Run all CSP tests in CI by default. (#36436)

Extending the original set from #36402 since there are additional tests
relevant to the work happening in #36409 and #36363.

Testing: New tests in CI.
Fixes: Part of https://github.com/servo/servo/issues/4577

Signed-off-by: Josh Matthews <josh@joshmatthews.net>
This commit is contained in:
Josh Matthews 2025-04-10 04:09:23 -04:00 committed by GitHub
parent a0730d7154
commit c16ca22970
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
509 changed files with 5492 additions and 12 deletions

View file

@ -0,0 +1,3 @@
[blob-url-in-child-frame-self-navigate-inherits.sub.html]
[Violation report status OK.]
expected: FAIL

View file

@ -0,0 +1,3 @@
[blob-url-in-main-window-self-navigate-inherits.sub.html]
[Violation report status OK.]
expected: FAIL

View file

@ -0,0 +1,7 @@
[blob-url-inherits-from-initiator.sub.html]
expected: TIMEOUT
[Initiator is same-origin with target frame.]
expected: TIMEOUT
[Initiator is cross-origin with target frame.]
expected: TIMEOUT

View file

@ -0,0 +1,3 @@
[document-write-iframe.html]
[document.open() keeps inherited CSPs on empty iframe.]
expected: FAIL

View file

@ -0,0 +1,4 @@
[frame-src-javascript-url.html]
expected: TIMEOUT
[<iframe src='javascript:...'>'s inherits policy (dynamically inserted <iframe> is blocked)]
expected: TIMEOUT

View file

@ -0,0 +1,24 @@
[history-iframe.sub.html]
[History navigation in iframe: "about:blank" document is navigated back from history same-origin.]
expected: FAIL
[History navigation in iframe: "about:blank" document is navigated back from history cross-origin.]
expected: FAIL
[History navigation in iframe: blob URL document is navigated back from history same-origin.]
expected: FAIL
[History navigation in iframe: blob URL document is navigated back from history cross-origin.]
expected: FAIL
[History navigation in iframe: data URL document is navigated back from history same-origin.]
expected: FAIL
[History navigation in iframe: data URL document is navigated back from history cross-origin.]
expected: FAIL
[History navigation in iframe: srcdoc iframe is navigated back from history same-origin.]
expected: FAIL
[History navigation in iframe: srcdoc iframe is navigated back from history cross-origin.]
expected: FAIL

View file

@ -0,0 +1,18 @@
[history.sub.html]
[History navigation: "about:blank" document is navigated back from history same-origin.]
expected: FAIL
[History navigation: "about:blank" document is navigated back from history cross-origin.]
expected: FAIL
[History navigation: blob URL document is navigated back from history same-origin.]
expected: FAIL
[History navigation: blob URL document is navigated back from history cross-origin.]
expected: FAIL
[History navigation: blob URL document is navigated back from history (without bfcache on Firefox) same-origin.]
expected: FAIL
[History navigation: blob URL document is navigated back from history (without bfcache on Firefox) cross-origin.]
expected: FAIL

View file

@ -0,0 +1,30 @@
[iframe-all-local-schemes.sub.html]
[<iframe>'s about:blank inherits policy.]
expected: FAIL
[window about:blank inherits policy.]
expected: FAIL
[<iframe srcdoc>'s inherits policy.]
expected: FAIL
[<iframe src='blob:...'>'s inherits policy.]
expected: FAIL
[window url='blob:...' inherits policy.]
expected: FAIL
[<iframe src='data:...'>'s inherits policy.]
expected: FAIL
[<iframe src='javascript:...'>'s inherits policy (static <img> is blocked)]
expected: FAIL
[window url='javascript:...'>'s inherits policy (static <img> is blocked)]
expected: FAIL
[<iframe src='javascript:...'>'s inherits policy (dynamically inserted <img> is blocked)]
expected: FAIL
[<iframe sandbox src='blob:...'>'s inherits policy. (opaque origin sandbox)]
expected: FAIL

View file

@ -0,0 +1,4 @@
[iframe-srcdoc-history-inheritance.html]
expected: TIMEOUT
[iframe-srcdoc-history-inheritance]
expected: TIMEOUT

View file

@ -0,0 +1,7 @@
[iframe-srcdoc-inheritance.html]
expected: TIMEOUT
[First image should be blocked]
expected: FAIL
[Second image should be blocked]
expected: NOTRUN

View file

@ -0,0 +1,21 @@
[inheritance-from-initiator.sub.html]
[Setting src inherits from parent.]
expected: FAIL
[Changing contentWindow.location inherits from who changed it.]
expected: FAIL
[Changing contentWindow.location indirectly inherits from who changed it directly.]
expected: FAIL
[window.open() inherits from caller.]
expected: FAIL
[Click on anchor inherits from owner of the anchor.]
expected: FAIL
[Form submission through submit() inherits from owner of form.]
expected: FAIL
[Form submission through button click inherits from owner of form.]
expected: FAIL

View file

@ -0,0 +1,7 @@
[inherited-csp-list-modifications-are-local.html]
expected: TIMEOUT
[Test that embedded iframe document image does not load]
expected: FAIL
[Test that spv event is fired]
expected: NOTRUN

View file

@ -0,0 +1,3 @@
[javascript-url-open-in-main-window.html]
[Executing Javascript URL keeps enforcing previous CSPs of the document.]
expected: FAIL

View file

@ -0,0 +1,4 @@
[javascript-url-srcdoc-cross-origin-iframe-inheritance.html]
expected: TIMEOUT
[Nested cross-origin iframe should be blocked by frame-src 'self'.]
expected: TIMEOUT

View file

@ -0,0 +1,9 @@
[location-reload.html]
[location.reload() of empty iframe.]
expected: FAIL
[location.reload() of blob URL iframe.]
expected: FAIL
[location.reload() of srcdoc iframe.]
expected: FAIL

View file

@ -0,0 +1,3 @@
[sandboxed-blob-scheme.html]
[Violation report status OK.]
expected: FAIL

View file

@ -0,0 +1,3 @@
[sandboxed-data-scheme.html]
[Violation report status OK.]
expected: FAIL

View file

@ -0,0 +1,3 @@
[unsandboxed-blob-scheme.html]
[Violation report status OK.]
expected: FAIL

View file

@ -0,0 +1,3 @@
[unsandboxed-data-scheme.html]
[Violation report status OK.]
expected: FAIL

View file

@ -0,0 +1,6 @@
[window-open-local-after-network-scheme.sub.html]
[Popup being navigated to about:blank was same-origin.]
expected: FAIL
[Popup being navigated to about:blank was cross-origin.]
expected: FAIL

View file

@ -0,0 +1,12 @@
[window.html]
[window.open() inherits policy.]
expected: FAIL
[`document.write` into `window.open()` inherits policy.]
expected: FAIL
[window.open('blob:...') inherits policy.]
expected: FAIL
[window.open('javascript:...') inherits policy.]
expected: FAIL