Set correct policy-container for worker construction (#36603)

This makes sure that when workers are created, their global scope has
the correct policy-container set
so that we can do CSP-checks.

Signed-off-by: Tim van der Lippe <tvanderlippe@gmail.com>
This commit is contained in:
Tim van der Lippe 2025-04-21 14:47:06 +02:00 committed by GitHub
parent d724c8e9e3
commit 9a14ad8535
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
25 changed files with 67 additions and 136 deletions

View file

@ -1,16 +1,7 @@
[dedicatedworker-connect-src.html]
[Cross-origin 'fetch()' in http: with connect-src 'self']
expected: FAIL
[Cross-origin XHR in http: with connect-src 'self']
expected: FAIL
[Same-origin => cross-origin 'fetch()' in http: with connect-src 'self']
expected: FAIL
[WebSocket in http: with connect-src 'self']
expected: FAIL
[Reports match in http: with connect-src 'self']
expected: FAIL

View file

@ -1,15 +1,16 @@
[dedicatedworker-script-src.html]
expected: TIMEOUT
[Cross-origin `importScripts()` blocked in http: with script-src 'self']
expected: FAIL
expected: TIMEOUT
[`eval()` blocked in http: with script-src 'self']
expected: FAIL
expected: NOTRUN
[`setTimeout([string\])` blocked in http: with script-src 'self']
expected: FAIL
expected: NOTRUN
[Reports are sent for http: with script-src 'self']
expected: FAIL
expected: NOTRUN
[Cross-origin `importScripts()` blocked in blob: with script-src 'self']
expected: FAIL
@ -22,3 +23,6 @@
[Reports are sent for blob: with script-src 'self']
expected: FAIL
[dedicatedworker-script-src]
expected: TIMEOUT