2034380 - [wpt-sync] Sync PR 59381 - Enforce integrity() URL modifier for CSS resources

Status: RESOLVED FIXED

(Core :: CSS Parsing and Computation, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 59381 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/59381
Details from upstream follow.

jj <[e-mail]> wrote:

Enforce integrity() URL modifier for CSS resources

Add SRI enforcement for the CSS integrity() URL modifier so that
resources with a non-matching hash are blocked from rendering.

Bug: 435625756
Change-Id: I852fd6ae3b5d93a9c6c5a38cf1979e99731d92cf
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7748032
Reviewed-by: Fredrik Söderquist \<[e-mail]>
Reviewed-by: Mike West \<[e-mail]>
Commit-Queue: jj \<[e-mail]>
Cr-Commit-Position: refs/heads/main@{#1618868}

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=d2fb6e43fab66d1a3d912cf352df070cec664a2d

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 6 tests

Status Summary

Firefox

OK : 2
PASS: 3
FAIL: 3

Chrome

OK : 2
PASS: 3
FAIL: 3

Safari

OK : 2
PASS: 3
FAIL: 3

Links

GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /css/css-values/urls/integrity/url-font-integrity-negative.sub.html [wpt.fyi]
  • integrity() with wrong hash blocks font loading: FAIL (Chrome: FAIL, Safari: FAIL)
• /css/css-values/urls/integrity/url-image-integrity.sub.html [wpt.fyi]: FAIL (Chrome: PASS, Safari: FAIL)
• /css/css-values/urls/integrity/url-svg-filter-integrity.sub.html [wpt.fyi]: FAIL (Chrome: PASS, Safari: FAIL)

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/efb24c5fa29a
https://hg.mozilla.org/mozilla-central/rev/1a93b7535b6e
[wpt PR 59381] - Enforce integrity() URL modifier for CSS resources, a=testonly
https://github.com/mozilla-firefox/firefox/commit/b86495811889
https://hg.mozilla.org/mozilla-central/rev/b654a9511ae8
[wpt PR 59381] - Update wpt metadata, a=testonly

Comment 4

[amarc]

https://hg.mozilla.org/mozilla-central/rev/1a93b7535b6e
https://hg.mozilla.org/mozilla-central/rev/b654a9511ae8