Run all CSP tests in CI by default. (#36436)

Extending the original set from #36402 since there are additional tests
relevant to the work happening in #36409 and #36363.

Testing: New tests in CI.
Fixes: Part of https://github.com/servo/servo/issues/4577

Signed-off-by: Josh Matthews <josh@joshmatthews.net>
This commit is contained in:
Josh Matthews 2025-04-10 04:09:23 -04:00 committed by GitHub
parent a0730d7154
commit c16ca22970
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
509 changed files with 5492 additions and 12 deletions

View file

@ -0,0 +1,3 @@
[javascript_src_denied_missing_unsafe_hashes-href.html]
[javascript: navigation using <a href> should be refused due to missing unsafe-hashes]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_missing_unsafe_hashes-href_blank-script-src-elem.html]
[javascript: navigation using <a href target=_blank> should be refused due to missing unsafe-hashes]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_missing_unsafe_hashes-href_blank.html]
[javascript: navigation using <a href target=_blank> should be refused due to missing unsafe-hashes]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_missing_unsafe_hashes-window_location.html]
[Test that the javascript: src is not allowed to run]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_missing_unsafe_hashes-window_open.html]
[Test that the javascript: src is not allowed to run]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_wrong_hash-href.html]
[javascript: navigation using <a href> should be refused due to wrong hash]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_wrong_hash-href_blank-script-src-elem.html]
[javascript: navigation using <a href target=_blank> should be refused due to wrong hash]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_wrong_hash-href_blank.html]
[javascript: navigation using <a href target=_blank> should be refused due to wrong hash]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_wrong_hash-window_location.html]
[Test that the javascript: src is not allowed to run]
expected: FAIL

View file

@ -0,0 +1,3 @@
[javascript_src_denied_wrong_hash-window_open.html]
[Test that the javascript: src is not allowed to run]
expected: FAIL

View file

@ -0,0 +1,4 @@
[script_event_handlers_denied_missing_unsafe_hashes.html]
expected: TIMEOUT
[Test that the inline event handler is not allowed to run]
expected: NOTRUN

View file

@ -0,0 +1,4 @@
[script_event_handlers_denied_wrong_hash.html]
expected: TIMEOUT
[Test that the inline event handler is not allowed to run]
expected: NOTRUN

View file

@ -0,0 +1,4 @@
[style_attribute_denied_missing_unsafe_hashes.html]
expected: TIMEOUT
[Test that the inline style attribute is blocked]
expected: NOTRUN

View file

@ -0,0 +1,4 @@
[style_attribute_denied_wrong_hash.html]
expected: TIMEOUT
[Test that the inline style attribute is blocked]
expected: NOTRUN