Adding upstream version 115.7.0esr.upstream/115.7.0esrupstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

19 files changed, 788 insertions, 0 deletions

diff --git a/testing/web-platform/meta/worklets/__dir__.ini b/testing/web-platform/meta/worklets/__dir__.ini
new file mode 100644
index 0000000000..9ff0dbfc14
--- /dev/null
+++ b/testing/web-platform/meta/worklets/__dir__.ini
@@ -0,0 +1,2 @@
+prefs: [dom.audioworklet.enabled:true, dom.worklet.enabled:true]
+leak-threshold: [default:51200]
diff --git a/testing/web-platform/meta/worklets/animation-worklet-credentials.https.html.ini b/testing/web-platform/meta/worklets/animation-worklet-credentials.https.html.ini
new file mode 100644
index 0000000000..4a0798ee2a
--- /dev/null
+++ b/testing/web-platform/meta/worklets/animation-worklet-credentials.https.html.ini
@@ -0,0 +1,25 @@
+[animation-worklet-credentials.https.html]
+  [Importing a remote-origin script with the default WorkletOptions should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=omit should not send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=omit should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=same-origin should send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=same-origin should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=include should send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=include should send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with the default WorkletOptions should send the credentials]
+    expected: FAIL
+
diff --git a/testing/web-platform/meta/worklets/animation-worklet-csp.https.html.ini b/testing/web-platform/meta/worklets/animation-worklet-csp.https.html.ini
new file mode 100644
index 0000000000..fd7a0236ac
--- /dev/null
+++ b/testing/web-platform/meta/worklets/animation-worklet-csp.https.html.ini
@@ -0,0 +1,75 @@
+[animation-worklet-csp.https.html]
+  expected:
+    if (os == "mac") and not debug: ["OK", "TIMEOUT"]
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing an insecure-origin-redirected script should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [An insecure-origin-redirected worklet should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing an insecure-origin script should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [An insecure-origin worklet should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [A remote-origin worklet should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
diff --git a/testing/web-platform/meta/worklets/animation-worklet-import.https.html.ini b/testing/web-platform/meta/worklets/animation-worklet-import.https.html.ini
new file mode 100644
index 0000000000..b1a66aa175
--- /dev/null
+++ b/testing/web-platform/meta/worklets/animation-worklet-import.https.html.ini
@@ -0,0 +1,97 @@
+[animation-worklet-import.html]
+  [Importing a script resolves the given promise.]
+    expected: FAIL
+
+  [Importing scripts resolves all the given promises.]
+    expected: FAIL
+
+  [Importing nested scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing cyclic scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing a script which throws should still resolve the given promise.]
+    expected: FAIL
+
+  [Importing a non-existent script rejects the given promise with an AbortError.]
+    expected: FAIL
+
+  [Importing an invalid URL should reject the given promise with a SyntaxError.]
+    expected: FAIL
+
+  [Importing a blob URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing a file:// URL should reject the given promise.]
+    expected: FAIL
+
+  [Importing a data URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing about:blank should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross origin resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross origin resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
+
+
+[animation-worklet-import.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a script resolves the given promise.]
+    expected: FAIL
+
+  [Importing scripts resolves all the given promises.]
+    expected: FAIL
+
+  [Importing nested scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing cyclic scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing a script which throws should still resolve the given promise.]
+    expected: FAIL
+
+  [Importing a non-existent script rejects the given promise with an AbortError.]
+    expected: FAIL
+
+  [Importing an invalid URL should reject the given promise with a SyntaxError.]
+    expected: FAIL
+
+  [Importing a blob URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing a file:// URL should reject the given promise.]
+    expected: FAIL
+
+  [Importing a data URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing about:blank should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross origin resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross origin resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
+
+  [Importing a script that has a syntax error should reject the given promise.]
+    expected: FAIL
+
+  [Importing a nested script that has a syntax error should reject the given promise.]
+    expected: FAIL
+
+  [Importing a script that imports an invalid identifier should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross-origin-redirected resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross-origin-redirected resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/animation-worklet-referrer.https.html.ini b/testing/web-platform/meta/worklets/animation-worklet-referrer.https.html.ini
new file mode 100644
index 0000000000..f63e4d1ad2
--- /dev/null
+++ b/testing/web-platform/meta/worklets/animation-worklet-referrer.https.html.ini
@@ -0,0 +1,57 @@
+[animation-worklet-referrer.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+  [Importing a same-origin script from a page that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a page that has "origin" referrer policy should send only an origin as referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "origin" referrer policy should send only an origin as referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a page that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/animation-worklet-service-worker-interception.https.html.ini b/testing/web-platform/meta/worklets/animation-worklet-service-worker-interception.https.html.ini
new file mode 100644
index 0000000000..9b2fe2a359
--- /dev/null
+++ b/testing/web-platform/meta/worklets/animation-worklet-service-worker-interception.https.html.ini
@@ -0,0 +1,9 @@
+[animation-worklet-service-worker-interception.https.html]
+  [addModule() on a controlled document should be intercepted by a service worker.]
+    expected: FAIL
+
+  [addModule() on a non-controlled document should not be intercepted by a service worker even if the script is under the service worker scope.]
+    expected: FAIL
+
+  [Static import should be intercepted by a service worker.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/audio-worklet-credentials.https.html.ini b/testing/web-platform/meta/worklets/audio-worklet-credentials.https.html.ini
new file mode 100644
index 0000000000..52e87e70bc
--- /dev/null
+++ b/testing/web-platform/meta/worklets/audio-worklet-credentials.https.html.ini
@@ -0,0 +1,3 @@
+[audio-worklet-credentials.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
diff --git a/testing/web-platform/meta/worklets/audio-worklet-referrer.https.html.ini b/testing/web-platform/meta/worklets/audio-worklet-referrer.https.html.ini
new file mode 100644
index 0000000000..3cc4343772
--- /dev/null
+++ b/testing/web-platform/meta/worklets/audio-worklet-referrer.https.html.ini
@@ -0,0 +1,19 @@
+[audio-worklet-referrer.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+  [Importing a remote-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1808189
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1808189
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1808189
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1808189
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/idlharness.https.any.js.ini b/testing/web-platform/meta/worklets/idlharness.https.any.js.ini
new file mode 100644
index 0000000000..6437824c16
--- /dev/null
+++ b/testing/web-platform/meta/worklets/idlharness.https.any.js.ini
@@ -0,0 +1,12 @@
+[idlharness.https.any.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [idl_test setup]
+    expected: FAIL
+
+
+[idlharness.https.any.worker.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [idl_test setup]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/layout-worklet-credentials.https.html.ini b/testing/web-platform/meta/worklets/layout-worklet-credentials.https.html.ini
new file mode 100644
index 0000000000..7d3b53b183
--- /dev/null
+++ b/testing/web-platform/meta/worklets/layout-worklet-credentials.https.html.ini
@@ -0,0 +1,26 @@
+[layout-worklet-credentials.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a remote-origin script with the default WorkletOptions should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=omit should not send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=omit should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=same-origin should send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=same-origin should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=include should send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=include should send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with the default WorkletOptions should send the credentials]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/layout-worklet-csp.https.html.ini b/testing/web-platform/meta/worklets/layout-worklet-csp.https.html.ini
new file mode 100644
index 0000000000..6b3e46e51a
--- /dev/null
+++ b/testing/web-platform/meta/worklets/layout-worklet-csp.https.html.ini
@@ -0,0 +1,75 @@
+[layout-worklet-csp.https.html]
+  expected:
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing an insecure-origin-redirected script should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [An insecure-origin-redirected worklet should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing an insecure-origin script should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [An insecure-origin worklet should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [A remote-origin worklet should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/layout-worklet-import.https.html.ini b/testing/web-platform/meta/worklets/layout-worklet-import.https.html.ini
new file mode 100644
index 0000000000..abadf32042
--- /dev/null
+++ b/testing/web-platform/meta/worklets/layout-worklet-import.https.html.ini
@@ -0,0 +1,56 @@
+[layout-worklet-import.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a script resolves the given promise.]
+    expected: FAIL
+
+  [Importing scripts resolves all the given promises.]
+    expected: FAIL
+
+  [Importing nested scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing cyclic scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing a script which throws should still resolve the given promise.]
+    expected: FAIL
+
+  [Importing a non-existent script rejects the given promise with an AbortError.]
+    expected: FAIL
+
+  [Importing an invalid URL should reject the given promise with a SyntaxError.]
+    expected: FAIL
+
+  [Importing a blob URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing a file:// URL should reject the given promise.]
+    expected: FAIL
+
+  [Importing a data URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing about:blank should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross origin resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross origin resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
+
+  [Importing a script that has a syntax error should reject the given promise.]
+    expected: FAIL
+
+  [Importing a nested script that has a syntax error should reject the given promise.]
+    expected: FAIL
+
+  [Importing a script that imports an invalid identifier should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross-origin-redirected resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross-origin-redirected resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/layout-worklet-referrer.https.html.ini b/testing/web-platform/meta/worklets/layout-worklet-referrer.https.html.ini
new file mode 100644
index 0000000000..08085ce329
--- /dev/null
+++ b/testing/web-platform/meta/worklets/layout-worklet-referrer.https.html.ini
@@ -0,0 +1,57 @@
+[layout-worklet-referrer.https.html]
+  expected:
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a same-origin script from a page that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a page that has "origin" referrer policy should send only an origin as referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "origin" referrer policy should send only an origin as referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a page that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/layout-worklet-service-worker-interception.https.html.ini b/testing/web-platform/meta/worklets/layout-worklet-service-worker-interception.https.html.ini
new file mode 100644
index 0000000000..50df846dcc
--- /dev/null
+++ b/testing/web-platform/meta/worklets/layout-worklet-service-worker-interception.https.html.ini
@@ -0,0 +1,9 @@
+[layout-worklet-service-worker-interception.https.html]
+  [addModule() on a controlled document should be intercepted by a service worker.]
+    expected: FAIL
+
+  [addModule() on a non-controlled document should not be intercepted by a service worker even if the script is under the service worker scope.]
+    expected: FAIL
+
+  [Static import should be intercepted by a service worker.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/paint-worklet-credentials.https.html.ini b/testing/web-platform/meta/worklets/paint-worklet-credentials.https.html.ini
new file mode 100644
index 0000000000..90c7e382a4
--- /dev/null
+++ b/testing/web-platform/meta/worklets/paint-worklet-credentials.https.html.ini
@@ -0,0 +1,26 @@
+[paint-worklet-credentials.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a remote-origin script with the default WorkletOptions should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=omit should not send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=omit should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=same-origin should send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=same-origin should not send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with credentials=include should send the credentials]
+    expected: FAIL
+
+  [Importing a remote-origin script with credentials=include should send the credentials]
+    expected: FAIL
+
+  [Importing a same-origin script with the default WorkletOptions should send the credentials]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/paint-worklet-csp.https.html.ini b/testing/web-platform/meta/worklets/paint-worklet-csp.https.html.ini
new file mode 100644
index 0000000000..37bdf838c4
--- /dev/null
+++ b/testing/web-platform/meta/worklets/paint-worklet-csp.https.html.ini
@@ -0,0 +1,78 @@
+[paint-worklet-csp.https.html]
+  expected:
+    if (os == "linux") and not fission and not debug: [OK, TIMEOUT]
+    if (os == "mac") and not debug: [OK, TIMEOUT]
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing an insecure-origin-redirected script should be blocked because of mixed contents.]
+    expected:
+      if (os == "linux") and not fission and not debug: [FAIL, TIMEOUT]
+      FAIL
+
+  [An insecure-origin-redirected worklet should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing an insecure-origin script should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [An insecure-origin worklet should be blocked because of mixed contents.]
+    expected: FAIL
+
+  [A remote-origin worklet should be blocked by the script-src 'self' directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src * directive allows it.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked by the worker-src directive because worklets obey the script-src directive.]
+    expected: FAIL
+
+  [A remote-origin worklet should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A remote-origin-redirected worklet should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A same-origin worklet importing a remote-origin-redirected script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
+
+  [A remote-origin worklet importing a remote-origin script should not be blocked because the script-src directive specifying the origin allows it.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/paint-worklet-import.https.html.ini b/testing/web-platform/meta/worklets/paint-worklet-import.https.html.ini
new file mode 100644
index 0000000000..235a268ad2
--- /dev/null
+++ b/testing/web-platform/meta/worklets/paint-worklet-import.https.html.ini
@@ -0,0 +1,97 @@
+[paint-worklet-import.html]
+  [Importing a script resolves the given promise.]
+    expected: FAIL
+
+  [Importing scripts resolves all the given promises.]
+    expected: FAIL
+
+  [Importing nested scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing cyclic scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing a script which throws should still resolve the given promise.]
+    expected: FAIL
+
+  [Importing a non-existent script rejects the given promise with an AbortError.]
+    expected: FAIL
+
+  [Importing an invalid URL should reject the given promise with a SyntaxError.]
+    expected: FAIL
+
+  [Importing a blob URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing a file:// URL should reject the given promise.]
+    expected: FAIL
+
+  [Importing a data URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing about:blank should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross origin resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross origin resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
+
+
+[paint-worklet-import.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a script resolves the given promise.]
+    expected: FAIL
+
+  [Importing scripts resolves all the given promises.]
+    expected: FAIL
+
+  [Importing nested scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing cyclic scripts resolves the given promise]
+    expected: FAIL
+
+  [Importing a script which throws should still resolve the given promise.]
+    expected: FAIL
+
+  [Importing a non-existent script rejects the given promise with an AbortError.]
+    expected: FAIL
+
+  [Importing an invalid URL should reject the given promise with a SyntaxError.]
+    expected: FAIL
+
+  [Importing a blob URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing a file:// URL should reject the given promise.]
+    expected: FAIL
+
+  [Importing a data URL should resolve the given promise.]
+    expected: FAIL
+
+  [Importing about:blank should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross origin resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross origin resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
+
+  [Importing a script that has a syntax error should reject the given promise.]
+    expected: FAIL
+
+  [Importing a nested script that has a syntax error should reject the given promise.]
+    expected: FAIL
+
+  [Importing a script that imports an invalid identifier should reject the given promise.]
+    expected: FAIL
+
+  [Importing a cross-origin-redirected resource with the Access-Control-Allow-Origin header should resolve the given promise]
+    expected: FAIL
+
+  [Importing a cross-origin-redirected resource without the Access-Control-Allow-Origin header should reject the given promise]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/paint-worklet-referrer.https.html.ini b/testing/web-platform/meta/worklets/paint-worklet-referrer.https.html.ini
new file mode 100644
index 0000000000..98f21127ea
--- /dev/null
+++ b/testing/web-platform/meta/worklets/paint-worklet-referrer.https.html.ini
@@ -0,0 +1,56 @@
+[paint-worklet-referrer.https.html]
+  expected:
+    if (os == "android") and fission: [OK, TIMEOUT]
+  [Importing a same-origin script from a page that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a page that has "origin" referrer policy should send only an origin as referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "origin" referrer policy should send only an origin as referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a page that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a page that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a same-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a same-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "origin" referrer policy should send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "no-referrer" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a same-origin script from a remote-origin worklet script that has "same-origin" referrer policy should not send referrer.]
+    expected: FAIL
+
+  [Importing a remote-origin script from a remote-origin worklet script that has "same-origin" referrer policy should send referrer.]
+    expected: FAIL
diff --git a/testing/web-platform/meta/worklets/paint-worklet-service-worker-interception.https.html.ini b/testing/web-platform/meta/worklets/paint-worklet-service-worker-interception.https.html.ini
new file mode 100644
index 0000000000..183c94366b
--- /dev/null
+++ b/testing/web-platform/meta/worklets/paint-worklet-service-worker-interception.https.html.ini
@@ -0,0 +1,9 @@
+[paint-worklet-service-worker-interception.https.html]
+  [addModule() on a controlled document should be intercepted by a service worker.]
+    expected: FAIL
+
+  [addModule() on a non-controlled document should not be intercepted by a service worker even if the script is under the service worker scope.]
+    expected: FAIL
+
+  [Static import should be intercepted by a service worker.]
+    expected: FAIL