<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>146272</bug_id>
          
          <creation_ts>2015-06-23 19:19:19 -0700</creation_ts>
          <short_desc>LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html always passes</short_desc>
          <delta_ts>2015-06-24 07:47:53 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Tools / Tests</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Daniel Bates">dbates</reporter>
          <assigned_to name="Daniel Bates">dbates</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>eric.carlson</cc>
    
    <cc>jer.noble</cc>
    
    <cc>mkwst</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1104304</commentid>
    <comment_count>0</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2015-06-23 19:19:19 -0700</bug_when>
    <thetext>The test LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html will always pass regardless of presence of the Content Security Policy &lt;meta&gt; tag in it because the referenced external text track file, &lt;http://trac.webkit.org/browser/trunk/LayoutTests/http/tests/security/contentSecurityPolicy/resources/track.vtt?rev=138820&gt;, is not a valid WebVTT-formatted file.

Steps to reproduce:

1. Run, Tools/Scripts/run-webkit-tests LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html
Notice that the test passes.

2. Open the file LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html in a text editor, remove the following line, and save the file:
&lt;meta http-equiv=&quot;Content-Security-Policy&quot; content=&quot;media-src &apos;none&apos;&quot;&gt; LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html

3. Run, Tools/Scripts/run-webkit-tests LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html
Notice that the test passes. But it should fail with JavaScript alert &quot;FAIL&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1104305</commentid>
    <comment_count>1</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2015-06-23 19:21:48 -0700</bug_when>
    <thetext>By &lt;https://html.spec.whatwg.org/multipage/embedded-content.html#text-track-failed-to-load&gt;, &quot;failed to load&quot; for an external text track &quot;indicates that the text track was enabled, but when the user agent attempted to obtain it, this failed in some way (e.g. URL could not be resolved, network error, unknown text track format). Some or all of the cues are likely missing and will not be obtained.&quot; In particular, an external text track is considered to have &quot;failed to load&quot; if it has an &quot;unknown text track format&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1104306</commentid>
    <comment_count>2</comment_count>
      <attachid>255470</attachid>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2015-06-23 19:24:08 -0700</bug_when>
    <thetext>Created attachment 255470
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1104361</commentid>
    <comment_count>3</comment_count>
      <attachid>255470</attachid>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2015-06-24 07:47:50 -0700</bug_when>
    <thetext>Comment on attachment 255470
Patch

Clearing flags on attachment: 255470

Committed r185910: &lt;http://trac.webkit.org/changeset/185910&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1104362</commentid>
    <comment_count>4</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2015-06-24 07:47:53 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>255470</attachid>
            <date>2015-06-23 19:24:08 -0700</date>
            <delta_ts>2015-06-24 07:47:50 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-146272-20150623192324.patch</filename>
            <type>text/plain</type>
            <size>2034</size>
            <attacher name="Daniel Bates">dbates</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTg1ODI4CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFu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</data>

          </attachment>
      

    </bug>

</bugzilla>