NEW251344
[COOP][GLIB] A few coop restrict-properties tests are failing due to iframe being able to access the popup
https://bugs.webkit.org/show_bug.cgi?id=251344
Summary [COOP][GLIB] A few coop restrict-properties tests are failing due to iframe b...
Lauro Moura
Reported 2023-01-29 20:52:27 PST
imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?5-6 imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?7-8 imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?5-6 imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?7-8 Current baseline already contains some failures, but glib ports are presenting some different failures when the popup policy is SAME_SITE and the iframe policy is CROSS_ORIGIN, and vice versa. Namely, in comparison to the mac port, when opening the popup with window.open, it seems glib ports correctly shield the DOM access, but leaks cross-origin access. imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?5-6 -FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true" imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup-to-un.https.html?7-8 -FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: unsafe-none via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true" imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?5-6 -FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with cross origin iframe, same site popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true" imported/w3c/web-platform-tests/html/cross-origin-opener-policy/tentative/restrict-properties/iframe-popup.https.html?7-8 -FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has dom access to the popup? expected "false" but got "true" +FAIL COOP: restrict-properties to popup COOP: restrict-properties via an iframe, with same site iframe, cross origin popup with window_open assert_equals: Iframe has cross origin access to the popup? expected "false" but got "true"
Attachments
Note You need to log in before you can comment on or make changes to this bug.