Bug 314016

Summary: [Site Isolation] http/tests/security/block-top-level-navigation-via-redirect-by-third-party-iframes.html is flaky on macOS post-commit bot
Product: WebKit Reporter: Anthony Tarbinian <a.tarbinian>
Component: Tools / TestsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Anthony Tarbinian
Reported 2026-05-04 14:27:41 PDT
http/tests/security/block-top-level-navigation-via-redirect-by-third-party-iframes.html is failing flakily with the following diff on macOS release post-commit bots -CONSOLE MESSAGE: Unsafe JavaScript attempt to initiate navigation for frame with URL 'http://127.0.0.1:8000/security/block-top-level-navigation-via-redirect-by-third-party-iframes.html' from frame with URL 'http://localhost:8000/security/resources/navigate-top-level-frame-to-failure-page-via-redirect.html'. The frame attempting navigation of the top-level window is cross-origin or untrusted and the user has never interacted with the frame. Test blocking of suspicious top-level navigations by a third-party iframe (same-site but redirects to a different site) On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE". See https://results.webkit.org/?suite=layout-tests&test=http%2Ftests%2Fsecurity%2Fblock-top-level-navigation-via-redirect-by-third-party-iframes.html&flavor=site-isolation https://commits.webkit.org/311805@main attempted to fix this test and added a 1000ms timer among other changes to fix this test. That commit was successful in fixing the iOS bots, but macOS bots are still flaky with the above diff sometimes.
Attachments
Radar WebKit Bug Importer
Comment 1 2026-05-04 14:27:47 PDT
Anthony Tarbinian
Comment 2 2026-05-04 14:34:46 PDT
EWS
Comment 3 2026-05-04 22:56:51 PDT
Committed 312592@main (61d4d4fb14a1): <https://commits.webkit.org/312592@main> Reviewed commits have been landed. Closing PR #64210 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.