NEW 246860
imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes tests time out 
https://bugs.webkit.org/show_bug.cgi?id=246860
Summary imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes tests t...
Ryan Reno
Reported 2022-10-21 08:58:55 PDT
We're failing a number of these tests due to timeouts. These tests rely on opening anchor links to javascript URLs without a user gesture. We require user gestures in certain circumstances (such as target="_blank" frames) in order to load the URL. The tests pass when run through our WKTR infrastructure so maybe there's an issue with the Safari Driver? Here's the list of tests which time out on WPT: imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript-src-allowed-href_blank.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript-src-allowed-href_blank-srcipt-src-attr.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript-src-allowed-href_blank-script-src-elem.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_missing_unsafe_hashes-href_blank.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_missing_unsafe_hashes-href_blank-script-src-attr.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_missing_unsafe_hashes-href_blank-script-src-elem.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_wrong_hash-href_blank.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_wrong_hash-href_blank-script-src-attr.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_wrong_hash-href_blank-script-src-elem.html
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2022-10-21 08:59:17 PDT
<rdar://problem/101428946>
Note You need to log in before you can comment on or make changes to this bug.