WebKit Bugzilla
New
Browse
Search+
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
NEW
251344
[COOP][GLIB] A few coop restrict-properties tests are failing due to iframe being able to access the popup
https://bugs.webkit.org/show_bug.cgi?id=251344
Summary
[COOP][GLIB] A few coop restrict-properties tests are failing due to iframe b...
Lauro Moura
Reported
2023-01-29 20:52:27 PST
imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?5-6 imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?7-8 imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?5-6 imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?7-8 Current baseline already contains some failures, but glib ports are presenting some different failures when the popup policy is SAME_SITE and the iframe policy is CROSS_ORIGIN, and vice versa. Namely, in comparison to the mac port, when opening the popup with window.open, it seems glib ports correctly shield the DOM access, but leaks cross-origin access. imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?5-6 -FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true" imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?7-8 -FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true" imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?5-6 -FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true" imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?7-8 -FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true"
Attachments
Add attachment
proposed patch, testcase, etc.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug