<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>165407</bug_id>
          
          <creation_ts>2016-12-05 13:11:38 -0800</creation_ts>
          <short_desc>Test insecure-xhr-sync-in-main-frame.html fails with CORS error if run before r203542</short_desc>
          <delta_ts>2016-12-06 09:46:24 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Tools / Tests</component>
          <version>WebKit Local Build</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Daniel Bates">dbates</reporter>
          <assigned_to name="Daniel Bates">dbates</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>lforschler</cc>
    
    <cc>wilander</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1256454</commentid>
    <comment_count>0</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-05 13:11:38 -0800</bug_when>
    <thetext>In &lt;https://trac.webkit.org/changeset/203542&gt; (bug #105462) the test LayoutTests/http/tests/security/mixedContent/insecure-xhr-sync-in-main-frame.html was added to ensure that we block loading insecure data via XHR from an HTTPS page. When this test is run prior to r203542 it fails due to a CORS errors (response cannot be read because it does not list 127.0.0.1:8000 in its Access-Control-Allow-Origin HTTP header) as opposed to showing the intended JavaScript alert failure message. For correctness, we should make this test fail as intended without the fix for r203542.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1256455</commentid>
    <comment_count>1</comment_count>
      <attachid>296179</attachid>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-05 13:13:14 -0800</bug_when>
    <thetext>Created attachment 296179
Layout Test</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1256840</commentid>
    <comment_count>2</comment_count>
      <attachid>296179</attachid>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-06 09:46:21 -0800</bug_when>
    <thetext>Comment on attachment 296179
Layout Test

Clearing flags on attachment: 296179

Committed r209401: &lt;http://trac.webkit.org/changeset/209401&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1256841</commentid>
    <comment_count>3</comment_count>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-12-06 09:46:24 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>296179</attachid>
            <date>2016-12-05 13:13:14 -0800</date>
            <delta_ts>2016-12-06 09:46:21 -0800</delta_ts>
            <desc>Layout Test</desc>
            <filename>bug-165407-20161205131239.patch</filename>
            <type>text/plain</type>
            <size>3802</size>
            <attacher name="Daniel Bates">dbates</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjA4Nzk0CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFu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</data>

          </attachment>
      

    </bug>

</bugzilla>