Bug 312315

Summary: [Site Isolation] CSP frame-src-cross-origin-load.html test fails with site isolation due to incorrect onload assignment
Product: WebKit Reporter: roberto_rodriguez2
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

roberto_rodriguez2
Reported 2026-04-14 15:00:33 PDT
Test http/tests/security/contentSecurityPolicy/frame-src-cross-origin-load.html is incorrectly written with iframe.onload = loadEvent(), which calls loadEvent immediately instead of assigning it as a handler. All three load callbacks fire synchronously and finishJSTest runs before any iframe actually loads. Without site isolation this coincidentally works because the cross-origin iframe runs in the same process and its console.log("PASS") IPC reaches the UIProcess before notifyDone() finalizes the test. With site isolation the iframe loads in a separate process, and the extra IPC latency means the console message arrives after gotFinalMessage is set and is silently dropped. The fix is to properly assign the iframe.onload handler and update the expected output accordingly now that iframe onloads fire in the correct order.
Attachments
Radar WebKit Bug Importer
Comment 1 2026-04-14 15:00:40 PDT
roberto_rodriguez2
Comment 2 2026-04-14 15:49:08 PDT
EWS
Comment 3 2026-04-15 08:58:24 PDT
Committed 311290@main (e12578547350): <https://commits.webkit.org/311290@main> Reviewed commits have been landed. Closing PR #62774 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.