summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/meta/cookies/samesite
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 19:33:14 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 19:33:14 +0000
commit36d22d82aa202bb199967e9512281e9a53db42c9 (patch)
tree105e8c98ddea1c1e4784a60a5a6410fa416be2de /testing/web-platform/meta/cookies/samesite
parentInitial commit. (diff)
downloadfirefox-esr-upstream.tar.xz
firefox-esr-upstream.zip
Adding upstream version 115.7.0esr.upstream/115.7.0esrupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/meta/cookies/samesite')
-rw-r--r--testing/web-platform/meta/cookies/samesite/__dir__.ini2
-rw-r--r--testing/web-platform/meta/cookies/samesite/about-blank-toplevel.https.html.ini3
-rw-r--r--testing/web-platform/meta/cookies/samesite/fetch.https.html.ini8
-rw-r--r--testing/web-platform/meta/cookies/samesite/form-get-blank-reload.https.html.ini5
-rw-r--r--testing/web-platform/meta/cookies/samesite/form-get-blank.https.html.ini5
-rw-r--r--testing/web-platform/meta/cookies/samesite/form-post-blank-reload.https.html.ini6
-rw-r--r--testing/web-platform/meta/cookies/samesite/form-post-blank.https.html.ini10
-rw-r--r--testing/web-platform/meta/cookies/samesite/get_all_cookies-default-samesite.html.ini5
-rw-r--r--testing/web-platform/meta/cookies/samesite/get_named_cookie-default-samesite.html.ini5
-rw-r--r--testing/web-platform/meta/cookies/samesite/iframe-reload.https.html.ini4
-rw-r--r--testing/web-platform/meta/cookies/samesite/iframe.document.https.html.ini3
-rw-r--r--testing/web-platform/meta/cookies/samesite/iframe.https.html.ini9
-rw-r--r--testing/web-platform/meta/cookies/samesite/img.https.html.ini10
-rw-r--r--testing/web-platform/meta/cookies/samesite/multiple-samesite-attributes.https.html.ini10
-rw-r--r--testing/web-platform/meta/cookies/samesite/sandbox-iframe-nested.https.html.ini3
-rw-r--r--testing/web-platform/meta/cookies/samesite/sandbox-iframe-subresource.https.html.ini3
-rw-r--r--testing/web-platform/meta/cookies/samesite/setcookie-lax.https.html.ini9
-rw-r--r--testing/web-platform/meta/cookies/samesite/setcookie-navigation.https.html.ini11
-rw-r--r--testing/web-platform/meta/cookies/samesite/window-open-reload.https.html.ini5
-rw-r--r--testing/web-platform/meta/cookies/samesite/window-open.https.html.ini3
20 files changed, 119 insertions, 0 deletions
diff --git a/testing/web-platform/meta/cookies/samesite/__dir__.ini b/testing/web-platform/meta/cookies/samesite/__dir__.ini
new file mode 100644
index 0000000000..65fc594e47
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/__dir__.ini
@@ -0,0 +1,2 @@
+prefs: [network.cookie.sameSite.laxPlusPOST.timeout: 0]
+leak-threshold: [default:51200]
diff --git a/testing/web-platform/meta/cookies/samesite/about-blank-toplevel.https.html.ini b/testing/web-platform/meta/cookies/samesite/about-blank-toplevel.https.html.ini
new file mode 100644
index 0000000000..911ccf65b4
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/about-blank-toplevel.https.html.ini
@@ -0,0 +1,3 @@
+[about-blank-toplevel.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/cookies/samesite/fetch.https.html.ini b/testing/web-platform/meta/cookies/samesite/fetch.https.html.ini
new file mode 100644
index 0000000000..0b1471cbd5
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/fetch.https.html.ini
@@ -0,0 +1,8 @@
+[fetch.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+
+ [Cross-site redirecting to same-host fetches are cross-site]
+ expected: FAIL
+
+ [Cross-site redirecting to subdomain fetches are cross-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/form-get-blank-reload.https.html.ini b/testing/web-platform/meta/cookies/samesite/form-get-blank-reload.https.html.ini
new file mode 100644
index 0000000000..87a2a44e1c
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/form-get-blank-reload.https.html.ini
@@ -0,0 +1,5 @@
+[form-get-blank-reload.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Reloaded cross-site top-level form GETs are strictly same-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/form-get-blank.https.html.ini b/testing/web-platform/meta/cookies/samesite/form-get-blank.https.html.ini
new file mode 100644
index 0000000000..76a5a867ee
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/form-get-blank.https.html.ini
@@ -0,0 +1,5 @@
+[form-get-blank.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+ expected:
+ if (os == "mac") and not debug: [OK, TIMEOUT]
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/cookies/samesite/form-post-blank-reload.https.html.ini b/testing/web-platform/meta/cookies/samesite/form-post-blank-reload.https.html.ini
new file mode 100644
index 0000000000..5d708cd831
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/form-post-blank-reload.https.html.ini
@@ -0,0 +1,6 @@
+[form-post-blank-reload.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true, dom.confirm_repost.testing.always_accept:true]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Reloaded cross-site top-level form POSTs are strictly same-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/form-post-blank.https.html.ini b/testing/web-platform/meta/cookies/samesite/form-post-blank.https.html.ini
new file mode 100644
index 0000000000..806a960bf4
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/form-post-blank.https.html.ini
@@ -0,0 +1,10 @@
+[form-post-blank.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ if (os == "mac") and not debug: [OK, TIMEOUT]
+ [Cross-site redirecting to same-host top-level form POSTs are cross-site]
+ expected: FAIL
+
+ [Cross-site redirecting to subdomain top-level form POSTs are cross-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/get_all_cookies-default-samesite.html.ini b/testing/web-platform/meta/cookies/samesite/get_all_cookies-default-samesite.html.ini
new file mode 100644
index 0000000000..46b4008b92
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/get_all_cookies-default-samesite.html.ini
@@ -0,0 +1,5 @@
+[get_all_cookies-default-samesite.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Get all cookies w/ default SameSite]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/get_named_cookie-default-samesite.html.ini b/testing/web-platform/meta/cookies/samesite/get_named_cookie-default-samesite.html.ini
new file mode 100644
index 0000000000..de58cf41ff
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/get_named_cookie-default-samesite.html.ini
@@ -0,0 +1,5 @@
+[get_named_cookie-default-samesite.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Get Named cookie w/ default SameSite]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/iframe-reload.https.html.ini b/testing/web-platform/meta/cookies/samesite/iframe-reload.https.html.ini
new file mode 100644
index 0000000000..205a5c222a
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/iframe-reload.https.html.ini
@@ -0,0 +1,4 @@
+[iframe-reload.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/cookies/samesite/iframe.document.https.html.ini b/testing/web-platform/meta/cookies/samesite/iframe.document.https.html.ini
new file mode 100644
index 0000000000..cd18ab2cbd
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/iframe.document.https.html.ini
@@ -0,0 +1,3 @@
+[iframe.document.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/cookies/samesite/iframe.https.html.ini b/testing/web-platform/meta/cookies/samesite/iframe.https.html.ini
new file mode 100644
index 0000000000..adc7b2c211
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/iframe.https.html.ini
@@ -0,0 +1,9 @@
+[iframe.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Cross-site redirecting to same-host fetches are cross-site]
+ expected: FAIL
+
+ [Cross-site redirecting to subdomain fetches are cross-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/img.https.html.ini b/testing/web-platform/meta/cookies/samesite/img.https.html.ini
new file mode 100644
index 0000000000..0f42fab18b
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/img.https.html.ini
@@ -0,0 +1,10 @@
+[img.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+ expected:
+ if (os == "mac") and not debug: [OK, TIMEOUT]
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Cross-site redirecting to same-host images are cross-site]
+ expected: FAIL
+
+ [Cross-site redirecting to subdomain images are cross-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/multiple-samesite-attributes.https.html.ini b/testing/web-platform/meta/cookies/samesite/multiple-samesite-attributes.https.html.ini
new file mode 100644
index 0000000000..bc86031f27
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/multiple-samesite-attributes.https.html.ini
@@ -0,0 +1,10 @@
+[multiple-samesite-attributes.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ if (os == "mac") and not debug: [OK, TIMEOUT]
+ [Cross-site redirecting to same-host images are cross-site]
+ expected: FAIL
+
+ [Cross-site redirecting to subdomain images are cross-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/sandbox-iframe-nested.https.html.ini b/testing/web-platform/meta/cookies/samesite/sandbox-iframe-nested.https.html.ini
new file mode 100644
index 0000000000..df011eaa4f
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/sandbox-iframe-nested.https.html.ini
@@ -0,0 +1,3 @@
+[sandbox-iframe-nested.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/cookies/samesite/sandbox-iframe-subresource.https.html.ini b/testing/web-platform/meta/cookies/samesite/sandbox-iframe-subresource.https.html.ini
new file mode 100644
index 0000000000..e04cad06cc
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/sandbox-iframe-subresource.https.html.ini
@@ -0,0 +1,3 @@
+[sandbox-iframe-subresource.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/cookies/samesite/setcookie-lax.https.html.ini b/testing/web-platform/meta/cookies/samesite/setcookie-lax.https.html.ini
new file mode 100644
index 0000000000..70141b915e
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/setcookie-lax.https.html.ini
@@ -0,0 +1,9 @@
+[setcookie-lax.https.html]
+ prefs: [network.cookie.sameSite.laxByDefault:true, network.cookie.sameSite.noneRequiresSecure:true, network.cookie.cookieBehavior:4]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Cross-site window shouldn't be able to set `SameSite=Lax` or `SameSite=Strict` cookies.]
+ expected:
+ if (os == "linux") and debug and fission and not swgl: [PASS, FAIL]
+ if (os == "win") and debug and (processor == "x86_64") and not swgl: [PASS, FAIL]
+ if os == "mac": [PASS, FAIL]
diff --git a/testing/web-platform/meta/cookies/samesite/setcookie-navigation.https.html.ini b/testing/web-platform/meta/cookies/samesite/setcookie-navigation.https.html.ini
new file mode 100644
index 0000000000..f8b5fb1b57
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/setcookie-navigation.https.html.ini
@@ -0,0 +1,11 @@
+[setcookie-navigation.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Cross-site to same-site iframe navigation should only be able to set SameSite=None cookies.]
+ expected: FAIL
+
+ [Same-site to cross-site-site iframe navigation should only be able to set SameSite=None cookies.]
+ expected: FAIL
+
+ [Cross-site to cross-site iframe navigation should only be able to set SameSite=None cookies.]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/window-open-reload.https.html.ini b/testing/web-platform/meta/cookies/samesite/window-open-reload.https.html.ini
new file mode 100644
index 0000000000..33b79d2083
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/window-open-reload.https.html.ini
@@ -0,0 +1,5 @@
+[window-open-reload.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]
+ [Reloaded cross-site auxiliary navigations are strictly same-site]
+ expected: FAIL
diff --git a/testing/web-platform/meta/cookies/samesite/window-open.https.html.ini b/testing/web-platform/meta/cookies/samesite/window-open.https.html.ini
new file mode 100644
index 0000000000..eb490e9efd
--- /dev/null
+++ b/testing/web-platform/meta/cookies/samesite/window-open.https.html.ini
@@ -0,0 +1,3 @@
+[window-open.https.html]
+ expected:
+ if (os == "android") and fission: [OK, TIMEOUT]