230353 2021-09-16 09:20:40 -0700 Regression (r282484): [ Catalina ] 2 imported/w3c/web-platform-tests/content-security-policy/ tests are failing 2021-09-16 20:12:29 -0700 1 1 1 Unclassified WebKit New Bugs WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=230293 InRadar P2 Normal --- 1 ayumi_kojima achristensen achristensen cdumez ggaren webkit-bot-watchers-bugzilla webkit-bug-importer oldest_to_newest 1794056 0 ayumi_kojima 2021-09-16 09:20:40 -0700 imported/w3c/web-platform-tests/content-security-policy/form-action/form-action-src-blocked.sub.html imported/w3c/web-platform-tests/content-security-policy/connect-src/connect-src-eventsource-allowed.sub.html Are failing on iOS and Catalina. History: https://results.webkit.org/?suite=layout-tests&suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fcontent-security-policy%2Fconnect-src%2Fconnect-src-eventsource-allowed.sub.html&test=imported%2Fw3c%2Fweb-platform-tests%2Fcontent-security-policy%2Fform-action%2Fform-action-src-blocked.sub.html Diffs: imported/w3c/web-platform-tests/content-security-policy/form-action/form-action-src-blocked.sub.html Diff: --- /Volumes/Data/worker/ios-simulator-14-debug-tests-wk2/build/layout-test-results/imported/w3c/web-platform-tests/content-security-policy/form-action/form-action-src-blocked.sub-expected.txt +++ /Volumes/Data/worker/ios-simulator-14-debug-tests-wk2/build/layout-test-results/imported/w3c/web-platform-tests/content-security-policy/form-action/form-action-src-blocked.sub-actual.txt @@ -1,4 +1,3 @@ -CONSOLE MESSAGE: Refused to load http://localhost:8800/common/redirect.py?location=/content-security-policy/support/postmessage-fail.html because it does not appear in the form-action directive of the Content Security Policy. Tests that blocking form actions works correctly. imported/w3c/web-platform-tests/content-security-policy/connect-src/connect-src-eventsource-allowed.sub.html Diff: --- /Volumes/Data/worker/ios-simulator-14-debug-tests-wk2/build/layout-test-results/imported/w3c/web-platform-tests/content-security-policy/connect-src/connect-src-eventsource-allowed.sub-expected.txt +++ /Volumes/Data/worker/ios-simulator-14-debug-tests-wk2/build/layout-test-results/imported/w3c/web-platform-tests/content-security-policy/connect-src/connect-src-eventsource-allowed.sub-actual.txt @@ -1,4 +1,3 @@ -CONSOLE MESSAGE: Refused to connect to http://www1.localhost:8800/content-security-policy/connect-src/resources/simple-event-stream because it does not appear in the connect-src directive of the Content Security Policy. FAIL Expecting logs: ["allowed"] assert_unreached: unexpected log: blocked Reached unreachable code 1794057 1 webkit-bug-importer 2021-09-16 09:22:54 -0700 <rdar://problem/83200068> 1794138 2 438377 achristensen 2021-09-16 11:49:19 -0700 Created attachment 438377 Patch 1794245 3 ews-feeder 2021-09-16 16:01:34 -0700 Committed r282613 (241772@main): <https://commits.webkit.org/241772@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 438377. 1794319 4 438377 achristensen 2021-09-16 20:12:29 -0700 Comment on attachment 438377 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=438377&action=review > LayoutTests/platform/mac/TestExpectations:1846 > +[ Catalina ] imported/w3c/web-platform-tests/content-security-policy/connect-src/connect-src-eventsource-allowed.sub.html [ Failure ] This was too optimistic. r282631 438377 2021-09-16 11:49:19 -0700 2021-09-16 16:01:35 -0700 Patch bug-230353-20210916114918.patch text/plain 4092 achristensen U3VidmVyc2lvbiBSZXZpc2lvbjogMjgyNTU4CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFu Z2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggYzAzMzkxNmJiMWMxNzllZjQzZmI3 Zjc2OGY4YjkwMjcxNjk3M2NjNy4uZTExMmQ1OTYwMWJmNTk5MDkyMTk4ZmYzNTA1ZWFkOGU1MDY1 OTZhYiAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3Rz L0NoYW5nZUxvZwpAQCAtMSwzICsxLDIxIEBACisyMDIxLTA5LTE2ICBBbGV4IENocmlzdGVuc2Vu ICA8YWNocmlzdGVuc2VuQHdlYmtpdC5vcmc+CisKKyAgICAgICAgUmVncmVzc2lvbiAocjI4MjQ4 NCk6IFsgQ2F0YWxpbmEgXSAyIGltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMvY29udGVu dC1zZWN1cml0eS1wb2xpY3kvIHRlc3RzIGFyZSBmYWlsaW5nCisgICAgICAgIGh0dHBzOi8vYnVn cy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMzAzNTMKKworICAgICAgICBSZXZpZXdlZCBi eSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBBIGNoYW5nZSB1bnJlbGF0ZWQgdG8gQ1NQIG1h ZGUgc29tZSB0ZXN0cyBmYWlsIG9uIHNvbWUgYm90cy4gIFRoaXMgbWFrZXMgdGhlbSBwYXNzIG9u IHRob3NlIGJvdHMuCisKKyAgICAgICAgY29ubmVjdC1zcmMtZXZlbnRzb3VyY2UtYWxsb3dlZC5z dWIuaHRtbCBzd2l0Y2hlZCBmcm9tIGZhaWxpbmcgZXZlcnl3aGVyZSBleGNlcHQgQ2F0YWxpbmEg dG8gZmFpbGluZyBvbmx5IG9uIENhdGFsaW5hIGJlY2F1c2UgSSB1cGRhdGVkIHRoZSB0ZXN0IGV4 cGVjdGF0aW9ucy4KKyAgICAgICAgSXQgYWxzbyBuZWVkcyBpT1MgdGVzdCBleHBlY3RhdGlvbnMu CisKKyAgICAgICAgZm9ybS1hY3Rpb24tc3JjLWJsb2NrZWQuc3ViLmh0bWwgbmVlZHMgaU9TIHRl c3QgZXhwZWN0YXRpb25zLgorCisgICAgICAgICogcGxhdGZvcm0vaW9zL2ltcG9ydGVkL3czYy93 ZWItcGxhdGZvcm0tdGVzdHMvY29udGVudC1zZWN1cml0eS1wb2xpY3kvY29ubmVjdC1zcmMvY29u bmVjdC1zcmMtZXZlbnRzb3VyY2UtYWxsb3dlZC5zdWItZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAg ICAgICAgKiBwbGF0Zm9ybS9pb3MvaW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9jb250 ZW50LXNlY3VyaXR5LXBvbGljeS9mb3JtLWFjdGlvbi9mb3JtLWFjdGlvbi1zcmMtYmxvY2tlZC5z dWItZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBwbGF0Zm9ybS9tYWMvVGVzdEV4cGVj dGF0aW9uczoKKwogMjAyMS0wOS0xNiAgRXJpYyBIdXRjaGlzb24gIDxlaHV0Y2hpc29uQGFwcGxl LmNvbT4KIAogICAgICAgICBVcGRhdGUgdGVzdCBleHBlY3RhdGlvbnMgZm9yIGltcG9ydGVkL3cz Yy93ZWItcGxhdGZvcm0tdGVzdHMvY3NzL2Nzc29tL3N0eWxlc2hlZXQtc2FtZS1vcmlnaW4uc3Vi Lmh0bWwuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9wbGF0Zm9ybS9pb3MvaW1wb3J0ZWQvdzNj L3dlYi1wbGF0Zm9ybS10ZXN0cy9jb250ZW50LXNlY3VyaXR5LXBvbGljeS9jb25uZWN0LXNyYy9j b25uZWN0LXNyYy1ldmVudHNvdXJjZS1hbGxvd2VkLnN1Yi1leHBlY3RlZC50eHQgYi9MYXlvdXRU ZXN0cy9wbGF0Zm9ybS9pb3MvaW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9jb250ZW50 LXNlY3VyaXR5LXBvbGljeS9jb25uZWN0LXNyYy9jb25uZWN0LXNyYy1ldmVudHNvdXJjZS1hbGxv d2VkLnN1Yi1leHBlY3RlZC50eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uNzI0ZTA5OGJiYzZkZmU5Y2UyMmU4ZDEz N2YzN2E1NjM2YzkyYzNmOAotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL3BsYXRmb3Jt L2lvcy9pbXBvcnRlZC93M2Mvd2ViLXBsYXRmb3JtLXRlc3RzL2NvbnRlbnQtc2VjdXJpdHktcG9s aWN5L2Nvbm5lY3Qtc3JjL2Nvbm5lY3Qtc3JjLWV2ZW50c291cmNlLWFsbG93ZWQuc3ViLWV4cGVj dGVkLnR4dApAQCAtMCwwICsxLDMgQEAKKworRkFJTCBFeHBlY3RpbmcgbG9nczogWyJhbGxvd2Vk Il0gYXNzZXJ0X3VucmVhY2hlZDogdW5leHBlY3RlZCBsb2c6IGJsb2NrZWQgUmVhY2hlZCB1bnJl YWNoYWJsZSBjb2RlCisKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL3BsYXRmb3JtL2lvcy9pbXBv cnRlZC93M2Mvd2ViLXBsYXRmb3JtLXRlc3RzL2NvbnRlbnQtc2VjdXJpdHktcG9saWN5L2Zvcm0t YWN0aW9uL2Zvcm0tYWN0aW9uLXNyYy1ibG9ja2VkLnN1Yi1leHBlY3RlZC50eHQgYi9MYXlvdXRU ZXN0cy9wbGF0Zm9ybS9pb3MvaW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9jb250ZW50 LXNlY3VyaXR5LXBvbGljeS9mb3JtLWFjdGlvbi9mb3JtLWFjdGlvbi1zcmMtYmxvY2tlZC5zdWIt ZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjUzYzFkY2M4NTcxY2U1MTVlMDA3NGFmZmUwZmQ2ZmJi Y2E3YzM0OWMKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9wbGF0Zm9ybS9pb3MvaW1w b3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9jb250ZW50LXNlY3VyaXR5LXBvbGljeS9mb3Jt LWFjdGlvbi9mb3JtLWFjdGlvbi1zcmMtYmxvY2tlZC5zdWItZXhwZWN0ZWQudHh0CkBAIC0wLDAg KzEsNyBAQAorCisKK1Rlc3RzIHRoYXQgYmxvY2tpbmcgZm9ybSBhY3Rpb25zIHdvcmtzIGNvcnJl Y3RseS4KKworCitGQUlMIEV4cGVjdGluZyBsb2dzOiBbInZpb2xhdGVkLWRpcmVjdGl2ZT1mb3Jt LWFjdGlvbiIsIlRFU1QgQ09NUExFVEUiXSBhc3NlcnRfdW5yZWFjaGVkOiBMb2dnaW5nIHRpbWVv dXQsIGV4cGVjdGVkIGxvZ3MgdmlvbGF0ZWQtZGlyZWN0aXZlPWZvcm0tYWN0aW9uIG5vdCBzZW50 LiBSZWFjaGVkIHVucmVhY2hhYmxlIGNvZGUKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvcGxh dGZvcm0vbWFjL1Rlc3RFeHBlY3RhdGlvbnMgYi9MYXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMvVGVz dEV4cGVjdGF0aW9ucwppbmRleCA3ZTI1NmEyNDYyZjg2YWZmZjRiYzg5Y2MzZjI0YTRiNmY2MWI5 ZDZmLi44M2U2MTY4OGQ2YzllYjNiOWU0NmFhNWUxZmFjYzNhNzkwNjc0Njk5IDEwMDY0NAotLS0g YS9MYXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMvVGVzdEV4cGVjdGF0aW9ucworKysgYi9MYXlvdXRU ZXN0cy9wbGF0Zm9ybS9tYWMvVGVzdEV4cGVjdGF0aW9ucwpAQCAtMTg0Myw3ICsxODQzLDcgQEAg aW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9tZWRpYS1zb3VyY2UvbWVkaWFzb3VyY2Ut Y2hhbmdldHlwZS1wbGF5LXdpdGhvdXQKIFsgQmlnU3VyKyBdIGZhc3QvcmVwbGFjZWQvZnJhbWUt cmVtb3ZlZC1kdXJpbmctcmVzaXplLXNtYWxsZXIuaHRtbCBbIFBhc3MgQ3Jhc2ggXQogCiAjIDxy ZGFyOi8vcHJvYmxlbS82MDUxMjMwMz4gWyB3azIgXSBpbXBvcnRlZC93M2Mvd2ViLXBsYXRmb3Jt LXRlc3RzL2NvbnRlbnQtc2VjdXJpdHktcG9saWN5L2Nvbm5lY3Qtc3JjL2Nvbm5lY3Qtc3JjLWV2 ZW50c291cmNlLWFsbG93ZWQuc3ViLmh0bWwgaXMgZmxha3kgdGltaW5nIG91dC4KLVsgQmlnU3Vy KyBdIGltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMvY29udGVudC1zZWN1cml0eS1wb2xp Y3kvY29ubmVjdC1zcmMvY29ubmVjdC1zcmMtZXZlbnRzb3VyY2UtYWxsb3dlZC5zdWIuaHRtbCBb IFBhc3MgVGltZW91dCBGYWlsdXJlIF0KK1sgQ2F0YWxpbmEgXSBpbXBvcnRlZC93M2Mvd2ViLXBs YXRmb3JtLXRlc3RzL2NvbnRlbnQtc2VjdXJpdHktcG9saWN5L2Nvbm5lY3Qtc3JjL2Nvbm5lY3Qt c3JjLWV2ZW50c291cmNlLWFsbG93ZWQuc3ViLmh0bWwgWyBGYWlsdXJlIF0KIAogIyA8cmRhcjov L3Byb2JsZW0vNjA1MDE0OTc+IFJFR1JFU1NJT04gKHIyNTgwODApIGZhc3QvaGlzdG9yeS9oaXN0 b3J5LWJhY2std2hpbGUtcGRmLWluLXBhZ2VjYWNoZS5odG1sIGlzIHRpbWluZyBvdXQuCiBbIEJp Z1N1cisgXSBmYXN0L2hpc3RvcnkvaGlzdG9yeS1iYWNrLXdoaWxlLXBkZi1pbi1wYWdlY2FjaGUu aHRtbCBbIFBhc3MgSW1hZ2VPbmx5RmFpbHVyZSBDcmFzaCBUaW1lb3V0IF0K