RESOLVED WORKSFORME Bug 59192
[WK2] CSP reporting doesn't work
https://bugs.webkit.org/show_bug.cgi?id=59192
Summary [WK2] CSP reporting doesn't work
Csaba Osztrogonác
Reported 2011-04-22 05:00:34 PDT
http/tests/security/contentSecurityPolicy/report-uri-from-child-frame.html introduced in http://trac.webkit.org/changeset/84478 and CSP report is missing. It is a WK2 specific bug, because it fails on Qt-WK2 bot and SL-WK2 bot too. --- /home/webkitbuildbot/slaves/release32bitWebKit2/buildslave/qt-linux-32-release-webkit2/build/layout-test-results/http/tests/security/contentSecurityPolicy/report-uri-from-child-frame-expected.txt 2011-04-22 03:51:33.514890948 -0700 +++ /home/webkitbuildbot/slaves/release32bitWebKit2/buildslave/qt-linux-32-release-webkit2/build/layout-test-results/http/tests/security/contentSecurityPolicy/report-uri-from-child-frame-actual.txt 2011-04-22 03:51:33.514890948 -0700 @@ -1,14 +1,3 @@ CONSOLE MESSAGE: line 1: Refused to execute inline script because of Content-Security-Policy. - --------- -Frame: '<!--framePath //<!--frame0-->-->' --------- -CSP report received: -CONTENT_TYPE: application/x-www-form-urlencoded -HTTP_REFERER: http://127.0.0.1:8000/security/contentSecurityPolicy/resources/generate-csp-report.html -REQUEST_METHOD: POST -=== POST DATA === -document-url: http://127.0.0.1:8000/security/contentSecurityPolicy/resources/generate-csp-report.html -violated-directive: script-src 'self'
Attachments
Csaba Osztrogonác
Comment 1 2011-04-22 05:11:12 PDT
Chris Dumez
Comment 2 2012-09-25 01:19:29 PDT
http/tests/security/contentSecurityPolicy/report-uri-from-child-frame.html is passing on WebKit2 EFL port. Could someone give it a try on other ports? I think we can unskip it.
Alexey Proskuryakov
Comment 3 2012-09-25 11:08:39 PDT
Passed for me on Mac WebKit2.
Jessie Berlin
Comment 4 2013-04-17 15:08:51 PDT
(In reply to comment #3) > Passed for me on Mac WebKit2. It passes for me on Mac WebKit2 as well. I am going to unskip the test.
Jessie Berlin
Comment 5 2013-04-17 15:38:17 PDT
Note You need to log in before you can comment on or make changes to this bug.