Bug 139243

Summary: http/tests/security/mixedContent/about-blank-iframe-in-main-frame.html fails unless certain other tests run before it
Product: WebKit Reporter: Alexey Proskuryakov <ap>
Component: Tools / TestsAssignee: Alexey Proskuryakov <ap>
Status: RESOLVED FIXED    
Severity: Normal CC: mitz
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 138958    
Attachments:
Description Flags
proposed fix andersca: review+

Description Alexey Proskuryakov 2014-12-03 16:46:40 PST
This fails on 10.9 and 10.10 (haven't tested 10.8), but the test doesn't fail when ran as part of the whole suite.

run-webkit-tests LayoutTests/http/tests/security/mixedContent/about-blank-iframe-in-main-frame.html  -2
Comment 1 Alexey Proskuryakov 2014-12-03 16:51:03 PST
This works:

run-webkit-tests -2 http/tests/security/contentSecurityPolicy/script-src-star-cross-scheme.html http/tests/security/mixedContent/about-blank-iframe-in-main-frame.html

I wonder if we for some reason don't allow insecure SSL when it loads from an iframe.
Comment 2 Alexey Proskuryakov 2014-12-03 17:20:21 PST
UI process doesn't get a canAuthenticateAgainstProtectionSpaceInFrame callback. Perhaps it's only set up for main frame? Will need to debug further.
Comment 3 mitz 2014-12-03 17:21:41 PST
That callback is expected to be made for any request that needs it, including subresources and subframes.
Comment 4 Alexey Proskuryakov 2014-12-03 19:14:56 PST
Created attachment 242549 [details]
proposed fix

Let's see if this changes any other test results...
Comment 5 Alexey Proskuryakov 2014-12-04 09:17:57 PST
Committed <http://trac.webkit.org/r176800>.