From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- .../form-action-self-allowed-target-blank.html | 40 +++++++++++++++++++ .../form-action-src-allowed-target-blank.sub.html | 33 ++++++++++++++++ .../form-action-src-allowed-target-frame.sub.html | 34 ++++++++++++++++ .../form-action/form-action-src-allowed.sub.html | 40 +++++++++++++++++++ .../form-action/form-action-src-blocked.sub.html | 40 +++++++++++++++++++ .../form-action-src-default-ignored.sub.html | 40 +++++++++++++++++++ .../form-action-src-get-allowed.sub.html | 41 +++++++++++++++++++ .../form-action-src-get-blocked.sub.html | 42 ++++++++++++++++++++ .../form-action-src-javascript-blocked.sub.html | 34 ++++++++++++++++ ...ion-src-javascript-blocked.sub.html.sub.headers | 0 .../form-action-src-javascript-prevented.html | 46 ++++++++++++++++++++++ ...tion-src-redirect-allowed-target-blank.sub.html | 33 ++++++++++++++++ ...tion-src-redirect-allowed-target-frame.sub.html | 34 ++++++++++++++++ .../form-action-src-redirect-blocked.sub.html | 42 ++++++++++++++++++++ .../support/post-message-to-opener.sub.html | 3 ++ .../support/post-message-to-parent.sub.html | 3 ++ 16 files changed, 505 insertions(+) create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-self-allowed-target-blank.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-blank.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-frame.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-default-ignored.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-allowed.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html.sub.headers create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-prevented.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-blank.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-frame.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-blocked.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-opener.sub.html create mode 100644 testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-parent.sub.html (limited to 'testing/web-platform/tests/content-security-policy/form-action') diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-self-allowed-target-blank.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-self-allowed-target-blank.html new file mode 100644 index 0000000000..bc81a63b62 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-self-allowed-target-blank.html @@ -0,0 +1,40 @@ + + + + + + + + + + +
+
+ +

+ Test that "form-action 'self'" works correctly when the form uses + target="_blank". If this test passes, a new window must open after pressing + "submit". +

+ + + + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-blank.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-blank.sub.html new file mode 100644 index 0000000000..8727a82119 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-blank.sub.html @@ -0,0 +1,33 @@ + + + + form-action-src-redirect-allowed-target-blank + + + + + + +
+ + +
+ + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-frame.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-frame.sub.html new file mode 100644 index 0000000000..81921d395e --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed-target-frame.sub.html @@ -0,0 +1,34 @@ + + + + form-action-src-allowed-target-frame + + + + + + +
+ + +
+ + + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed.sub.html new file mode 100644 index 0000000000..418d6f51b0 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-allowed.sub.html @@ -0,0 +1,40 @@ + + + + + + + form-action-src-allowed + + + + + + + + + + +
+ + +
+

Tests that allowed form actions work correctly.

+
+ + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-blocked.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-blocked.sub.html new file mode 100644 index 0000000000..a113d9a264 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-blocked.sub.html @@ -0,0 +1,40 @@ + + + + + + + form-action-src-blocked + + + + + + + + + +
+ + +
+

Tests that blocking form actions works correctly.

+
+ + + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-default-ignored.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-default-ignored.sub.html new file mode 100644 index 0000000000..58db5bf735 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-default-ignored.sub.html @@ -0,0 +1,40 @@ + + + + + + + form-action-src-default-ignored + + + + + + + + + + +
+ + +
+

Tests that default-src does not cascade to form-action.

+
+ + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-allowed.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-allowed.sub.html new file mode 100644 index 0000000000..1dd7fbcd41 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-allowed.sub.html @@ -0,0 +1,41 @@ + + + + + + + form-action-src-allowed + + + + + + + + + + +
+ + +
+

Tests that allowed form actions work correctly + with GET and a redirect.

+
+ + + \ No newline at end of file diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-blocked.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-blocked.sub.html new file mode 100644 index 0000000000..638badc73a --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-get-blocked.sub.html @@ -0,0 +1,42 @@ + + + + + + + form-action-src-allowed + + + + + + + + + + +
+ + +
+

Tests that disallowed form actions are blocked + with GET and redirects.

+
+"> + + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html new file mode 100644 index 0000000000..6997ef6e86 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html @@ -0,0 +1,34 @@ + + + + + + + form-action-src-javascript-blocked + + + + + + + + +
+ + +
+

Tests that blocking form actions works correctly. If this test passes, a CSP violation will be generated, and will not see a JavaScript alert.

+
+ + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html.sub.headers b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-blocked.sub.html.sub.headers new file mode 100644 index 0000000000..e69de29bb2 diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-prevented.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-prevented.html new file mode 100644 index 0000000000..feae47ee79 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-javascript-prevented.html @@ -0,0 +1,46 @@ + + + + + + + + + + +
+ +
+ +

+ Test that "form-action 'none'" doesn't create a violation report if the event was prevented. +

+ + + + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-blank.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-blank.sub.html new file mode 100644 index 0000000000..e1f23db73c --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-blank.sub.html @@ -0,0 +1,33 @@ + + + + form-action-src-redirect-allowed-target-blank + + + + + + +
+ +
+ + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-frame.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-frame.sub.html new file mode 100644 index 0000000000..6afd4459b0 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-allowed-target-frame.sub.html @@ -0,0 +1,34 @@ + + + + form-action-src-redirect-allowed-target-frame + + + + + + +
+ +
+ + + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-blocked.sub.html b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-blocked.sub.html new file mode 100644 index 0000000000..ac25e03d5c --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/form-action-src-redirect-blocked.sub.html @@ -0,0 +1,42 @@ + + + + + + + form-action-src-redirect-blocked + + + + + + + + + + +
+ + +
+

Tests that blocking a POST form with a redirect works correctly. If this test passes, a CSP violation will be generated.

+
+ + + diff --git a/testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-opener.sub.html b/testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-opener.sub.html new file mode 100644 index 0000000000..0348139057 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-opener.sub.html @@ -0,0 +1,3 @@ + diff --git a/testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-parent.sub.html b/testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-parent.sub.html new file mode 100644 index 0000000000..63e464be21 --- /dev/null +++ b/testing/web-platform/tests/content-security-policy/form-action/support/post-message-to-parent.sub.html @@ -0,0 +1,3 @@ + -- cgit v1.2.3