Bug 208662

Summary: [ iOS wk2 ] http/tests/security/contentSecurityPolicy/javascript-url-blocked-by-default-src-star.html is flaky failing.
Product: WebKit Reporter: Jason Lawrence <Lawrence.j>
Component: Tools / TestsAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: iPhone / iPad   
OS: iOS 13   

Jason Lawrence
Reported 2020-03-05 12:56:07 PST
http/tests/security/contentSecurityPolicy/javascript-url-blocked-by-default-src-star.html Description: This test is flaky failing on iOS wk2. The failures seem to have become more frequent around r257740, but it is failing back to r251695. History: https://results.webkit.org/?suite=layout-tests&test=http%2Ftests%2Fsecurity%2FcontentSecurityPolicy%2Fjavascript-url-blocked-by-default-src-star.html&platform=ios Diff: @@ -1,4 +1,6 @@ CONSOLE MESSAGE: Refused to load javascript:alert('FAIL'); because it appears in neither the object-src directive nor the default-src directive of the Content Security Policy. CONSOLE MESSAGE: Refused to load javascript:alert('FAIL'); because it appears in neither the object-src directive nor the default-src directive of the Content Security Policy. CONSOLE MESSAGE: line 1: Refused to execute a script because its hash, its nonce, or 'unsafe-inline' appears in neither the script-src directive nor the default-src directive of the Content Security Policy. +CONSOLE MESSAGE: Refused to load javascript:alert('FAIL'); because it appears in neither the object-src directive nor the default-src directive of the Content Security Policy. +CONSOLE MESSAGE: Refused to load javascript:alert('FAIL'); because it appears in neither the object-src directive nor the default-src directive of the Content Security Policy.
Attachments
Radar WebKit Bug Importer
Comment 1 2020-03-05 12:56:27 PST
Jason Lawrence
Comment 2 2020-03-05 13:03:30 PST
I have marked this test as failing while this issue is investigated. https://trac.webkit.org/changeset/257940/webkit
Note You need to log in before you can comment on or make changes to this bug.