99693 2012-10-18 00:45:21 -0700 Wildcarded hosts in CSP source expressions should be better tested. 2012-10-18 15:07:16 -0700 1 1 1 Unclassified WebKit Tools / Tests 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 mkwst mkwst abarth webkit.review.bot oldest_to_newest 745046 0 mkwst 2012-10-18 00:45:21 -0700 I don't see any tests for wildcarded hosts in Content Security Policy source expressions. Just to make sure that http://crbug.com/156561 doesn't become an issue for WebKit in the future, I'll add a few. 745048 1 169361 mkwst 2012-10-18 00:48:18 -0700 Created attachment 169361 Patch 745049 2 169361 mkwst 2012-10-18 00:48:45 -0700 Comment on attachment 169361 Patch WDYT, Adam? 745597 3 169361 abarth 2012-10-18 14:52:01 -0700 Comment on attachment 169361 Patch I support better testing. 745608 4 169361 webkit.review.bot 2012-10-18 15:07:12 -0700 Comment on attachment 169361 Patch Clearing flags on attachment: 169361 Committed r131813: <http://trac.webkit.org/changeset/131813> 745610 5 webkit.review.bot 2012-10-18 15:07:16 -0700 All reviewed patches have been landed. Closing bug. 169361 2012-10-18 00:48:18 -0700 2012-10-18 15:07:12 -0700 Patch bug-99693-20121018094703.patch text/plain 2629 mkwst U3VidmVyc2lvbiBSZXZpc2lvbjogMTMxNzA3CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFu Z2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggZWM5OWJmYTUzZGZiMWM1Mzg0NWQx MDBlNGQ3YzIwYmQ1MDNkYTQ0Ni4uMmY0MmZlNDUzZTQxYzllYzUyZDA2ODZiMmJkZDI0MDI0MjU0 OGU3YiAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3Rz L0NoYW5nZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDEyLTEwLTE4ICBNaWtlIFdlc3QgIDxta3dz dEBjaHJvbWl1bS5vcmc+CisKKyAgICAgICAgQWRkIGxheW91dCB0ZXN0cyBmb3Igd2lsZGNhcmRl ZCBob3N0cyBpbiBDU1AgZGlyZWN0aXZlcy4KKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5v cmcvc2hvd19idWcuY2dpP2lkPTk5NjkzCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChP T1BTISkuCisKKyAgICAgICAgQWRkcyBmb3VyIHRlc3QgY2FzZXMgdG8gZW5zdXJlIHRoYXQgd2ls ZGNhcmRlZCBob3N0cyBpbiBDb250ZW50IFNlY3VyaXR5CisgICAgICAgIFBvbGljeSBzb3VyY2Ug ZXhwcmVzc2lvbnMgZnVuY3Rpb24gY29ycmVjdGx5IHdpdGggYW5kIHdpdGhvdXQgcGF0aHMsCisg ICAgICAgIGFuZCB3aXRoIHdpbGRjYXJkZWQgcG9ydHMuCisKKyAgICAgICAgKiBodHRwL3Rlc3Rz L3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9zb3VyY2UtbGlzdC1wYXJzaW5nLTA5LWV4 cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogaHR0cC90ZXN0cy9zZWN1cml0eS9jb250ZW50 U2VjdXJpdHlQb2xpY3kvc291cmNlLWxpc3QtcGFyc2luZy0wOS5odG1sOiBBZGRlZC4KKwogMjAx Mi0xMC0xNyAgS2FuZ2lsIEhhbiAgPGthbmdpbC5oYW5Ac2Ftc3VuZy5jb20+CiAKICAgICAgICAg TGV0J3MgbW92ZSB1c2Utd2hpbGUtYW5pbWF0aW5nLWNyYXNoLWV4cGVjdGVkLnR4dCB0byBjb21t b24gcGxhY2UuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Nv bnRlbnRTZWN1cml0eVBvbGljeS9zb3VyY2UtbGlzdC1wYXJzaW5nLTA5LWV4cGVjdGVkLnR4dCBi L0xheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5UG9saWN5L3Nv dXJjZS1saXN0LXBhcnNpbmctMDktZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjFkMDE1NzRjZmJh ZWExZTc1YTUwYTliMjU4YTg2OTU3MTY5ZTQ0MzYKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRU ZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9zb3VyY2UtbGlz dC1wYXJzaW5nLTA5LWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDIzIEBACitIb3N0IHdpbGRjYXJk cyBzaG91bGQgd29yayBjb3JyZWN0bHkuCisKKworCistLS0tLS0tLQorRnJhbWU6ICc8IS0tZnJh bWVQYXRoIC8vPCEtLWZyYW1lMC0tPi0tPicKKy0tLS0tLS0tCitQQVNTCisKKy0tLS0tLS0tCitG cmFtZTogJzwhLS1mcmFtZVBhdGggLy88IS0tZnJhbWUxLS0+LS0+JworLS0tLS0tLS0KK1BBU1MK KworLS0tLS0tLS0KK0ZyYW1lOiAnPCEtLWZyYW1lUGF0aCAvLzwhLS1mcmFtZTItLT4tLT4nCist LS0tLS0tLQorUEFTUworCistLS0tLS0tLQorRnJhbWU6ICc8IS0tZnJhbWVQYXRoIC8vPCEtLWZy YW1lMy0tPi0tPicKKy0tLS0tLS0tCitQQVNTCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRw L3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0eVBvbGljeS9zb3VyY2UtbGlzdC1wYXJzaW5n LTA5Lmh0bWwgYi9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2NvbnRlbnRTZWN1cml0 eVBvbGljeS9zb3VyY2UtbGlzdC1wYXJzaW5nLTA5Lmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQK aW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uMTIyZjY0Yzg4 ZWEzYzFiMGZkNWY5OGUxYzc1NzlmYmNjZGM5MWU5NwotLS0gL2Rldi9udWxsCisrKyBiL0xheW91 dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvY29udGVudFNlY3VyaXR5UG9saWN5L3NvdXJjZS1s aXN0LXBhcnNpbmctMDkuaHRtbApAQCAtMCwwICsxLDE1IEBACis8IURPQ1RZUEUgaHRtbD4KKzxo dG1sPgorPGhlYWQ+Cis8c2NyaXB0IHNyYz0ncmVzb3VyY2VzL211bHRpcGxlLWlmcmFtZS10ZXN0 LmpzJz48L3NjcmlwdD4KKzxzY3JpcHQ+Cit2YXIgdGVzdHMgPSBbCisgICAgWyd5ZXMnLCAnc2Ny aXB0LXNyYyBodHRwOi8vKi4wLjE6ODAwMCcsICdyZXNvdXJjZXMvc2NyaXB0LmpzJ10sCisgICAg Wyd5ZXMnLCAnc2NyaXB0LXNyYyBodHRwOi8vKi4wLjE6ODAwMC8nLCAncmVzb3VyY2VzL3Njcmlw dC5qcyddLAorICAgIFsneWVzJywgJ3NjcmlwdC1zcmMgaHR0cDovLyouMC4xOionLCAncmVzb3Vy Y2VzL3NjcmlwdC5qcyddLAorICAgIFsneWVzJywgJ3NjcmlwdC1zcmMgaHR0cDovLyouMC4xOiov JywgJ3Jlc291cmNlcy9zY3JpcHQuanMnXSwKK107Cis8L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5 IG9ubG9hZD0idGVzdCgpIj4KKzxwPkhvc3Qgd2lsZGNhcmRzIHNob3VsZCB3b3JrIGNvcnJlY3Rs eS48L3A+Cg==