Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

69 files changed, 924 insertions, 0 deletions

diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/__dir__.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/__dir__.ini
new file mode 100644
index 0000000000..7bc9b2f963
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/__dir__.ini
@@ -0,0 +1,3 @@
+prefs: [browser.tabs.remote.useCrossOriginEmbedderPolicy:true]
+lsan-allowed: [Alloc, AttrArray::GrowTo, Malloc, Realloc, Then, URLSearchParams, already_AddRefed, maybe_pod_malloc, mozilla::BasePrincipal::CreateContentPrincipal, mozilla::SupportsThreadSafeWeakPtr, mozilla::detail::HashTable, mozilla::dom::BroadcastChannel::Constructor, mozilla::dom::DocGroup::Create, mozilla::dom::FragmentOrElement::CreateSlots, mozilla::dom::HTMLIFrameElement::HTMLIFrameElement, mozilla::dom::Performance::CreateForMainThread, mozilla::dom::PerformanceMainThread::CreateNavigationTimingEntry, mozilla::dom::ServiceWorkerJobQueue::RunJob, mozilla::dom::ServiceWorkerManager::Unregister, mozilla::dom::ServiceWorkerRegistrationMainThread::Unregister, mozilla::dom::URL::CreateSearchParamsIfNeeded, mozilla::dom::UnregisterCallback::UnregisterCallback, mozilla::ipc::BackgroundChildImpl::AllocPRemoteWorkerChild, mozilla::net::nsStandardURL::StartClone, mozilla::net::nsStandardURL::TemplatedMutator, nsDynamicAtom::Create, nsStringBuffer::Alloc, operator]
+leak-threshold: [default:51200, tab:1331200]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/about-blank-popup.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/about-blank-popup.https.html.ini
new file mode 100644
index 0000000000..88ef203e1c
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/about-blank-popup.https.html.ini
@@ -0,0 +1,7 @@
+[about-blank-popup.https.html]
+  expected:
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+  [Cross-Origin-Embedder-Policy is inherited by about:blank popup.]
+    expected:
+      if (os == "mac") and not debug: [FAIL, TIMEOUT]
+      FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/block-local-documents-inheriting-none.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/block-local-documents-inheriting-none.https.html.ini
new file mode 100644
index 0000000000..5f85f07661
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/block-local-documents-inheriting-none.https.html.ini
@@ -0,0 +1,6 @@
+prefs: [dom.reporting.enabled:true]
+[block-local-documents-inheriting-none.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Prevent local scheme documents from loading within a COEP: require-corp iframe if they inherit COEP: none]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-dedicated-worker.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-dedicated-worker.https.html.ini
new file mode 100644
index 0000000000..c4fa8d79af
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-dedicated-worker.https.html.ini
@@ -0,0 +1,9 @@
+implementation-status: backlog
+[cache-storage-reporting-dedicated-worker.https.html]
+  expected:
+    if release_or_beta: ["FAIL", "TIMEOUT"]
+  [COEP support on DedicatedWorker.]
+    expected: FAIL
+
+  [COEP-Report-Only support on DedicatedWorker.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-document.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-document.https.html.ini
new file mode 100644
index 0000000000..bcf9dea092
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-document.https.html.ini
@@ -0,0 +1,11 @@
+implementation-status: backlog
+[cache-storage-reporting-document.https.html]
+  expected:
+    if release_or_beta: ["FAIL", "TIMEOUT"]
+    TIMEOUT
+  [COEP support on document.]
+    expected: TIMEOUT
+
+  [COEP-Report-Only support on document.]
+    expected: NOTRUN
+
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-service-worker.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-service-worker.https.html.ini
new file mode 100644
index 0000000000..323dc4eaf4
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-service-worker.https.html.ini
@@ -0,0 +1,14 @@
+implementation-status: backlog
+[cache-storage-reporting-service-worker.https.html]
+  expected:
+    if release_or_beta: [FAIL, TIMEOUT]
+    if os == "win": [OK, TIMEOUT]
+  [COEP support on ServiceWorker.]
+    expected:
+      if os == "win": [FAIL, NOTRUN]
+      FAIL
+
+  [COEP-Report-Only support on ServiceWorker.]
+    expected:
+      if os == "win": [FAIL, TIMEOUT, NOTRUN]
+      FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-shared-worker.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-shared-worker.https.html.ini
new file mode 100644
index 0000000000..f8c47fc82f
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/cache-storage-reporting-shared-worker.https.html.ini
@@ -0,0 +1,13 @@
+implementation-status: backlog
+[cache-storage-reporting-shared-worker.https.html]
+  expected:
+    if os == "win": [OK, TIMEOUT]
+  [COEP-Report-Only support on SharedWorker.]
+    expected:
+      if os == "win": [FAIL, NOTRUN]
+      FAIL
+
+  [COEP support on SharedWorker.]
+    expected:
+      if os == "win": [FAIL, NOTRUN]
+      FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/coep-frame-javascript.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/coep-frame-javascript.https.html.ini
new file mode 100644
index 0000000000..eed75df52b
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/coep-frame-javascript.https.html.ini
@@ -0,0 +1,3 @@
+[coep-frame-javascript.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/coep-on-response-from-service-worker.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/coep-on-response-from-service-worker.https.html.ini
new file mode 100644
index 0000000000..9bd44251cf
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/coep-on-response-from-service-worker.https.html.ini
@@ -0,0 +1,54 @@
+[coep-on-response-from-service-worker.https.html]
+  expected:
+    if (os == "win") and not debug: [OK, TIMEOUT]
+  [setup]
+    expected:
+      if (os == "win") and not debug: [PASS, TIMEOUT]
+
+  [making a same-origin request for CORP: same-origin]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a same-origin request for no CORP]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a same-origin request for CORP: cross-origin]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request for CORP: same-origin]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request for no CORP]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request for CORP: cross-origin]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request for CORP: same-origin [PASS THROUGH\]]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request for no CORP [PASS THROUGH\]]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request for CORP: cross-origin [PASS THROUGH\]]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request with CORS without ACAO]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [making a cross-origin request with CORS]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
+
+  [teardown]
+    expected:
+      if (os == "win") and not debug: [PASS, NOTRUN]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/__dir__.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/__dir__.ini
new file mode 100644
index 0000000000..c6bc7fcb85
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/__dir__.ini
@@ -0,0 +1,2 @@
+prefs: [browser.tabs.remote.useCrossOriginEmbedderPolicy:true, browser.tabs.remote.coep.credentialless:true]
+lsan-allowed: [maybe_pod_malloc]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cache-storage.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cache-storage.https.window.js.ini
new file mode 100644
index 0000000000..b0d30eb666
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cache-storage.https.window.js.ini
@@ -0,0 +1,15 @@
+[cache-storage.https.window.html?shared_worker]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[cache-storage.https.window.html?document]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[cache-storage.https.window.html?dedicated_worker]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[cache-storage.https.window.html?service_worker]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cache.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cache.window.js.ini
new file mode 100644
index 0000000000..6b7462240e
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cache.window.js.ini
@@ -0,0 +1,3 @@
+[cache.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cross-origin-isolated.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cross-origin-isolated.window.js.ini
new file mode 100644
index 0000000000..ca4c11ff6e
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/cross-origin-isolated.window.js.ini
@@ -0,0 +1,3 @@
+[cross-origin-isolated.window.html]
+  expected:
+    if (os == "android") and fission: [TIMEOUT, OK]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/dedicated-worker.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/dedicated-worker.https.window.js.ini
new file mode 100644
index 0000000000..c693058504
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/dedicated-worker.https.window.js.ini
@@ -0,0 +1,3 @@
+[dedicated-worker.https.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/fetch.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/fetch.https.window.js.ini
new file mode 100644
index 0000000000..b576978fc1
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/fetch.https.window.js.ini
@@ -0,0 +1,3 @@
+[fetch.https.window.html]
+  expected:
+    if (os == "android") and fission: [TIMEOUT, OK]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-credentialless.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-credentialless.https.window.js.ini
new file mode 100644
index 0000000000..49d3fc8625
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-credentialless.https.window.js.ini
@@ -0,0 +1,11 @@
+[iframe-coep-credentialless.https.window.html?5-9]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[iframe-coep-credentialless.https.window.html?9-last]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[iframe-coep-credentialless.https.window.html?1-4]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-none.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-none.https.window.js.ini
new file mode 100644
index 0000000000..fa905ba57e
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-none.https.window.js.ini
@@ -0,0 +1,7 @@
+[iframe-coep-none.https.window.html?1-4]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[iframe-coep-none.https.window.html?5-last]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-require-corp.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-require-corp.https.window.js.ini
new file mode 100644
index 0000000000..dccd0a8cb1
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe-coep-require-corp.https.window.js.ini
@@ -0,0 +1,11 @@
+[iframe-coep-require-corp.https.window.html?1-4]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[iframe-coep-require-corp.https.window.html?5-9]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+
+[iframe-coep-require-corp.https.window.html?9-last]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe.window.js.ini
new file mode 100644
index 0000000000..9e09e29919
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/iframe.window.js.ini
@@ -0,0 +1,3 @@
+[iframe.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/image.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/image.https.window.js.ini
new file mode 100644
index 0000000000..0f7874bfcd
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/image.https.window.js.ini
@@ -0,0 +1,12 @@
+[image.https.window.html]
+  [image cross-origin + anonymous]
+    expected:
+      if (os == "android") and debug: PASS
+      if os == "win": PASS
+      if os == "mac": PASS
+      [PASS, FAIL]
+
+  [image cross-origin + use-credentials]
+    expected:
+      if (os == "android") and debug and not swgl: [PASS, FAIL]
+      if os == "linux": [PASS, FAIL]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/link.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/link.https.window.js.ini
new file mode 100644
index 0000000000..82f197f0e7
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/link.https.window.js.ini
@@ -0,0 +1,3 @@
+[link.https.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/redirect.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/redirect.window.js.ini
new file mode 100644
index 0000000000..a771d8d17a
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/redirect.window.js.ini
@@ -0,0 +1,3 @@
+[redirect.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/reporting-navigation.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/reporting-navigation.https.window.js.ini
new file mode 100644
index 0000000000..a426c15903
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/reporting-navigation.https.window.js.ini
@@ -0,0 +1,2 @@
+[reporting-navigation.https.window.html]
+  disabled: https://bugzilla.mozilla.org/show_bug.cgi?id=1652926
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/reporting-subresource-corp.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/reporting-subresource-corp.https.window.js.ini
new file mode 100644
index 0000000000..4a80426dd3
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/reporting-subresource-corp.https.window.js.ini
@@ -0,0 +1,2 @@
+[reporting-subresource-corp.https.window.html]
+  disabled: https://bugzilla.mozilla.org/show_bug.cgi?id=1652926
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/script.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/script.https.window.js.ini
new file mode 100644
index 0000000000..20d25baf47
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/script.https.window.js.ini
@@ -0,0 +1,24 @@
+[script.https.window.html]
+  expected:
+    if (os == "linux") and not swgl and not debug and fission and (processor == "x86_64"): [OK, TIMEOUT]
+    if (os == "linux") and not swgl and not debug and fission and (processor == "x86"): [OK, TIMEOUT]
+    if (os == "linux") and not swgl and not debug and not fission: [OK, TIMEOUT]
+    if (os == "linux") and not swgl and debug: [OK, TIMEOUT]
+  [script same-origin + undefined]
+    expected:
+      if (os == "linux") and not swgl and not debug and fission and (processor == "x86"): [PASS, TIMEOUT]
+      if (os == "linux") and not swgl and not debug and fission and (processor == "x86_64"): [PASS, TIMEOUT]
+      if (os == "linux") and not swgl and not debug and not fission: [PASS, TIMEOUT]
+      if (os == "linux") and not swgl and debug: [PASS, TIMEOUT]
+
+  [script same-origin + anonymous]
+    expected:
+      if (os == "linux") and not swgl and fission and not debug and (processor == "x86"): [PASS, TIMEOUT]
+      if (os == "linux") and not swgl and fission and not debug and (processor == "x86_64"): [PASS, TIMEOUT]
+      if (os == "linux") and not swgl and fission and debug: [PASS, TIMEOUT]
+      if (os == "linux") and not swgl and not fission and debug: [PASS, TIMEOUT]
+
+  [script same-origin + use-credentials]
+    expected:
+      if (os == "linux") and not debug and fission and (processor == "x86_64"): [PASS, TIMEOUT]
+      if (os == "linux") and debug and not swgl: [PASS, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker-coep-credentialless-proxy.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker-coep-credentialless-proxy.https.window.js.ini
new file mode 100644
index 0000000000..5263ece032
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker-coep-credentialless-proxy.https.window.js.ini
@@ -0,0 +1,2 @@
+[service-worker-coep-credentialless-proxy.https.window.html]
+  disabled: https://bugzilla.mozilla.org/show_bug.cgi?id=1613912
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker-coep-none-proxy.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker-coep-none-proxy.https.window.js.ini
new file mode 100644
index 0000000000..fa62111a37
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker-coep-none-proxy.https.window.js.ini
@@ -0,0 +1,2 @@
+[service-worker-coep-none-proxy.https.window.html]
+  disabled: https://bugzilla.mozilla.org/show_bug.cgi?id=1613912
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker.https.window.js.ini
new file mode 100644
index 0000000000..ea3da9f934
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/service-worker.https.window.js.ini
@@ -0,0 +1,3 @@
+[service-worker.https.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/shared-worker.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/shared-worker.https.window.js.ini
new file mode 100644
index 0000000000..a0f737244c
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/shared-worker.https.window.js.ini
@@ -0,0 +1,3 @@
+[shared-worker.https.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/video.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/video.https.window.js.ini
new file mode 100644
index 0000000000..cd4afd978b
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/video.https.window.js.ini
@@ -0,0 +1,3 @@
+[video.https.window.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/websocket.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/websocket.https.window.js.ini
new file mode 100644
index 0000000000..0524e8be71
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/credentialless/websocket.https.window.js.ini
@@ -0,0 +1,3 @@
+[websocket.https.window.html]
+  disabled:
+    if verify: fails in verify mode
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/cross-origin-isolated-permission-iframe.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/cross-origin-isolated-permission-iframe.https.window.js.ini
new file mode 100644
index 0000000000..fe639ae6b6
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/cross-origin-isolated-permission-iframe.https.window.js.ini
@@ -0,0 +1,15 @@
+[cross-origin-isolated-permission-iframe.https.window.html]
+  [iframe (origin: https://web-platform.test:8443) cross origin isolated (()) permission test]
+    expected: FAIL
+
+  [iframe (origin: https://www1.web-platform.test:8443) cross origin isolated (undefined) permission test]
+    expected: FAIL
+
+  [iframe (origin: https://www1.web-platform.test:8443) cross origin isolated (*) permission test]
+    expected: FAIL
+
+  [iframe (origin: https://www1.web-platform.test:8443) cross origin isolated (self) permission test]
+    expected: FAIL
+
+  [iframe (origin: https://www1.web-platform.test:8443) cross origin isolated (()) permission test]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/cross-origin-isolated-permission-worker.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/cross-origin-isolated-permission-worker.https.window.js.ini
new file mode 100644
index 0000000000..e1e8e5cd40
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/cross-origin-isolated-permission-worker.https.window.js.ini
@@ -0,0 +1,23 @@
+[cross-origin-isolated-permission-worker.https.window.html]
+  expected:
+    if (os == "android") and swgl: [TIMEOUT, OK]
+  [shared_worker (withCoopCoep: true) cross origin isolated permission test]
+    expected: FAIL
+
+  [dedicated_worker (scheme: https) cross origin isolated (()) permission test]
+    expected: FAIL
+
+  [dedicated_worker (scheme: data) cross origin isolated (undefined) permission test]
+    expected: FAIL
+
+  [dedicated_worker (scheme: data) cross origin isolated (*) permission test]
+    expected: FAIL
+
+  [dedicated_worker (scheme: data) cross origin isolated (self) permission test]
+    expected: FAIL
+
+  [dedicated_worker (scheme: blob) cross origin isolated (()) permission test]
+    expected: FAIL
+
+  [service_worker (withCoopCoep: true) cross origin isolated permission test]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/data.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/data.https.html.ini
new file mode 100644
index 0000000000..1a61a46726
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/data.https.html.ini
@@ -0,0 +1,3 @@
+[data.https.html]
+  expected:
+    if (os == "android") and fission: [TIMEOUT, OK]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/dedicated-worker-cache-storage.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/dedicated-worker-cache-storage.https.html.ini
new file mode 100644
index 0000000000..c9c1e3d2d8
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/dedicated-worker-cache-storage.https.html.ini
@@ -0,0 +1,14 @@
+[dedicated-worker-cache-storage.https.html]
+  expected:
+    if (processor == "x86") and (os == "win") and not debug: [OK, TIMEOUT]
+  [coep-require-corp coep-require-corp corp-cross-origin]
+    expected:
+      if (processor == "x86") and (os == "win") and not debug: [PASS, NOTRUN]
+
+  [coep-require-corp coep-require-corp corp-undefined]
+    expected:
+      if (processor == "x86") and (os == "win") and not debug: [PASS, NOTRUN]
+
+  [coep-require-corp coep-none corp-undefined]
+    expected:
+      if (processor == "x86") and (os == "win") and not debug: [PASS, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/dedicated-worker.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/dedicated-worker.https.html.ini
new file mode 100644
index 0000000000..880cbaf6ff
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/dedicated-worker.https.html.ini
@@ -0,0 +1,11 @@
+[dedicated-worker.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [COEP: worker inherits COEP from blob URL creator, not owner.]
+    expected: FAIL
+
+  [COEP: worker inherits COEP for filesystem URL.]
+    expected: FAIL
+
+  [COEP: worker inherits COEP from filesystem URL creator, not owner.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/header-parsing.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/header-parsing.https.html.ini
new file mode 100644
index 0000000000..da1511357d
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/header-parsing.https.html.ini
@@ -0,0 +1,32 @@
+[header-parsing.https.html]
+  expected: TIMEOUT
+  [navigation blocked for ["\\trequire-corp\\t"\]]
+    expected: NOTRUN
+
+  [navigation allowed for ["require-corp",""\]]
+    expected: NOTRUN
+
+  [navigation blocked for [" \\trequire-corp"\]]
+    expected: NOTRUN
+
+  [navigation blocked for ["require-corp;require-corp"\]]
+    expected: NOTRUN
+
+  [navigation blocked for [" require-corp "\]]
+    expected: NOTRUN
+
+  [navigation blocked for ["require-corp"\]]
+    expected: NOTRUN
+
+  [navigation blocked for ["require-corp; foo=bar"\]]
+    expected: NOTRUN
+
+  [navigation blocked for ["require-corp\\t "\]]
+    expected: NOTRUN
+
+  [navigation allowed for ["","require-corp"\]]
+    expected: TIMEOUT
+
+  [navigation blocked for ["require-corp; report-to=\\"data:","\\""\]]
+    expected: NOTRUN
+
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/javascript.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/javascript.https.html.ini
new file mode 100644
index 0000000000..fb1abee964
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/javascript.https.html.ini
@@ -0,0 +1,3 @@
+[javascript.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/meta-http-equiv.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/meta-http-equiv.https.html.ini
new file mode 100644
index 0000000000..8eb0e9cb2a
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/meta-http-equiv.https.html.ini
@@ -0,0 +1,3 @@
+[meta-http-equiv.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/multi-globals/workers-coep-report.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/multi-globals/workers-coep-report.https.html.ini
new file mode 100644
index 0000000000..de186120ea
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/multi-globals/workers-coep-report.https.html.ini
@@ -0,0 +1,4 @@
+[workers-coep-report.https.html]
+  [Multiple globals for Worker constructor: COEP reports]
+    expected: FAIL
+
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/no-secure-context.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/no-secure-context.html.ini
new file mode 100644
index 0000000000..20ae78fbd3
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/no-secure-context.html.ini
@@ -0,0 +1,3 @@
+[no-secure-context.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/non-initial-about-blank.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/non-initial-about-blank.https.html.ini
new file mode 100644
index 0000000000..3aefadd200
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/non-initial-about-blank.https.html.ini
@@ -0,0 +1,3 @@
+[non-initial-about-blank.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/none-load-from-cache-storage.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/none-load-from-cache-storage.https.html.ini
new file mode 100644
index 0000000000..0703495a05
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/none-load-from-cache-storage.https.html.ini
@@ -0,0 +1,94 @@
+[none-load-from-cache-storage.https.html]
+  expected:
+    if (processor == "x86") and not debug: [TIMEOUT, OK]
+  [Fetch cross-origin no-cors cors-enabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: [NOTRUN, PASS]
+
+  [Fetch cross-origin no-cors cors-enabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: [NOTRUN, PASS, TIMEOUT]
+
+  [Fetch cross-origin no-cors cors-enabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: [NOTRUN, PASS]
+
+  [Fetch same-origin cors cors-enabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin no-cors cors-disabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin cors cors-disabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: TIMEOUT
+
+  [Fetch same-origin no-cors cors-disabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin no-cors cors-disabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin cors cors-enabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin cors cors-disabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin no-cors cors-enabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin cors cors-enabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin no-cors cors-disabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin no-cors cors-disabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin cors cors-disabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin cors cors-disabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin cors cors-enabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin no-cors cors-enabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin no-cors cors-disabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin no-cors cors-enabled corp-cross-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin cors cors-disabled corp-undefined from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch same-origin cors cors-enabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [Fetch cross-origin cors cors-enabled corp-same-origin from network and CacheStorage.]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/none-sw-from-none.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/none-sw-from-none.https.html.ini
new file mode 100644
index 0000000000..82d6c30686
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/none-sw-from-none.https.html.ini
@@ -0,0 +1,3 @@
+[none-sw-from-none.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/none-sw-from-require-corp.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/none-sw-from-require-corp.https.html.ini
new file mode 100644
index 0000000000..6148a4350c
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/none-sw-from-require-corp.https.html.ini
@@ -0,0 +1,3 @@
+[none-sw-from-require-corp.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/none.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/none.https.html.ini
new file mode 100644
index 0000000000..002fe73047
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/none.https.html.ini
@@ -0,0 +1,4 @@
+[none.https.html]
+  expected:
+    if (processor == "x86_64") and (os == "android") and fission: [OK, TIMEOUT]
+    if processor == "x86": [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-credentialless.tentative.https.any.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-credentialless.tentative.https.any.js.ini
new file mode 100644
index 0000000000..4214630b05
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-credentialless.tentative.https.any.js.ini
@@ -0,0 +1,39 @@
+[reflection-credentialless.tentative.https.any.worker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-credentialless]
+    expected: FAIL
+
+
+[reflection-credentialless.tentative.https.any.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-credentialless]
+    expected: FAIL
+
+
+[reflection-credentialless.tentative.https.any.sharedworker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-credentialless]
+    expected: FAIL
+
+
+[reflection-credentialless.tentative.https.any.serviceworker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-credentialless]
+    expected: FAIL
+
+
+[reflection-credentialless.tentative.https.any.sharedworker-module.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-credentialless]
+    expected: FAIL
+
+
+[reflection-credentialless.tentative.https.any.serviceworker-module.html]
+  expected:
+    if (os == "android") and fission: [ERROR, TIMEOUT]
+    ERROR
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-require-corp.tentative.https.any.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-require-corp.tentative.https.any.js.ini
new file mode 100644
index 0000000000..4ac88fe98d
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-require-corp.tentative.https.any.js.ini
@@ -0,0 +1,35 @@
+[reflection-require-corp.tentative.https.any.worker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-require-corp]
+    expected: FAIL
+
+
+[reflection-require-corp.tentative.https.any.html]
+  [reflection-require-corp]
+    expected: FAIL
+
+
+[reflection-require-corp.tentative.https.any.serviceworker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-require-corp]
+    expected: FAIL
+
+
+[reflection-require-corp.tentative.https.any.sharedworker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-require-corp]
+    expected: FAIL
+
+
+[reflection-require-corp.tentative.https.any.sharedworker-module.html]
+  [reflection-require-corp]
+    expected: FAIL
+
+
+[reflection-require-corp.tentative.https.any.serviceworker-module.html]
+  expected:
+    if (os == "android") and fission: [ERROR, TIMEOUT]
+    ERROR
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-unsafe-none.tentative.https.any.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-unsafe-none.tentative.https.any.js.ini
new file mode 100644
index 0000000000..1bd0dda756
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reflection-unsafe-none.tentative.https.any.js.ini
@@ -0,0 +1,37 @@
+[reflection-unsafe-none.tentative.https.any.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-unsafe-none]
+    expected: FAIL
+
+
+[reflection-unsafe-none.tentative.https.any.worker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-unsafe-none]
+    expected: FAIL
+
+
+[reflection-unsafe-none.tentative.https.any.sharedworker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-unsafe-none]
+    expected: FAIL
+
+
+[reflection-unsafe-none.tentative.https.any.serviceworker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [reflection-unsafe-none]
+    expected: FAIL
+
+
+[reflection-unsafe-none.tentative.https.any.sharedworker-module.html]
+  [reflection-unsafe-none]
+    expected: FAIL
+
+
+[reflection-unsafe-none.tentative.https.any.serviceworker-module.html]
+  expected:
+    if (os == "android") and fission: [ERROR, TIMEOUT]
+    ERROR
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/report-only-require-corp.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/report-only-require-corp.https.html.ini
new file mode 100644
index 0000000000..63d82114f5
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/report-only-require-corp.https.html.ini
@@ -0,0 +1,3 @@
+[report-only-require-corp.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-navigation.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-navigation.https.html.ini
new file mode 100644
index 0000000000..07bc75b710
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-navigation.https.html.ini
@@ -0,0 +1,49 @@
+[reporting-navigation.https.html]
+  expected: TIMEOUT
+  [parent: |header(cross-origin-embedder-policy-report-only,require-corp), target: |header(cross-origin-embedder-policy,require-corp), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy-report-only,require-corp), target: |header(cross-origin-resource-policy,cross-origin), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-embedder-policy-report-only,require-corp)|header(cross-origin-resource-policy,cross-origin), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy-report-only,require-corp), target: |header(cross-origin-resource-policy,cross-origin), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-embedder-policy,require-corp), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-embedder-policy-report-only,require-corp)|header(cross-origin-resource-policy,cross-origin), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy-report-only,require-corp), target: |header(cross-origin-embedder-policy,require-corp), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-resource-policy,cross-origin), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-resource-policy,cross-origin), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: (none), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy-report-only,require-corp), target: (none), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-embedder-policy,require-corp), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy-report-only,require-corp), target: (none), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: (none), with empty frame: true]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-resource-policy,cross-origin)|header(x-frame-options,deny), with empty frame: false]
+    expected: TIMEOUT
+
+  [parent: |header(cross-origin-embedder-policy,require-corp), target: |header(cross-origin-resource-policy,cross-origin)|header(x-frame-options,deny), with empty frame: true]
+    expected: TIMEOUT
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-subresource-corp.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-subresource-corp.https.html.ini
new file mode 100644
index 0000000000..3e11774655
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-subresource-corp.https.html.ini
@@ -0,0 +1,58 @@
+[reporting-subresource-corp.https.html]
+  expected: TIMEOUT
+  [[document\] blocked due to COEP]
+    expected: TIMEOUT
+
+  [[document\] blocked during redirect]
+    expected: NOTRUN
+
+  [[dedicated worker\] same-origin]
+    expected: NOTRUN
+
+  [[dedicated worker\] blocked by CORP: same-origin]
+    expected: NOTRUN
+
+  [[dedicated worker\] blocked due to COEP]
+    expected: NOTRUN
+
+  [[dedicated worker\] blocked during redirect]
+    expected: NOTRUN
+
+  [[shared worker\] same-origin]
+    expected: NOTRUN
+
+  [[shared worker\] blocked by CORP: same-origin]
+    expected: NOTRUN
+
+  [[shared worker\] blocked due to COEP]
+    expected: NOTRUN
+
+  [[shared worker\] blocked during redirect]
+    expected: NOTRUN
+
+  [[service worker\] same-origin]
+    expected: NOTRUN
+
+  [[service worker\] blocked by CORP: same-origin]
+    expected: NOTRUN
+
+  [[service worker\] blocked due to COEP]
+    expected: NOTRUN
+
+  [[service worker\] blocked during redirect]
+    expected: NOTRUN
+
+  [[between service worker and page\] same-origin]
+    expected: NOTRUN
+
+  [[between service worker and page\] blocked by CORP: same-origin]
+    expected: NOTRUN
+
+  [[between service worker and page\] blocked due to COEP]
+    expected: NOTRUN
+
+  [[between service worker and page\] blocked during redirect]
+    expected: NOTRUN
+
+  [destination: script]
+    expected: NOTRUN
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-document-reporting-endpoint.https.window.js.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-document-reporting-endpoint.https.window.js.ini
new file mode 100644
index 0000000000..823f0d9922
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-document-reporting-endpoint.https.window.js.ini
@@ -0,0 +1,9 @@
+[reporting-to-document-reporting-endpoint.https.window.html]
+  [subresource CORP]
+    expected: FAIL
+
+  [navigation CORP on cross origin]
+    expected: FAIL
+
+  [navigation CORP on same origin]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-endpoint.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-endpoint.https.html.ini
new file mode 100644
index 0000000000..7eb8792d0e
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-endpoint.https.html.ini
@@ -0,0 +1,15 @@
+[reporting-to-endpoint.https.html]
+  [navigation CORP]
+    expected: FAIL
+
+  [COEP violation on nested frame navigation]
+    expected: FAIL
+
+  [subresource CORP]
+    expected: FAIL
+
+  [Two COEP headers, split inside report-to value]
+    expected: FAIL
+
+  [Shared worker fetch]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-frame-owner.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-frame-owner.https.html.ini
new file mode 100644
index 0000000000..058199815b
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-frame-owner.https.html.ini
@@ -0,0 +1,20 @@
+[reporting-to-frame-owner.https.html]
+  expected: TIMEOUT
+  [Reporting to coep-report-only frame with coep-none worker]
+    expected: TIMEOUT
+
+  [Reporting to coep-report-only frame with coep-report-only worker]
+    expected: NOTRUN
+
+  [Reporting to coep-report-only frame with coep-require-corp worker]
+    expected: NOTRUN
+
+  [Reporting to coep-require-corp frame with coep-none worker]
+    expected: NOTRUN
+
+  [Reporting to coep-require-corp frame with coep-report-only worker]
+    expected: NOTRUN
+
+  [Reporting to coep-require-corp frame with coep-require-corp worker]
+    expected: NOTRUN
+
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-worker-owner.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-worker-owner.https.html.ini
new file mode 100644
index 0000000000..cfde76c067
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/reporting-to-worker-owner.https.html.ini
@@ -0,0 +1,20 @@
+[reporting-to-worker-owner.https.html]
+  expected: TIMEOUT
+  [Reporting to coep-report-only worker with coep-none worker]
+    expected: TIMEOUT
+
+  [Reporting to coep-report-only worker with coep-report-only worker]
+    expected: NOTRUN
+
+  [Reporting to coep-report-only worker with coep-require-corp worker]
+    expected: NOTRUN
+
+  [Reporting to coep-require-corp worker with coep-none worker]
+    expected: NOTRUN
+
+  [Reporting to coep-require-corp worker with coep-report-only worker]
+    expected: NOTRUN
+
+  [Reporting to coep-require-corp worker with coep-require-corp worker]
+    expected: NOTRUN
+
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-about-blank.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-about-blank.https.html.ini
new file mode 100644
index 0000000000..9e360629cd
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-about-blank.https.html.ini
@@ -0,0 +1,5 @@
+[require-corp-about-blank.https.html]
+  [A(B(C)) A=require-corp, B=about:blank, C=no-require-corp => C can't load]
+    expected:
+      if (os == "mac") and not debug: [PASS, FAIL]
+      if (os == "android") and not debug: [PASS, FAIL]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-about-srcdoc.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-about-srcdoc.https.html.ini
new file mode 100644
index 0000000000..6c39d3dc1b
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-about-srcdoc.https.html.ini
@@ -0,0 +1,5 @@
+[require-corp-about-srcdoc.https.html]
+  [A(B(C)) A=require-corp, B=about:srcdoc, C=no-require-corp => C can't load]
+    expected:
+      if (os == "mac") and not debug: [PASS, FAIL]
+      if (os == "android") and not debug: [PASS, FAIL]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-cached-images.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-cached-images.https.html.ini
new file mode 100644
index 0000000000..532fa9ee19
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-cached-images.https.html.ini
@@ -0,0 +1,3 @@
+[require-corp-cached-images.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-revalidated-images.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-revalidated-images.https.html.ini
new file mode 100644
index 0000000000..cc5b29006c
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-revalidated-images.https.html.ini
@@ -0,0 +1,3 @@
+[require-corp-revalidated-images.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw-from-none.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw-from-none.https.html.ini
new file mode 100644
index 0000000000..b5bc9b1869
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw-from-none.https.html.ini
@@ -0,0 +1,54 @@
+[require-corp-sw-from-none.https.html]
+  expected:
+    if (processor == "x86") and not debug: TIMEOUT
+  [making a same-origin request for no CORP]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: same-origin [PASS THROUGH\]]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request with CORS]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for no CORP]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a same-origin request for CORP: same-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request with CORS without ACAO]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: cross-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request with CORS-preflight]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: same-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: cross-origin [PASS THROUGH\]]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a same-origin request for CORP: cross-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for no CORP [PASS THROUGH\]]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [setting up]
+    expected:
+      if (processor == "x86") and not debug: TIMEOUT
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw-from-require-corp.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw-from-require-corp.https.html.ini
new file mode 100644
index 0000000000..08ad9e9100
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw-from-require-corp.https.html.ini
@@ -0,0 +1,54 @@
+[require-corp-sw-from-require-corp.https.html]
+  expected:
+    if (processor == "x86") and not debug: TIMEOUT
+  [making a same-origin request for no CORP]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: same-origin [PASS THROUGH\]]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request with CORS]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for no CORP]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a same-origin request for CORP: same-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request with CORS without ACAO]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: cross-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request with CORS-preflight]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: same-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for CORP: cross-origin [PASS THROUGH\]]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a same-origin request for CORP: cross-origin]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [making a cross-origin request for no CORP [PASS THROUGH\]]
+    expected:
+      if (processor == "x86") and not debug: NOTRUN
+
+  [setting up]
+    expected:
+      if (processor == "x86") and not debug: TIMEOUT
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw.https.html.ini
new file mode 100644
index 0000000000..1ff88225e7
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-sw.https.html.ini
@@ -0,0 +1,3 @@
+[require-corp-sw.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation.html.ini
new file mode 100644
index 0000000000..0568e74bd0
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation.html.ini
@@ -0,0 +1,3 @@
+[require-corp-worker-script-revalidation.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp.https.html.ini
new file mode 100644
index 0000000000..16999da68d
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/require-corp.https.html.ini
@@ -0,0 +1,17 @@
+[require-corp.https.html]
+  expected:
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+  ["require-corp" top-level: navigating a frame to "none" should fail]
+    expected:
+      if (os == "mac") and not debug: [PASS, FAIL]
+      if (os == "android") and not debug: [PASS, FAIL]
+
+  ["require-corp" top-level: navigating a frame from "require-corp" to "none" should fail]
+    expected:
+      if (os == "mac") and not debug: [PASS, FAIL]
+      if (os == "android") and not debug: [PASS, FAIL]
+
+  ["require-corp" top-level: navigating an iframe to a page without CORP, through a WindowProxy, should fail]
+    expected:
+      if (os == "mac") and not debug: [PASS, FAIL]
+      if (os == "android") and not debug: [PASS, FAIL]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/sandbox.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/sandbox.https.html.ini
new file mode 100644
index 0000000000..1ac04627b0
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/sandbox.https.html.ini
@@ -0,0 +1,3 @@
+[sandbox.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/shared-workers.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/shared-workers.https.html.ini
new file mode 100644
index 0000000000..2882f2a338
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/shared-workers.https.html.ini
@@ -0,0 +1,20 @@
+[shared-workers.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  ["require-corp" (derived from owner set due to use of local scheme - blob URL)]
+    expected: FAIL
+
+  ["require-corp" (derived from owner set due to use of local scheme - data URL)]
+    expected: FAIL
+
+  [require-corp (derived from blob URL creator)]
+    expected: FAIL
+
+  [default policy (derived from owner set due to use of local scheme - filesystem URL)]
+    expected: FAIL
+
+  [require-corp (derived from filesystem URL creator)]
+    expected: FAIL
+
+  ["require-corp" (derived from owner set due to use of local scheme - filesystem URL)]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/srcdoc.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/srcdoc.https.html.ini
new file mode 100644
index 0000000000..4ef766fb56
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/srcdoc.https.html.ini
@@ -0,0 +1,3 @@
+[srcdoc.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/html/cross-origin-embedder-policy/worker-inheritance.sub.https.html.ini b/testing/web-platform/meta/html/cross-origin-embedder-policy/worker-inheritance.sub.https.html.ini
new file mode 100644
index 0000000000..16f1079888
--- /dev/null
+++ b/testing/web-platform/meta/html/cross-origin-embedder-policy/worker-inheritance.sub.https.html.ini
@@ -0,0 +1,5 @@
+[worker-inheritance.sub.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [blob URL shared worker: Cross origin should be blocked.]
+    expected: FAIL