Implement PolicyContainer and update the default ReferrerPolicy (#33977)

* Implement PolicyContainer

Signed-off-by: Shane Handley <shanehandley@fastmail.com>

* implement small parts of fetch that interact with policy container

Signed-off-by: Shane Handley <shanehandley@fastmail.com>

* fix: allow policy container's csp list to be unset

Signed-off-by: Shane Handley <shanehandley@fastmail.com>

* fix: use the correct default policy when parsing from a token

Signed-off-by: Shane Handley <shanehandley@fastmail.com>

---------

Signed-off-by: Shane Handley <shanehandley@fastmail.com>
This commit is contained in:
shanehandley 2024-11-08 18:19:23 +11:00 committed by GitHub
parent 4f6283d7fe
commit 6451767428
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
201 changed files with 210 additions and 5178 deletions

View file

@ -1,13 +1,7 @@
[referrer-origin-when-cross-origin.sub.html]
[Importing a remote-origin top-level script with the origin-when-cross-origin policy.]
expected: FAIL
[Importing a same-origin descendant script from a same-origin top-level script with the origin-when-cross-origin policy.]
expected: FAIL
[Importing a remote-origin descendant script from a same-origin top-level script with the origin-when-cross-origin policy.]
expected: FAIL
[Importing a remote-origin descendant script from a remote-origin top-level script with the origin-when-cross-origin policy.]
expected: FAIL

View file

@ -2,15 +2,9 @@
[Importing a same-origin top-level script with the origin policy.]
expected: FAIL
[Importing a remote-origin top-level script with the origin policy.]
expected: FAIL
[Importing a same-origin descendant script from a same-origin top-level script with the origin policy.]
expected: FAIL
[Importing a remote-origin descendant script from a same-origin top-level script with the origin policy.]
expected: FAIL
[Importing a remote-origin descendant script from a remote-origin top-level script with the origin policy.]
expected: FAIL

View file

@ -5,9 +5,6 @@
[Parent module delivered with `origin` policy importing a same-origin descendant script.]
expected: FAIL
[Parent module delivered with `origin-when-cross-origin` policy importing a cross-origin descendant script.]
expected: FAIL
[Remote parent module delivered with `origin-when-cross-origin` policy importing a same-origin-to-parent-module descendant script.]
expected: FAIL

View file

@ -10,3 +10,6 @@
[Importing a same-origin descendant script from a remote-origin top-level script with the unsafe-url policy.]
expected: FAIL
[Importing a remote-origin top-level script with the unsafe-url policy.]
expected: FAIL