summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/meta/content-security-policy/reporting
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 00:47:55 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 00:47:55 +0000
commit26a029d407be480d791972afb5975cf62c9360a6 (patch)
treef435a8308119effd964b339f76abb83a57c29483 /testing/web-platform/meta/content-security-policy/reporting
parentInitial commit. (diff)
downloadfirefox-26a029d407be480d791972afb5975cf62c9360a6.tar.xz
firefox-26a029d407be480d791972afb5975cf62c9360a6.zip
Adding upstream version 124.0.1.upstream/124.0.1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/meta/content-security-policy/reporting')
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/multiple-report-policies.html.ini4
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/post-redirect-stacktrace.https.html.ini7
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-blocked-data-uri.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-blocked-uri.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-clips-sample.https.html.ini10
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-cross-origin-no-cookies.sub.html.ini13
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors-with-x-frame-options.sub.html.ini5
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors.sub.html.ini9
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-multiple-violations-02.html.ini9
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-only-in-meta.sub.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-only-unsafe-eval.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-original-url-on-mixed-content-frame.https.sub.html.ini5
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-original-url.sub.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-preload-and-consume.https.html.ini6
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-same-origin-with-cookies.html.ini5
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-strips-fragment.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-effective-directive.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-from-child-frame.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-from-inline-javascript.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-from-javascript.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple-reversed.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple.html.ini3
-rw-r--r--testing/web-platform/meta/content-security-policy/reporting/report-uri-scheme-relative.html.ini4
23 files changed, 113 insertions, 0 deletions
diff --git a/testing/web-platform/meta/content-security-policy/reporting/multiple-report-policies.html.ini b/testing/web-platform/meta/content-security-policy/reporting/multiple-report-policies.html.ini
new file mode 100644
index 0000000000..e3aec0df93
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/multiple-report-policies.html.ini
@@ -0,0 +1,4 @@
+[multiple-report-policies.html]
+ disabled:
+ if os == "linux": https://bugzilla.mozilla.org/show_bug.cgi?id=1435526
+ if debug and (os == "win"): https://bugzilla.mozilla.org/show_bug.cgi?id=1435526
diff --git a/testing/web-platform/meta/content-security-policy/reporting/post-redirect-stacktrace.https.html.ini b/testing/web-platform/meta/content-security-policy/reporting/post-redirect-stacktrace.https.html.ini
new file mode 100644
index 0000000000..4cf257d5d7
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/post-redirect-stacktrace.https.html.ini
@@ -0,0 +1,7 @@
+[post-redirect-stacktrace.https.html]
+ expected: TIMEOUT
+ [CSP report do not leak cross-site post-redirect URL]
+ expected: NOTRUN
+
+ [CSP report do not leak cross-origin post-redirect URL]
+ expected: NOTRUN
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-blocked-data-uri.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-blocked-data-uri.html.ini
new file mode 100644
index 0000000000..07e551dba9
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-blocked-data-uri.html.ini
@@ -0,0 +1,3 @@
+[report-blocked-data-uri.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-blocked-uri.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-blocked-uri.html.ini
new file mode 100644
index 0000000000..5a59acf267
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-blocked-uri.html.ini
@@ -0,0 +1,3 @@
+[report-blocked-uri.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-clips-sample.https.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-clips-sample.https.html.ini
new file mode 100644
index 0000000000..264a407a3a
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-clips-sample.https.html.ini
@@ -0,0 +1,10 @@
+[report-clips-sample.https.html]
+ [Unsafe eval violation sample is clipped to 40 characters.]
+ expected: FAIL
+
+ [Trusted Types violation sample is clipped to 40 characters excluded the sink name.]
+ expected: FAIL
+
+ [Function constructor - the other kind of eval - is clipped.]
+ expected: FAIL
+
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-cross-origin-no-cookies.sub.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-cross-origin-no-cookies.sub.html.ini
new file mode 100644
index 0000000000..5019539641
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-cross-origin-no-cookies.sub.html.ini
@@ -0,0 +1,13 @@
+[report-cross-origin-no-cookies.sub.html]
+ expected:
+ if (os == "mac") and not debug: [OK, TIMEOUT]
+ if (os == "android") and not fission: [OK, TIMEOUT]
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Violation report status OK.]
+ expected:
+ if (os == "win") and not debug and (processor == "x86"): [PASS, FAIL]
+ if (os == "mac") and not debug: [PASS, TIMEOUT]
+
+ [Test report cookies.]
+ expected:
+ if os == "android": [PASS, NOTRUN]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors-with-x-frame-options.sub.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors-with-x-frame-options.sub.html.ini
new file mode 100644
index 0000000000..b8409a65c2
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors-with-x-frame-options.sub.html.ini
@@ -0,0 +1,5 @@
+[report-frame-ancestors-with-x-frame-options.sub.html]
+ [Violation report status OK.]
+ expected:
+ if os == "mac": FAIL
+ if os == "linux": FAIL
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors.sub.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors.sub.html.ini
new file mode 100644
index 0000000000..0115571816
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-frame-ancestors.sub.html.ini
@@ -0,0 +1,9 @@
+[report-frame-ancestors.sub.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Violation report status OK.]
+ expected:
+ if win11_2009: PASS
+ if (os == "android") and not debug: [PASS, FAIL]
+ if (os == "android") and debug: PASS
+ FAIL
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-multiple-violations-02.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-multiple-violations-02.html.ini
new file mode 100644
index 0000000000..34b32e593a
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-multiple-violations-02.html.ini
@@ -0,0 +1,9 @@
+[report-multiple-violations-02.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Test number of sent reports.]
+ expected: FAIL
+
+ [Violation report status OK.]
+ expected:
+ if (os == "android") and not debug: [PASS, FAIL]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-only-in-meta.sub.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-only-in-meta.sub.html.ini
new file mode 100644
index 0000000000..75a342ce5d
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-only-in-meta.sub.html.ini
@@ -0,0 +1,3 @@
+[report-only-in-meta.sub.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-only-unsafe-eval.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-only-unsafe-eval.html.ini
new file mode 100644
index 0000000000..5ac01f4413
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-only-unsafe-eval.html.ini
@@ -0,0 +1,3 @@
+[report-only-unsafe-eval.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-original-url-on-mixed-content-frame.https.sub.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-original-url-on-mixed-content-frame.https.sub.html.ini
new file mode 100644
index 0000000000..f49b518e32
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-original-url-on-mixed-content-frame.https.sub.html.ini
@@ -0,0 +1,5 @@
+[report-original-url-on-mixed-content-frame.https.sub.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Violation report status OK.]
+ expected: FAIL
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-original-url.sub.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-original-url.sub.html.ini
new file mode 100644
index 0000000000..f63f7b63d1
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-original-url.sub.html.ini
@@ -0,0 +1,3 @@
+[report-original-url.sub.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-preload-and-consume.https.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-preload-and-consume.https.html.ini
new file mode 100644
index 0000000000..53672dff76
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-preload-and-consume.https.html.ini
@@ -0,0 +1,6 @@
+[report-preload-and-consume.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ TIMEOUT
+ [Reporting endpoints received credentials.]
+ expected: TIMEOUT
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-same-origin-with-cookies.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-same-origin-with-cookies.html.ini
new file mode 100644
index 0000000000..680f06e5b3
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-same-origin-with-cookies.html.ini
@@ -0,0 +1,5 @@
+[report-same-origin-with-cookies.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Test report cookies.]
+ expected: FAIL
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-strips-fragment.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-strips-fragment.html.ini
new file mode 100644
index 0000000000..18c1308254
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-strips-fragment.html.ini
@@ -0,0 +1,3 @@
+[report-strips-fragment.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-effective-directive.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-effective-directive.html.ini
new file mode 100644
index 0000000000..bbe20fc013
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-effective-directive.html.ini
@@ -0,0 +1,3 @@
+[report-uri-effective-directive.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-child-frame.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-child-frame.html.ini
new file mode 100644
index 0000000000..82baf62d91
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-child-frame.html.ini
@@ -0,0 +1,3 @@
+[report-uri-from-child-frame.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-inline-javascript.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-inline-javascript.html.ini
new file mode 100644
index 0000000000..2226ba9fa9
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-inline-javascript.html.ini
@@ -0,0 +1,3 @@
+[report-uri-from-inline-javascript.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-javascript.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-javascript.html.ini
new file mode 100644
index 0000000000..78d5a2c22c
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-from-javascript.html.ini
@@ -0,0 +1,3 @@
+[report-uri-from-javascript.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple-reversed.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple-reversed.html.ini
new file mode 100644
index 0000000000..9896aa2f0c
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple-reversed.html.ini
@@ -0,0 +1,3 @@
+[report-uri-multiple-reversed.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple.html.ini
new file mode 100644
index 0000000000..657031de50
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-multiple.html.ini
@@ -0,0 +1,3 @@
+[report-uri-multiple.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/content-security-policy/reporting/report-uri-scheme-relative.html.ini b/testing/web-platform/meta/content-security-policy/reporting/report-uri-scheme-relative.html.ini
new file mode 100644
index 0000000000..4ccaa1aa92
--- /dev/null
+++ b/testing/web-platform/meta/content-security-policy/reporting/report-uri-scheme-relative.html.ini
@@ -0,0 +1,4 @@
+[report-uri-scheme-relative.html]
+ [Violation report status OK.]
+ expected:
+ if (os == "android") and not debug: [PASS, FAIL]