Bug 313169

Summary: [Site Isolation] http/tests/security/XFrameOptions/x-frame-options-ignore-deny-meta-tag-parent-same-origin-deny.html is failing
Product: WebKit Reporter: Anthony Tarbinian <a.tarbinian>
Component: Tools / TestsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Anthony Tarbinian
Reported 2026-04-23 14:24:36 PDT
With site isolation enabled http/tests/security/XFrameOptions/x-frame-options-ignore-deny-meta-tag-parent-same-origin-deny.html fails with a test diff. First, it is missing the following two log messages which come from enabling testRunner.dumpResourceLoadCallbacks() -http://localhost:8000/.../x-frame-options-deny-meta-tag-subframe-parent-same-origin-deny.html - willSendRequest ... -http://localhost:8000/.../x-frame-options-deny-meta-tag-subframe-parent-same-origin-deny.html - didReceiveResponse ... This was because testRunner.dumpResourceLoadCallbacks() is enabled via the InjectedBundle which doesn't work since InjectedBundle state doesn't get synced between processes with site isolation enabled. Once the flag was working, the remaining issue was that there was an extra didFinishLoading message which showed up with site isolation enabled, but not in the site isolation disabled case. In non SI, this didFinishLoading message comes after the testRunner is destroyed.
Attachments
Radar WebKit Bug Importer
Comment 1 2026-04-23 14:24:42 PDT
Anthony Tarbinian
Comment 2 2026-04-23 14:29:49 PDT
EWS
Comment 3 2026-04-27 22:27:53 PDT
Committed 312174@main (07fca8af6429): <https://commits.webkit.org/312174@main> Reviewed commits have been landed. Closing PR #63463 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.