2045981 - [wpt-sync] Sync PR 60489 - Reland "[Connection-Allowlist] Enforce for speculation rules prerender"

Status: RESOLVED FIXED

(Testing :: web-platform-tests, task, P4)

Description

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Sync web-platform-tests PR 60489 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/60489
Details from upstream follow.

Xiaochen Zhou <[e-mail]> wrote:

Reland "[Connection-Allowlist] Enforce for speculation rules prerender"

This is a reland of commit 68d975aadb2878c61da2ed0174be429fe19cebd0

The test fails on Android builder because on Android feature
IsPrerender2FallbackPrefetchSpecRulesEnabled is disabled. There is no
prefetch ahead of the prerender. So the prerender request is made and
gets blocked by the connection allowlist. Its error code should be
UNSAFE_REDIRECT instead of ERR_ABORTED, which is the error code for
feature enabled case.

Original change's description:

[Connection-Allowlist] Enforce for speculation rules prerender

• The prerendering navigation request already correctly sets the
  initiator frame token. The Connection Allowlist(CA) check in navigation
  request enforces according to the initiator frame's CA.
• Add browser test and WPT.
• Add browser test for kPrerender2FallbackPrefetchSpecRules feature.
  When enabled, a fallback prefetch request is created for speculation
  rules prerender. The fallback prefetch is also checked by CA.

About CA: https://github.com/WICG/connection-allowlists

Bug: 447954811, 492462315
Change-Id: I3f14f25d03c9d72eec5a652246769b6e4be36cae
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7886514
Reviewed-by: Andrew Verge \<[e-mail]>
Commit-Queue: Xiaochen Zhou \<[e-mail]>
Reviewed-by: Takashi Toyoshima \<[e-mail]>
Reviewed-by: Lingqi Chi \<[e-mail]>
Cr-Commit-Position: refs/heads/main@{#1642470}

Bug: 447954811, 492462315, 521162817
Cq-Include-Trybots: luci.chromium.try:android-14-arm64-rel,android-arm64-rel
Change-Id: I14fd7db06338ff4cee0a58e045e6404d9e0e83d0

Reviewed-on: https://chromium-review.googlesource.com/7907724
WPT-Export-Revision: a8d31e33553dddae54046ae5e2efe13af0db8132

Comment 1

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

Pushed to try (stability) https://treeherder.mozilla.org/#/jobs?repo=try&revision=d6b646004081339fde1730847b282e40d22750a9

Comment 2

[Web Platform Test Sync Bot [:wpt-sync] (Matrix: #interop:mozilla.org)]

CI Results

Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 54 tests and 5 subtests

Status Summary

Firefox

OK : 49[Gecko-android-em-14-x86_64-debug-geckoview, Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview] 52[Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt]
PASS : 94[Gecko-android-em-14-x86_64-debug-geckoview, Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview] 97[Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt]
FAIL : 169[Gecko-android-em-14-x86_64-debug-geckoview] 170[Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview] 181[Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt]
TIMEOUT: 2[Gecko-android-em-14-x86_64-debug-geckoview, Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt, GitHub] 3[Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
ERROR : 1
NOTRUN : 5[Gecko-android-em-14-x86_64-debug-geckoview, Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt, GitHub] 8[Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]

Chrome

OK : 1
PASS : 2
FAIL : 4

Safari

TIMEOUT: 2
NOTRUN : 5

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Details

New Tests That Don't Pass

• /connection-allowlist/tentative/speculation_rules_prefetch.https.sub.window.html [wpt.fyi]: SKIP
• /connection-allowlist/tentative/dedicated-worker-redirect-block.sub.window.html [wpt.fyi]
  • Same-origin dedicated worker main script fetch with redirect fails due to redirects=block.: FAIL
  • Same-origin subresource fetch from dedicated worker with same-origin redirect fails due to redirects=block.: FAIL
  • Same-origin subresource fetch from dedicated worker with cross-origin redirect fails due to redirects=block.: FAIL
• /connection-allowlist/tentative/dedicated-worker-redirect-default.sub.window.html [wpt.fyi]
  • Same-origin dedicated worker main script fetch with redirect fails by default.: FAIL
  • Same-origin subresource fetch from dedicated worker with same-origin redirect fails by default.: FAIL
  • Same-origin subresource fetch from dedicated worker with cross-origin redirect fails by default.: FAIL
• /connection-allowlist/tentative/dedicated-worker.sub.window.html [wpt.fyi]
  • Cross-origin fetch from a dedicated worker (data: URL) should be blocked by inherited policy.: FAIL
  • Dedicated worker with empty connection allowlist cannot perform any fetches.: FAIL
• /connection-allowlist/tentative/fetch-keepalive-redirect.sub.window.html [wpt.fyi]
  • Fetch keepalive redirect from http://web-platform.test:8000 to http://web-platform.test:8000 fails.: FAIL
  • Fetch keepalive redirect from http://web-platform.test:8000 to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/fetch-keepalive.sub.window.html [wpt.fyi]
  • Fetch to http://www.web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://www1.web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://www2.web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://xn--lve-6lad.web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://not-web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://www.not-web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://www1.not-web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://www2.not-web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://xn--n8j6ds53lwwkrqhv28a.not-web-platform.test:8000 with keepalive: true fails.: FAIL
  • Fetch to http://xn--lve-6lad.not-web-platform.test:8000 with keepalive: true fails.: FAIL
• /connection-allowlist/tentative/fetch-redirect-block.sub.window.html [wpt.fyi]
  • Fetch redirect from http://web-platform.test:8000 to http://web-platform.test:8000 fails.: FAIL
  • Fetch redirect from http://web-platform.test:8000 to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/fetch-redirect-default.sub.window.html [wpt.fyi]
  • Fetch redirect from http://web-platform.test:8000 to http://web-platform.test:8000 fails.: FAIL
  • Fetch redirect from http://web-platform.test:8000 to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/fetch-wildcard.sub.window.html [wpt.fyi]
  • Fetch cors/omit to http://www.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www1.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www1.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www2.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www2.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/fetch.sub.window.html [wpt.fyi]
  • Fetch cors/omit to http://www.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www1.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www1.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www2.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www2.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://not-web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www.not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www.not-web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www1.not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www1.not-web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://www2.not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://www2.not-web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://xn--n8j6ds53lwwkrqhv28a.not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://xn--n8j6ds53lwwkrqhv28a.not-web-platform.test:8000 fails.: FAIL
  • Fetch cors/omit to http://xn--lve-6lad.not-web-platform.test:8000 fails.: FAIL
  • Fetch no-cors/omit to http://xn--lve-6lad.not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/iframe-contentwindow-injection.sub.window.html [wpt.fyi]
  • Injecting <link rel="prefetch"> into same-origin iframe (with its own Connection-Allowlist) contentWindow must be blocked.: FAIL
• /connection-allowlist/tentative/link_header_modulepreload_deny.sub.window.html [wpt.fyi]
  • Link header modulepreload to a not allow-listed url fails.: FAIL
• /connection-allowlist/tentative/link_header_prefetch_as_document_deny.sub.window.html [wpt.fyi]
  • Link header prefetch (as=document) to a not allow-listed url fails.: FAIL
• /connection-allowlist/tentative/link_header_preload_deny.sub.window.html [wpt.fyi]
  • Link header preload to a not allow-listed url fails.: FAIL
• /connection-allowlist/tentative/link_rel_modulepreload.sub.window.html [wpt.fyi]
  • Modulepreload to http://www.web-platform.test:8000 fails.: FAIL
  • Modulepreload to http://www1.web-platform.test:8000 fails.: FAIL
  • Modulepreload to http://www2.web-platform.test:8000 fails.: FAIL
  • Modulepreload to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Modulepreload to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Modulepreload to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/link_rel_prefetch.sub.window.html [wpt.fyi]
  • Prefetch to http://www.web-platform.test:8000 fails.: FAIL
  • Prefetch to http://www1.web-platform.test:8000 fails.: FAIL
  • Prefetch to http://www2.web-platform.test:8000 fails.: FAIL
  • Prefetch to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Prefetch to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Prefetch to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/link_rel_prefetch_as_document.sub.window.html [wpt.fyi]
  • Prefetch (as=document) to http://www.web-platform.test:8000 fails.: FAIL
  • Prefetch (as=document) to http://www1.web-platform.test:8000 fails.: FAIL
  • Prefetch (as=document) to http://www2.web-platform.test:8000 fails.: FAIL
  • Prefetch (as=document) to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Prefetch (as=document) to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Prefetch (as=document) to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/link_rel_preload.sub.window.html [wpt.fyi]
  • Preload to http://www.web-platform.test:8000 fails.: FAIL
  • Preload to http://www1.web-platform.test:8000 fails.: FAIL
  • Preload to http://www2.web-platform.test:8000 fails.: FAIL
  • Preload to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 fails.: FAIL
  • Preload to http://xn--lve-6lad.web-platform.test:8000 fails.: FAIL
  • Preload to http://not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/link_rel_stylesheet.sub.window.html [wpt.fyi]
  • Stylesheet to http://www.web-platform.test:8000 fails.: FAIL
  • Stylesheet to http://www1.web-platform.test:8000 fails.: FAIL
  • Stylesheet to http://not-web-platform.test:8000 fails.: FAIL
  • Stylesheet to http://www.not-web-platform.test:8000 fails.: FAIL
• /connection-allowlist/tentative/link_rel_whitespace_bypass.sub.window.html [wpt.fyi]
  • <link rel="\tprefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="(space)prefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="\nprefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="\rprefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="\fprefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="prefetch\t"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="\t(space)prefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • <link rel="(space)\tprefetch\t(space)"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • innerHTML: <link rel="\tprefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • innerHTML: <link rel="(space)prefetch"> to blocked origin must be blocked by Connection-Allowlist.: FAIL
  • HTML entity encoded rel="prefetch" (prefetch) to blocked origin must be blocked by Connection-Allowlist.: FAIL
• /connection-allowlist/tentative/navigation-anchor-new-tab.sub.window.html [wpt.fyi]
  • Navigation via anchor with target=_blank to http://www.web-platform.test:8000 should fail.: FAIL
  • Navigation via anchor with target=_blank to http://not-web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/navigation-redirect-allow.sub.window.html [wpt.fyi]
  • Redirect from http://not-web-platform.test:8000 to http://web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/navigation-redirect-block.sub.window.html [wpt.fyi]
  • Redirect from http://web-platform.test:8000 to http://web-platform.test:8000 should fail.: FAIL
  • Redirect from http://web-platform.test:8000 to http://not-web-platform.test:8000 should fail.: FAIL
  • Redirect from http://not-web-platform.test:8000 to http://web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/navigation-redirect-default.sub.window.html [wpt.fyi]
  • Redirect from http://web-platform.test:8000 to http://web-platform.test:8000 should fail.: FAIL
  • Redirect from http://web-platform.test:8000 to http://not-web-platform.test:8000 should fail.: FAIL
  • Redirect from http://not-web-platform.test:8000 to http://web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/navigation-response-origin.sub.window.html [wpt.fyi]
  • Navigation to http://www.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www1.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www2.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://xn--lve-6lad.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://not-web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www.not-web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www1.not-web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www2.not-web-platform.test:8000 should fail.: FAIL
  • Navigation to http://xn--n8j6ds53lwwkrqhv28a.not-web-platform.test:8000 should fail.: FAIL
  • Navigation to http://xn--lve-6lad.not-web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/navigation-wildcard.sub.window.html [wpt.fyi]
  • Navigation to http://www.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www1.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://www2.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://xn--lve-6lad.web-platform.test:8000 should fail.: FAIL
  • Navigation to http://not-web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/navigation-window-open.sub.window.html [wpt.fyi]
  • window.open(url, name) to http://www.web-platform.test:8000 should fail.: FAIL
  • window.open(url, name) to http://not-web-platform.test:8000 should fail.: FAIL
  • window.open(url, '_self') to http://www.web-platform.test:8000 should fail.: FAIL
  • window.open(url, '_self') to http://not-web-platform.test:8000 should fail.: FAIL
  • window.open(url) with no target to http://www.web-platform.test:8000 should fail.: FAIL
  • window.open(url) with no target to http://not-web-platform.test:8000 should fail.: FAIL
• /connection-allowlist/tentative/reporting-http.https.sub.html [wpt.fyi]
  • Connection-Allowlist report is delivered to the reporting endpoint for a blocked fetch.: FAIL
• /connection-allowlist/tentative/reporting-image-blocked.https.sub.html [wpt.fyi]
  • Connection-Allowlist report is delivered to the reporting endpoint for a blocked image.: FAIL
• /connection-allowlist/tentative/reporting-multiple-violations.https.sub.html [wpt.fyi]
  • Multiple Connection-Allowlist reports are delivered to the reporting endpoint.: FAIL
• /connection-allowlist/tentative/reporting-report-only.https.sub.html [wpt.fyi]
  • Connection-Allowlist report is delivered to the reporting endpoint for a report-only fetch.: FAIL
• /connection-allowlist/tentative/service-worker-navigation.sub.https.window.html [wpt.fyi]
  • clients.navigate() is blocked by Service Worker's empty Connection-Allowlist: FAIL
  • clients.navigate() is blocked by Document's Connection-Allowlist: FAIL
• /connection-allowlist/tentative/service-worker.sub.https.window.html [wpt.fyi]
  • Cross-origin fetch from a service worker should be blocked by its own policy.: FAIL
  • Service worker with empty connection allowlist cannot perform any fetches.: FAIL
  • Service worker main script fetch is blocked by creator's empty allowlist.: FAIL
  • Same-origin service worker main script fetch is blocked by creator's non-matching allowlist.: FAIL
• /connection-allowlist/tentative/shared-worker.sub.window.html [wpt.fyi]
  • Cross-origin fetch from a shared worker (data: URL) should be blocked by inherited policy.: FAIL
  • Shared worker with empty connection allowlist cannot perform any fetches.: FAIL
  • Shared worker (blob: URL) inherits creator's connection allowlist policy.: FAIL
• /connection-allowlist/tentative/speculation_rules_prerender.https.sub.window.html [wpt.fyi]: TIMEOUT (Chrome: OK, Safari: TIMEOUT)
  • Prerender to https://web-platform.test:8443 succeeds.: TIMEOUT (Chrome: PASS, Safari: TIMEOUT)
  • Prerender to https://www.web-platform.test:8443 fails.: NOTRUN (Chrome: FAIL, Safari: NOTRUN)
  • Prerender to https://www1.web-platform.test:8443 succeeds.: NOTRUN (Chrome: PASS, Safari: NOTRUN)
  • Prerender to https://www2.web-platform.test:8443 fails.: NOTRUN (Chrome: FAIL, Safari: NOTRUN)
  • Prerender to https://xn--n8j6ds53lwwkrqhv28a.web-platform.test:8443 fails.: NOTRUN (Chrome: FAIL, Safari: NOTRUN)
  • Prerender to https://xn--lve-6lad.web-platform.test:8443 fails.: NOTRUN (Chrome: FAIL, Safari: NOTRUN)
• /connection-allowlist/tentative/subresource-blocking.sub.window.html [wpt.fyi]
  • Multi-value rel="alternate prefetch" to blocked origin must be blocked.: FAIL
  • Multi-value rel="prefetch stylesheet" to blocked origin must be blocked.: FAIL
  • Form with cross-origin action to blocked origin must be blocked.: FAIL
  • Button with cross-origin formaction to blocked origin must be blocked.: FAIL
  • <object data="cross-origin"> to blocked origin must be blocked.: FAIL
  • <embed src="cross-origin"> to blocked origin must be blocked.: FAIL
  • CSS background-image: url() to blocked origin must be blocked.: FAIL
  • CSS @import url() to blocked origin must be blocked.: FAIL
  • <img srcset="cross-origin"> to blocked origin must be blocked.: FAIL
  • <video poster="cross-origin"> to blocked origin must be blocked.: FAIL
• /connection-allowlist/tentative/webrtc-block-default.sub.window.html [wpt.fyi]
  • Test that setting Connection-Allowlist blocks WebRTC by default.: FAIL
• /connection-allowlist/tentative/webrtc-block.sub.window.html [wpt.fyi]
  • Test that webrtc=block Connection-Allowlist param is respected.: FAIL
• /connection-allowlist/tentative/webrtc-queuereport-enforce.https.sub.window.html [wpt.fyi]
  • Test that a WebRTC violation report is queued in enforce mode.: FAIL
• /connection-allowlist/tentative/webrtc-queuereport-report-only.https.sub.window.html [wpt.fyi]
  • Test that a WebRTC violation report is queued in report-only mode.: FAIL
• /connection-allowlist/tentative/websocket-shared-worker.https.sub.window.html [wpt.fyi]
  • Cross-origin same-site WebSocket (www) from a shared worker is blocked.: FAIL
  • Cross-origin same-site WebSocket (www1) from a shared worker is blocked.: FAIL
  • Cross-site WebSocket from a shared worker is blocked.: FAIL
  • Cross-site WebSocket (www subdomain) from a shared worker is blocked.: FAIL
• /connection-allowlist/tentative/websocket.sub.window.html [wpt.fyi]
  • Cross-origin same-site WebSocket (www) is blocked.: FAIL
  • Cross-origin same-site WebSocket (www1) is blocked.: FAIL
  • Cross-site WebSocket is blocked.: FAIL
  • Cross-site WebSocket (www subdomain) is blocked.: FAIL
• /connection-allowlist/tentative/webtransport-dedicated-worker.https.sub.window.html [wpt.fyi]: OK [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], SKIP [Gecko-android-em-14-x86_64-debug-geckoview, Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
  • Cross-origin same-site WebTransport (www) from a dedicated worker is blocked.: FAIL
  • Cross-origin same-site WebTransport (www1) from a dedicated worker is blocked.: FAIL
  • Cross-site WebTransport from a dedicated worker is blocked.: FAIL
  • Cross-site WebTransport (www subdomain) from a dedicated worker is blocked.: FAIL
• /connection-allowlist/tentative/webtransport-document.https.sub.window.html [wpt.fyi]: ERROR [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview], OK [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], SKIP [Gecko-android-em-14-x86_64-debug-geckoview]
  • Same-origin WebTransport succeeds.: FAIL [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview], PASS [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt]
  • Cross-origin same-site WebTransport (www) is blocked.: FAIL [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], TIMEOUT [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
  • Cross-origin same-site WebTransport (www1) is blocked.: FAIL [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], NOTRUN [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
  • Cross-site WebTransport is blocked.: FAIL [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], NOTRUN [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
  • Cross-site WebTransport (www subdomain) is blocked.: FAIL [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], NOTRUN [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
• /connection-allowlist/tentative/webtransport-shared-worker.https.sub.window.html [wpt.fyi]: OK [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], SKIP [Gecko-android-em-14-x86_64-debug-geckoview, Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
  • Cross-origin same-site WebTransport (www) from a shared worker is blocked.: FAIL
  • Cross-origin same-site WebTransport (www1) from a shared worker is blocked.: FAIL
  • Cross-site WebTransport from a shared worker is blocked.: FAIL
  • Cross-site WebTransport (www subdomain) from a shared worker is blocked.: FAIL

Tests Disabled in Gecko Infrastructure

• /connection-allowlist/tentative/speculation_rules_prefetch.https.sub.window.html [wpt.fyi]: SKIP
• /connection-allowlist/tentative/webtransport-dedicated-worker.https.sub.window.html [wpt.fyi]: OK [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], SKIP [Gecko-android-em-14-x86_64-debug-geckoview, Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]
• /connection-allowlist/tentative/webtransport-document.https.sub.window.html [wpt.fyi]: ERROR [Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview], OK [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], SKIP [Gecko-android-em-14-x86_64-debug-geckoview]
• /connection-allowlist/tentative/webtransport-shared-worker.https.sub.window.html [wpt.fyi]: OK [Gecko-linux2404-64-debug, Gecko-linux2404-64-opt, Gecko-windows11-32-25h2-debug, Gecko-windows11-32-25h2-opt, Gecko-windows11-64-25h2-debug, Gecko-windows11-64-25h2-opt], SKIP [Gecko-android-em-14-x86_64-debug-geckoview, Gecko-android-em-14-x86_64-lite-opt-geckoview, Gecko-android-em-14-x86_64-opt-geckoview]

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/11a0979ccc79
https://hg.mozilla.org/integration/autoland/rev/fbe2f563554b
[wpt PR 60489] - Reland "[Connection-Allowlist] Enforce for speculation rules prerender", a=testonly
https://github.com/mozilla-firefox/firefox/commit/b3588c6dab24
https://hg.mozilla.org/integration/autoland/rev/87fbb79cad62
[wpt PR 60489] - Update wpt metadata, a=testonly

Comment 4

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/fbe2f563554b
https://hg.mozilla.org/mozilla-central/rev/87fbb79cad62