty.:
- /trusted-types/script-enforcement-006.html [wpt.fyi]:
ERROR
- Untrusted HTMLScriptElement with classic type uses the source text returned by the default policy.:
FAIL
- Untrusted HTMLScriptElement of importmap type uses the source text returned by the default policy.:
FAIL
- Untrusted HTMLScriptElement of module type uses the source text returned by the default policy.:
FAIL
- Untrusted HTMLScriptElement with classic type uses the source text returned by the default policy.:
- /trusted-types/script-enforcement-007.html [wpt.fyi]:
ERROR
- Untrusted SVGScriptElement with classic type uses the source text returned by the default policy.:
FAIL
- Untrusted SVGScriptElement of importmap type uses the source text returned by the default policy.:
FAIL
- Untrusted SVGScriptElement of module type uses the source text returned by the default policy.:
FAIL
- Untrusted SVGScriptElement with classic type uses the source text returned by the default policy.:
- /trusted-types/script-enforcement-008.https.html [wpt.fyi]
- Untrusted HTMLScriptElement with classic type uses the source text returned by the default policy for inline CSP check.:
FAIL
- Untrusted HTMLScriptElement of importmap type uses the source text returned by the default policy for inline CSP check.:
FAIL
- Untrusted HTMLScriptElement of module type uses the source text returned by the default policy for inline CSP check.:
FAIL
- Untrusted HTMLScriptElement with classic type uses the source text returned by the default policy for inline CSP check.:
- /trusted-types/script-enforcement-009.https.html [wpt.fyi]
- Untrusted SVGScriptElement with classic type uses the source text returned by the default policy for inline CSP check.:
FAIL
- Untrusted SVGScriptElement of importmap type uses the source text returned by the default policy for inline CSP check.:
FAIL
- Untrusted SVGScriptElement of module type uses the source text returned by the default policy for inline CSP check.:
FAIL
- Untrusted SVGScriptElement with classic type uses the source text returned by the default policy for inline CSP check.:
- /trusted-types/script-enforcement-010.html [wpt.fyi]
- Changing script's type from classic to module in the default policy works.:
FAIL
- Changing script's type from module to classic in the default policy works.:
FAIL
- Changing script's type from classic to module in the default policy works.:
- /trusted-types/script-enforcement-011.html [wpt.fyi]
- Changing script's type from classic to module in the default policy works.:
FAIL
- Changing script's type from module to classic in the default policy works.:
FAIL
- Changing script's type from classic to module in the default policy works.:
- /trusted-types/trusted-types-from-literal.tentative.html [wpt.fyi]
- TrustedHTML.fromLiteral is supported:
FAIL
- TrustedHTML.fromLiteral: Basic string literal works.:
FAIL
- TrustedHTML.fromLiteral: Empty string literal works.:
FAIL
- TrustedHTML.fromLiteral: A very important emoji works.:
FAIL
- TrustedHTML.fromLiteral: Multi-line string literal works.:
FAIL
- TrustedHTML.fromLiteral: Bound method works.:
FAIL
- TrustedScript.fromLiteral is supported:
FAIL
- TrustedScript.fromLiteral: Basic string literal works.:
FAIL
- TrustedScript.fromLiteral: Empty string literal works.:
FAIL
- TrustedScript.fromLiteral: A very important emoji works.:
FAIL
- TrustedScript.fromLiteral: Multi-line string literal works.:
FAIL
- TrustedScript.fromLiteral: Bound method works.:
FAIL
- TrustedScriptURL.fromLiteral is supported:
FAIL
- TrustedScriptURL.fromLiteral: Basic string literal works.:
FAIL
- TrustedScriptURL.fromLiteral: Empty string literal works.:
FAIL
- TrustedScriptURL.fromLiteral: A very important emoji works.:
FAIL
- TrustedScriptURL.fromLiteral: Multi-line string literal works.:
FAIL
- TrustedScriptURL.fromLiteral: Bound method works.:
FAIL
- TrustedHTML.fromLiteral: Normalization of value works.:
FAIL
- TrustedScript.fromLiteral: No normalization of value occurs.:
FAIL
- TrustedScriptURL.fromLiteral: No normalization of value occurs.:
FAIL
- TrustedHTML.fromLiteral is supported:
- /trusted-types/trusted-types-navigation.html?31-35 [wpt.fyi]:
OK
[Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],TIMEOUT
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
]- Navigate a window via form-submission with javascript:-urls w/ a default policy throwing an exception in enforcing mode.:
PASS
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],TIMEOUT
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
] - Navigate a window via form-submission with javascript:-urls w/ a default policy throwing an exception in report-only mode.:
NOTRUN
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
],PASS
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
] - Navigate a window via form-submission with javascript:-urls w/ a default policy making the URL invalid in enforcing mode.:
NOTRUN
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
],PASS
[Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],TIMEOUT
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
]
- Navigate a window via form-submission with javascript:-urls w/ a default policy throwing an exception in enforcing mode.:
- /trusted-types/trusted-types-navigation.html?21-25 [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],TIMEOUT
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
]- Navigate a window via form-submission with javascript:-urls in enforcing mode.:
PASS
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-linux2404-64-debug
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-debug
,Gecko-windows11-64-24h2-opt
],TIMEOUT
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
]
- Navigate a window via form-submission with javascript:-urls in enforcing mode.:
- /trusted-types/trusted-types-reporting-for-DedicatedWorker-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-HTMLScriptElement-children-change.html [wpt.fyi]
- sink mismatch violation report when the script text is changed by manipulating its children.:
FAIL
- sink mismatch violation report when the script text is changed by manipulating its children.:
- /trusted-types/trusted-types-reporting-for-SVGScriptElement-children-change.html [wpt.fyi]
- sink mismatch violation report when the script text is changed by manipulating its children.:
FAIL
- sink mismatch violation report when the script text is changed by manipulating its children.:
- /trusted-types/trusted-types-reporting-for-ServiceWorker-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-ServiceWorker-function-constructor.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-ServiceWorker-setTimeout-setInterval.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-SharedWorker-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-Window-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
]
Tests Disabled in Gecko Infrastructure
- /trusted-types/ServiceWorker-eval.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/ServiceWorkerContainer-register-from-ServiceWorker.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-DedicatedWorker-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-ServiceWorker-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-ServiceWorker-function-constructor.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-ServiceWorker-setTimeout-setInterval.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-SharedWorker-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
] - /trusted-types/trusted-types-reporting-for-Window-ServiceWorkerContainer-register.https.html [wpt.fyi]:
OK
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux2404-64-opt
,Gecko-windows11-32-24h2-opt
,Gecko-windows11-64-24h2-opt
],SKIP
[Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-linux2404-64-debug
,Gecko-windows11-32-24h2-debug
,Gecko-windows11-64-24h2-debug
]
Comment 4•1 month ago
|
||
bugherder |
Description
•