RESOLVED FIXED312315
[Site Isolation] CSP frame-src-cross-origin-load.html test fails with site isolation due to incorrect onload assignment 
https://bugs.webkit.org/show_bug.cgi?id=312315
Summary [Site Isolation] CSP frame-src-cross-origin-load.html test fails with site is...
roberto_rodriguez2
Reported 2026-04-14 15:00:33 PDT
Test http/tests/security/contentSecurityPolicy/frame-src-cross-origin-load.html is incorrectly written with iframe.onload = loadEvent(), which calls loadEvent immediately instead of assigning it as a handler. All three load callbacks fire synchronously and finishJSTest runs before any iframe actually loads. Without site isolation this coincidentally works because the cross-origin iframe runs in the same process and its console.log("PASS") IPC reaches the UIProcess before notifyDone() finalizes the test. With site isolation the iframe loads in a separate process, and the extra IPC latency means the console message arrives after gotFinalMessage is set and is silently dropped. The fix is to properly assign the iframe.onload handler and update the expected output accordingly now that iframe onloads fire in the correct order.
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-04-14 15:00:40 PDT
<rdar://problem/174778663>
roberto_rodriguez2
Comment 2 2026-04-14 15:49:08 PDT
Pull request: https://github.com/WebKit/WebKit/pull/62774
EWS
Comment 3 2026-04-15 08:58:24 PDT
Committed 311290@main (e12578547350): <https://commits.webkit.org/311290@main> Reviewed commits have been landed. Closing PR #62774 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.