<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>312315</bug_id>
          
          <creation_ts>2026-04-14 15:00:33 -0700</creation_ts>
          <short_desc>[Site Isolation] CSP frame-src-cross-origin-load.html test fails with site isolation due to incorrect onload assignment</short_desc>
          <delta_ts>2026-04-15 08:58:26 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>roberto_rodriguez2</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2200378</commentid>
    <comment_count>0</comment_count>
    <who name="">roberto_rodriguez2</who>
    <bug_when>2026-04-14 15:00:33 -0700</bug_when>
    <thetext>Test http/tests/security/contentSecurityPolicy/frame-src-cross-origin-load.html is incorrectly written with iframe.onload = loadEvent(), which calls loadEvent immediately instead of assigning it as a handler. All three load callbacks fire synchronously and finishJSTest runs before any iframe actually loads. Without site isolation this coincidentally works because the cross-origin iframe runs in the same process and its console.log(&quot;PASS&quot;) IPC reaches the UIProcess before notifyDone() finalizes the test. With site isolation the iframe loads in a separate process, and the extra IPC latency means the console message arrives after gotFinalMessage is set and is silently dropped.

The fix is to properly assign the iframe.onload handler and update the expected output accordingly now that iframe onloads fire in the correct order.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2200379</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2026-04-14 15:00:40 -0700</bug_when>
    <thetext>&lt;rdar://problem/174778663&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2200405</commentid>
    <comment_count>2</comment_count>
    <who name="">roberto_rodriguez2</who>
    <bug_when>2026-04-14 15:49:08 -0700</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/62774</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2200670</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2026-04-15 08:58:24 -0700</bug_when>
    <thetext>Committed 311290@main (e12578547350): &lt;https://commits.webkit.org/311290@main&gt;

Reviewed commits have been landed. Closing PR #62774 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>