604759 - CSP inline script violation issue with online tests

Status: RESOLVED FIXED

(Mozilla QA Graveyard :: Mozmill Tests, defect)

Description

[Aaron Train [:aaronmt]]

Currently some of our few but existing online tests (for example Add-on's tests that attempt to install from AMO) are violating some factor of bug 493857 and the browser is logging to console:

CSP WARN:  Directive "violated base restriction: Inline Scripts will not execute" violated

This is seemingly *not* just a warning as it's resulting in a failure in some tests.

I've attached an example test-case that provides an example from one of our Add-on tests that attempts to grab an element on AMO.

Test-case passes on 1.9.1/1.9.2 and fails in recent trunk builds.

We need to not violate this CSP.

Comment 1

[Aaron Train [:aaronmt]]

Attachment: Test-case

Comment 2

[Aaron Train [:aaronmt]]

bug 600584, will make it clearer exactly what and where the issue is

Comment 3

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Which dev can help us here? What would have to be done?

Comment 4

[Henrik Skupin [:whimboo][⌚️UTC+1]]

See bug 604715. Do we have other tests as the add-ons manager ones which throw those warnings out? If not it's a dupe.

Comment 5

[Aaron Train [:aaronmt]]

Your bug 604826 discovered the issue here it looks like, for now I'll mark as dupe and attach the same test case to that bug.

Comment 6

[Henrik Skupin [:whimboo][⌚️UTC+1]]

No. That bug hasn't anything to do with the issue we are seeing here. It's really a dupe of bug 604715.

Comment 7

[Henrik Skupin [:whimboo][⌚️UTC+1]]

As long as bug 610243 hasn't been fixed we will see those warnings in the console and log.

Comment 8

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Oh, and it shouldn't block any of our tests.

Comment 9

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Move of Mozmill Test related project bugs to newly created components. You can
filter out those emails by using "Mozmill-Tests-to-MozillaQA" as criteria.

Comment 10

[u279076]

Anything left to be done for this bug?

Comment 11

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Hm, fixed by bug 610243 as given by my comment 7?

Comment 12

[u279076]

Yeah, that's good enough for me.