We're failing a number of these tests due to timeouts. These tests rely on opening anchor links to javascript URLs without a user gesture. We require user gestures in certain circumstances (such as target="_blank" frames) in order to load the URL. The tests pass when run through our WKTR infrastructure so maybe there's an issue with the Safari Driver? Here's the list of tests which time out on WPT: imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript-src-allowed-href_blank.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript-src-allowed-href_blank-srcipt-src-attr.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript-src-allowed-href_blank-script-src-elem.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_missing_unsafe_hashes-href_blank.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_missing_unsafe_hashes-href_blank-script-src-attr.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_missing_unsafe_hashes-href_blank-script-src-elem.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_wrong_hash-href_blank.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_wrong_hash-href_blank-script-src-attr.html imported/w3c/web-platform-tests/content-security-policy/unsafe-hashes/javascript_src_denied_wrong_hash-href_blank-script-src-elem.html
<rdar://problem/101428946>