[wpt-sync] Sync PR 38807 - Add WPT for cross-site sibling iframes case
Categories
(Testing :: web-platform-tests, task, P4)
Tracking
(firefox113 fixed)
Tracking | Status | |
---|---|---|
firefox113 | --- | fixed |
People
(Reporter: mozilla.org, Unassigned)
References
(Depends on 1 open bug, )
Details
(Whiteboard: [wptsync downstream])
Sync web-platform-tests PR 38807 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/38807
Details from upstream follow.
Shuran Huang <shuuran@chromium.org> wrote:
Add WPT for cross-site sibling iframes case
Bug: 1401089
Change-Id: I121b79869175311de2a4a6c47f2d58a2992f7ce0Reviewed-on: https://chromium-review.googlesource.com/4305139
WPT-Export-Revision: 8bde560738f490789c985d4b740147d8e7b4e4de
Assignee | ||
Updated•2 years ago
|
Assignee | ||
Updated•2 years ago
|
Assignee | ||
Comment 1•2 years ago
|
||
Assignee | ||
Comment 2•2 years ago
|
||
CI Results
Ran 9 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI
Total 18 tests and 2 subtests
Status Summary
Firefox
OK
: 5
PASS
: 31
FAIL
: 27[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-debug, Gecko-windows11-64-2009-qr-opt, GitHub] 28[Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt]
TIMEOUT
: 10[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-64-2009-qr-debug] 13[Gecko-linux1804-64-qr-opt, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-opt, GitHub]
ERROR
: 5[Gecko-linux1804-64-qr-opt, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-opt, GitHub] 8[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-linux1804-64-qr-debug, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-64-2009-qr-debug]
NOTRUN
: 44[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview, Gecko-android-em-7.0-x86_64-qr-debug-geckoview, Gecko-android-em-7.0-x86_64-qr-opt-geckoview, Gecko-windows11-32-2009-qr-debug, Gecko-windows11-32-2009-qr-opt, Gecko-windows11-64-2009-qr-debug, Gecko-windows11-64-2009-qr-opt, GitHub] 46[Gecko-linux1804-64-qr-debug, Gecko-linux1804-64-qr-opt]
Chrome
OK
: 16
PASS
: 84
FAIL
: 21
TIMEOUT
: 2
ERROR
: 1
NOTRUN
: 3
Safari
OK
: 7
PASS
: 31
FAIL
: 31
TIMEOUT
: 9
ERROR
: 5
NOTRUN
: 41
Links
Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base
Details
Firefox-only Failures
- /storage-access-api/hasStorageAccess-insecure.sub.window.html [wpt.fyi]
- [cross-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
- [nested-cross-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
- [cross-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
- /storage-access-api/hasStorageAccess.sub.https.window.html [wpt.fyi]
- [cross-origin-frame] document.hasStorageAccess() should not be allowed by default unless in top-level frame or same-origin iframe.:
FAIL
- [nested-cross-origin-frame] document.hasStorageAccess() should not be allowed by default unless in top-level frame or same-origin iframe.:
FAIL
- [cross-origin-frame] document.hasStorageAccess() should not be allowed by default unless in top-level frame or same-origin iframe.:
- /storage-access-api/requestStorageAccess-insecure.sub.window.html [wpt.fyi]:
TIMEOUT
- /storage-access-api/requestStorageAccess-non-fully-active.sub.https.window.html [wpt.fyi]:
TIMEOUT
New Tests That Don't Pass
- /storage-access-api/hasStorageAccess-insecure.sub.window.html [wpt.fyi]
- [top-level-context] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [top-level-context] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [same-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [same-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [cross-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
(Chrome:PASS
, Safari:PASS
) - [cross-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [nested-same-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [nested-same-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [nested-cross-origin-frame] document.hasStorageAccess() should be disallowed in insecure contexts:
FAIL
(Chrome:PASS
, Safari:PASS
) - [nested-cross-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
)
- [top-level-context] document.hasStorageAccess() should be disallowed in insecure contexts:
- /storage-access-api/hasStorageAccess.sub.https.window.html [wpt.fyi]
- [top-level-context] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [same-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [cross-origin-frame] document.hasStorageAccess() should not be allowed by default unless in top-level frame or same-origin iframe.:
FAIL
(Chrome:PASS
, Safari:PASS
) - [cross-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [nested-same-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [nested-cross-origin-frame] document.hasStorageAccess() should not be allowed by default unless in top-level frame or same-origin iframe.:
FAIL
(Chrome:PASS
, Safari:PASS
) - [nested-cross-origin-frame] document.hasStorageAccess() should reject in a document that isn't fully active.:
FAIL
(Chrome:PASS
, Safari:FAIL
)
- [top-level-context] document.hasStorageAccess() should reject in a document that isn't fully active.:
- /storage-access-api/requestStorageAccess-cross-origin-iframe-navigation.sub.https.window.html [wpt.fyi]:
TIMEOUT
(Chrome:OK
, Safari:TIMEOUT
)- Self-initiated reloads preserve storage access:
TIMEOUT
(Chrome:FAIL
, Safari:TIMEOUT
) - Self-initiated same-origin navigations preserve storage access:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - Non-self-initiated same-origin navigations do not preserve storage access:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - Self-initiated cross-origin navigations do not preserve storage access:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
)
- Self-initiated reloads preserve storage access:
- /storage-access-api/requestStorageAccess-cross-origin-iframe.sub.https.window.html [wpt.fyi]:
ERROR
(Chrome:OK
, Safari:ERROR
)- [cross-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [cross-origin-frame] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [cross-origin-frame] document.requestStorageAccess() should be rejected with a NotAllowedError without permission grant:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [cross-origin-frame] document.requestStorageAccess() should be rejected with a NotAllowedError with denied permission:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
)
- [cross-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/requestStorageAccess-cross-site-iframe.sub.https.window.html [wpt.fyi]:
ERROR
(Chrome:OK
, Safari:ERROR
)- [cross-site-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [cross-site-frame] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [cross-site-frame] document.requestStorageAccess() should be rejected with a NotAllowedError without permission grant:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [cross-site-frame] document.requestStorageAccess() should be rejected with a NotAllowedError with denied permission:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
)
- [cross-site-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/requestStorageAccess-cross-site-sibling-iframes.sub.https.window.html [wpt.fyi]:
TIMEOUT
(Chrome:OK
, Safari:TIMEOUT
)- Grants have per-frame scope:
TIMEOUT
(Chrome:FAIL
, Safari:TIMEOUT
) - Cross-site sibling iframes should not be able to take advantage of the existing permission grant requested by others.:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
)
- Grants have per-frame scope:
- /storage-access-api/requestStorageAccess-insecure.sub.window.html [wpt.fyi]:
TIMEOUT
(Chrome:OK
, Safari:OK
)- [non-fully-active] document.requestStorageAccess() should reject when run in a detached frame:
TIMEOUT
(Chrome:PASS
, Safari:FAIL
) - [non-fully-active] document.requestStorageAccess() should reject when run in a detached DOMParser document:
NOTRUN
(Chrome:PASS
, Safari:FAIL
) - [top-level-context] document.requestStorageAccess() should be rejected when called with a user gesture in insecure context:
NOTRUN
- [non-fully-active] document.requestStorageAccess() should reject when run in a detached frame:
- /storage-access-api/requestStorageAccess-nested-cross-origin-iframe.sub.https.window.html [wpt.fyi]:
ERROR
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux1804-64-qr-debug
,Gecko-windows11-32-2009-qr-debug
,Gecko-windows11-64-2009-qr-debug
],TIMEOUT
[Gecko-linux1804-64-qr-opt
,Gecko-windows11-32-2009-qr-opt
,Gecko-windows11-64-2009-qr-opt
,GitHub
] (Chrome:OK
, Safari:TIMEOUT
)- [nested-cross-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [nested-cross-origin-frame] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [nested-cross-origin-frame] document.requestStorageAccess() should be rejected with a NotAllowedError without permission grant:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [nested-cross-origin-frame] document.requestStorageAccess() should be rejected with a NotAllowedError with denied permission:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
)
- [nested-cross-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/requestStorageAccess-nested-cross-site-iframe.sub.https.window.html [wpt.fyi]:
ERROR
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux1804-64-qr-debug
,Gecko-windows11-32-2009-qr-debug
,Gecko-windows11-64-2009-qr-debug
],TIMEOUT
[Gecko-linux1804-64-qr-opt
,Gecko-windows11-32-2009-qr-opt
,Gecko-windows11-64-2009-qr-opt
,GitHub
] (Chrome:OK
, Safari:TIMEOUT
)- [nested-cross-site-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [nested-cross-site-frame] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [nested-cross-site-frame] document.requestStorageAccess() should be rejected with a NotAllowedError without permission grant:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [nested-cross-site-frame] document.requestStorageAccess() should be rejected with a NotAllowedError with denied permission:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
)
- [nested-cross-site-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/requestStorageAccess-nested-same-origin-iframe.sub.https.window.html [wpt.fyi]:
ERROR
[Gecko-android-em-7.0-x86_64-lite-qr-opt-geckoview
,Gecko-android-em-7.0-x86_64-qr-debug-geckoview
,Gecko-android-em-7.0-x86_64-qr-opt-geckoview
,Gecko-linux1804-64-qr-debug
,Gecko-windows11-32-2009-qr-debug
,Gecko-windows11-64-2009-qr-debug
],TIMEOUT
[Gecko-linux1804-64-qr-opt
,Gecko-windows11-32-2009-qr-opt
,Gecko-windows11-64-2009-qr-opt
,GitHub
] (Chrome:OK
, Safari:TIMEOUT
)- [nested-same-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [nested-same-origin-frame] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [nested-same-origin-frame] document.requestStorageAccess() should resolve without permission grant or user gesture:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [nested-same-origin-frame] document.requestStorageAccess() should resolve with denied permission:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
)
- [nested-same-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/requestStorageAccess-non-fully-active.sub.https.window.html [wpt.fyi]:
TIMEOUT
(Chrome:OK
, Safari:OK
)- [non-fully-active] document.requestStorageAccess() should not resolve when run in a detached frame:
TIMEOUT
(Chrome:PASS
, Safari:FAIL
) - [non-fully-active] document.requestStorageAccess() should not resolve when run in a detached DOMParser document:
NOTRUN
(Chrome:PASS
, Safari:FAIL
)
- [non-fully-active] document.requestStorageAccess() should not resolve when run in a detached frame:
- /storage-access-api/requestStorageAccess-same-origin-iframe.sub.https.window.html [wpt.fyi]:
ERROR
(Chrome:OK
, Safari:ERROR
)- [same-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [same-origin-frame] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [same-origin-frame] document.requestStorageAccess() should resolve without permission grant or user gesture:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [same-origin-frame] document.requestStorageAccess() should resolve with denied permission:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
)
- [same-origin-frame] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/requestStorageAccess.sub.https.window.html [wpt.fyi]:
ERROR
(Chrome:OK
, Safari:ERROR
)- [top-level-context] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccess() should be resolved with no user gesture when a permission grant exists, and should allow cookie access:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccess() should resolve without permission grant or user gesture:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccess() should resolve with denied permission:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
)
- [top-level-context] document.requestStorageAccess() should resolve in top-level frame or same-origin iframe, otherwise reject with a NotAllowedError with no user gesture.:
- /storage-access-api/storage-access-permission.sub.https.window.html [wpt.fyi]:
TIMEOUT
(Chrome:TIMEOUT
, Safari:TIMEOUT
)- Permissions grants are observable across same-origin iframes:
TIMEOUT
(Chrome:TIMEOUT
, Safari:TIMEOUT
) - IFrame tests:
NOTRUN
(Chrome:NOTRUN
, Safari:NOTRUN
)
- Permissions grants are observable across same-origin iframes:
- /storage-access-api/storageAccess.testdriver.sub.html [wpt.fyi]
- TestDriver - Set Storage Access Command Tests:
FAIL
(Chrome:FAIL
, Safari:PASS
)
- TestDriver - Set Storage Access Command Tests:
- /top-level-storage-access-api/tentative/requestStorageAccessForOrigin-insecure.sub.window.html [wpt.fyi]
- [insecure-context] document.requestStorageAccessForOrigin() should be supported on the document interface:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [insecure-context] document.requestStorageAccessForOrigin() should be rejected by default with no user gesture:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [non-fully-active] document.requestStorageAccessForOrigin() should not resolve when run in a detached frame:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [non-fully-active] document.requestStorageAccessForOrigin() should not resolve when run in a detached DOMParser document:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [insecure-context] document.requestStorageAccessForOrigin() should be rejected when called in an insecure context:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [frame-on-insecure-page] document.requestStorageAccessForOrigin() should be supported on the document interface:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [frame-on-insecure-page] document.requestStorageAccessForOrigin() should be rejected when called in an iframe:
FAIL
(Chrome:FAIL
, Safari:FAIL
)
- [insecure-context] document.requestStorageAccessForOrigin() should be supported on the document interface:
- /top-level-storage-access-api/tentative/requestStorageAccessForOrigin.sub.https.window.html [wpt.fyi]:
ERROR
(Chrome:ERROR
, Safari:ERROR
)- [top-level-context] document.requestStorageAccessForOrigin() should be supported on the document interface:
FAIL
(Chrome:PASS
, Safari:FAIL
) - [top-level-context] document.requestStorageAccessForOrigin() should be rejected when called with no argument:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccessForOrigin() should be rejected by default with no user gesture:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [non-fully-active] document.requestStorageAccessForOrigin() should not resolve when run in a detached frame:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [non-fully-active] document.requestStorageAccessForOrigin() should not resolve when run in a detached DOMParser document:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccessForOrigin() should be resolved without a user gesture with an existing permission:
NOTRUN
(Chrome:FAIL
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccessForOrigin() should be resolved when called properly with a user gesture and the same site:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccessForOrigin() should be rejected when called with an invalid site:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [top-level-context] document.requestStorageAccessForOrigin() should be rejected when called with an opaque origin:
NOTRUN
(Chrome:PASS
, Safari:NOTRUN
) - [same-origin-frame] document.requestStorageAccessForOrigin() should be supported on the document interface:
FAIL
(Chrome:PASS
) - [same-origin-frame] document.requestStorageAccessForOrigin() should be rejected when called with no argument:
NOTRUN
(Chrome:NOTRUN
) - [same-origin-frame] document.requestStorageAccessForOrigin() should be rejected when called in an iframe:
NOTRUN
(Chrome:NOTRUN
)
- [top-level-context] document.requestStorageAccessForOrigin() should be supported on the document interface:
- /top-level-storage-access-api/tentative/top-level-storage-access-permission.sub.https.window.html [wpt.fyi]
- Permission default state can be queried:
FAIL
(Chrome:FAIL
, Safari:FAIL
)
- Permission default state can be queried:
Comment 4•2 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/6551383035f4
https://hg.mozilla.org/mozilla-central/rev/29e0ee2041bd
Description
•