2003033 - WPTs for framebusting fail in WPT repo

Status: ASSIGNED

(Core :: DOM: Security, defect)

Description

[Malte Jürgens [:maltejur]]

The tentative web platform tests added with Bug 1419501 to test our framebusting intervention currently only pass in mozilla-central and not in the WPT repository on GitHub. This is because our framebusting implementation is only active if dom.disable_open_during_load (pop-up blocking) is enabled, and that pref generally gets disabled in automation builds. In mozilla-central, we work around this by manually disabling dom.disable_open_during_load again for the individual tests. Setting individual prefs is not possible, though, in the main WPT GitHub repository outside mozilla-central.

Comment 1

[Malte Jürgens [:maltejur]]

Attachment: Bug 2003033 - Merge framebusting WPTs in the-iframe-element into existing tests in browsing-the-web r?mdauer!

With Bug 2001668, manually enabling pop-up blocking via pref for these
individual WPTs is no longer required.

Comment 2

[Malte Jürgens [:maltejur]]

Attachment: Bug 2003033 - Remove unnescessary user activation from framebusting WPTs r?mdauer!

The assumption in these tests previously was, that, contrary to the rest of the
WPTs, they should be run with pop-up blocking enabled. This is no longer the
case, so these manual user activations to prevent pop-ups from being blocked can
be removed.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1419501

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1419501

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:freddy, could you have a look please?

For more information, please visit BugBot documentation.