Mirrors/servo
1
0
Fork 0
mirror of https://github.com/servo/servo.git synced 2025-08-11 00:15:32 +01:00
Code Issues Projects Releases Packages Wiki Activity

Forward CSP violations from load_whole_resource to parent event loop (#38048)

Browse source 
Any CSP violations happening when loading a worker should be reported
on the global of the document that creates the worker. Since workers
run in different threads, we can't pass in this parent global into
the worker global scope. Instead, we need to send a message to the
parent event loop to report it on the correct global.

Part of https://github.com/servo/servo/issues/4577
Fixes https://github.com/servo/servo/issues/37027

Signed-off-by: Tim van der Lippe <tvanderlippe@gmail.com>
This commit is contained in:
Tim van der Lippe 2025-07-20 18:00:28 +02:00 • committed by GitHub
parent 772c84633e
commit 20386d9854
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
49 changed files with 152 additions and 531 deletions
Download patch file Download diff file Expand all files Collapse all files

3
tests/wpt/meta/content-security-policy/worker-src/dedicated-none.sub.html.ini vendored
View file

@ -1,7 +1,4 @@
[dedicated-none.sub.html]
expected: TIMEOUT
[Same-origin dedicated worker blocked by host-source expression.]
expected: TIMEOUT
[blob: dedicated worker blocked by 'blob:'.]
expected: TIMEOUT

4
tests/wpt/meta/content-security-policy/worker-src/dedicated-worker-src-child-fallback-blocked.sub.html.ini vendored
View file

@ -1,4 +0,0 @@
[dedicated-worker-src-child-fallback-blocked.sub.html]
expected: TIMEOUT
[Same-origin dedicated worker allowed by worker-src 'self'.]
expected: TIMEOUT