Revert "Origin isolation: a new strategy for window.originIsolationRestricted"

This reverts commit 7ac0b9ed68d57270b680e39b9e21e1ede1b8c774.

Reason for revert: Possible cause of flaky navigation/error-related test failures on https://ci.chromium.org/p/chromium/builders/ci/Linux%20Tests and https://ci.chromium.org/p/chromium/builders/ci/Mac10.10%20Tests, see e.g. https://logs.chromium.org/logs/chromium/buildbucket/cr-buildbucket.appspot.com/8873201719841161216/+/steps/content_browsertests_on__none__GPU_on_Mac_on_Mac-10.10/0/logs/Flaky_failure:_All__x2f_NavigationControllerBrowserTest.ErrorPageReplacement__x2f_0__status_CRASH_SUCCESS_/0 and https://logs.chromium.org/logs/chromium/buildbucket/cr-buildbucket.appspot.com/8873205275892139456/+/steps/storage_service_unsandboxed_content_browsertests/0/logs/Deterministic_failure:_All__x2f_SitePerProcessIgnoreCertErrorsBrowserTest.SubresourceWithCertificateErrors__x2f_0__status_FAILURE_/0.

If this revert does not help, I will reland.
Original change's description:
> Origin isolation: a new strategy for window.originIsolationRestricted
>
> In https://chromium-review.googlesource.com/c/chromium/src/+/2243994 I
> introduced an implementation for window.originIsolationRestricted which
> pipes the isolation state from NavigationRequest to the navigated-to
> LocalDOMWindow. However, this does not work for the case of the initial
> about:blank, where no navigation is performed. Furthermore, it does not
> match the spec, where the Window property just reflects an agent
> cluster-wide property.
>
> This CL introduces an alternate approach, more similar to what is done
> for self.crossOriginIsolated in
> https://chromium-review.googlesource.com/c/chromium/src/+/2247463, which
> is another agent cluster-wide value. The origin isolation state is
> stored in the renderer-side Agent class. Then the LocalDOMWindow getter
> can just pick it up from the surrounding agent, as in the spec. Note
> that unlike the implementation for self.crossOriginIsolated, the value
> is per-Agent instead of static (process-wide).
>
> Currently the value is set several times per agent (roughly once on
> every navigation). This is redundant, but we don't yet have a good place
> to set it once (i.e., we don't have a browser-side "time of agent
> creation"). If that gets fixed, we can likely stop piping the value
> through navigation params. See
> https://docs.google.com/document/d/1MTnmyWAoAIKDH4yWaRthIUdi05MsjlML8gctvKP7-h8/edit
> for discussions around fixing that.
>
> This fixes the issue with about:blank iframes embedded in origin-isolated
> pages reporting false, because the agent's origin-isolated boolean was
> previously set to true by the containing frame.
>
> This does not yet fix the issue with data: URLs reporting false, tested in
> external/wpt/origin-isolation/getter-special-cases/data-url.https.html.
> However, that will be doable as a followup, by changing the
> navigation-time computation to pass true for them instead of false.
> (Currently it passes false because data: URLs don't get their own
> process, but it should pass true because they _do_ get their own agent
> cluster.)
>
> Bug: 1095653
> Change-Id: I8dfa8fc4a4766efc0611d43a255673662c422776
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2300237
> Commit-Queue: Domenic Denicola <domenic@chromium.org>
> Reviewed-by: Charlie Reis <creis@chromium.org>
> Reviewed-by: Daniel Cheng <dcheng@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#793799}

TBR=dcheng@chromium.org,creis@chromium.org,alexmos@chromium.org,domenic@chromium.org,wjmaclean@chromium.org

Change-Id: Ia9174b00ac61178cff9bf24801182d23779399c5
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1095653
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2333651
Reviewed-by: Peter Kasting <pkasting@chromium.org>
Commit-Queue: Peter Kasting <pkasting@chromium.org>
Cr-Commit-Position: refs/heads/master@{#793885}
1 file changed
tree: c06ceb45212254eb879bc07a8739bda2f6733f2f
  1. .github/
  2. .well-known/
  3. accelerometer/
  4. accname/
  5. acid/
  6. ambient-light/
  7. animation-worklet/
  8. annotation-model/
  9. annotation-protocol/
  10. annotation-vocab/
  11. apng/
  12. appmanifest/
  13. audio-output/
  14. background-fetch/
  15. BackgroundSync/
  16. badging/
  17. battery-status/
  18. beacon/
  19. bluetooth/
  20. clear-site-data/
  21. client-hints/
  22. clipboard-apis/
  23. common/
  24. compat/
  25. compression/
  26. conformance-checkers/
  27. console/
  28. contacts/
  29. content-dpr/
  30. content-index/
  31. content-security-policy/
  32. contenteditable/
  33. cookie-store/
  34. cookies/
  35. core-aam/
  36. cors/
  37. credential-management/
  38. css/
  39. custom-elements/
  40. custom-state-pseudo-class/
  41. delegated-ink/
  42. deprecation-reporting/
  43. device-memory/
  44. docs/
  45. document-policy/
  46. dom/
  47. domparsing/
  48. domxpath/
  49. dpub-aam/
  50. dpub-aria/
  51. editing/
  52. element-timing/
  53. encoding/
  54. encoding-detection/
  55. encrypted-media/
  56. entries-api/
  57. event-timing/
  58. eventsource/
  59. feature-policy/
  60. fetch/
  61. FileAPI/
  62. focus/
  63. fonts/
  64. forced-colors-mode/
  65. fullscreen/
  66. gamepad/
  67. generic-sensor/
  68. geolocation-API/
  69. geolocation-sensor/
  70. graphics-aam/
  71. gyroscope/
  72. hr-time/
  73. html/
  74. html-longdesc/
  75. html-media-capture/
  76. idle-detection/
  77. imagebitmap-renderingcontext/
  78. images/
  79. import-maps/
  80. IndexedDB/
  81. inert/
  82. infrastructure/
  83. input-device-capabilities/
  84. input-events/
  85. installedapp/
  86. interfaces/
  87. intersection-observer/
  88. intervention-reporting/
  89. is-input-pending/
  90. js/
  91. js-self-profiling/
  92. keyboard-lock/
  93. keyboard-map/
  94. largest-contentful-paint/
  95. layout-instability/
  96. lifecycle/
  97. loading/
  98. longtask-timing/
  99. magnetometer/
  100. mathml/
  101. measure-memory/
  102. media/
  103. media-capabilities/
  104. media-feeds/
  105. media-playback-quality/
  106. media-source/
  107. mediacapture-depth/
  108. mediacapture-fromelement/
  109. mediacapture-image/
  110. mediacapture-record/
  111. mediacapture-streams/
  112. mediasession/
  113. mimesniff/
  114. mixed-content/
  115. mst-content-hint/
  116. native-file-system/
  117. native-io/
  118. navigation-timing/
  119. netinfo/
  120. network-error-logging/
  121. notifications/
  122. old-tests/
  123. orientation-event/
  124. orientation-sensor/
  125. origin-isolation/
  126. origin-policy/
  127. page-lifecycle/
  128. page-visibility/
  129. paint-timing/
  130. payment-handler/
  131. payment-method-basic-card/
  132. payment-method-id/
  133. payment-request/
  134. performance-timeline/
  135. periodic-background-sync/
  136. permissions/
  137. permissions-request/
  138. permissions-revoke/
  139. picture-in-picture/
  140. pointerevents/
  141. pointerlock/
  142. portals/
  143. preload/
  144. presentation-api/
  145. priority-hints/
  146. proximity/
  147. push-api/
  148. quirks/
  149. referrer-policy/
  150. remote-playback/
  151. reporting/
  152. requestidlecallback/
  153. resize-observer/
  154. resource-timing/
  155. resources/
  156. savedata/
  157. screen-capture/
  158. screen-orientation/
  159. screen-wake-lock/
  160. screen_enumeration/
  161. scroll-animations/
  162. scroll-to-text-fragment/
  163. secure-contexts/
  164. selection/
  165. serial/
  166. server-timing/
  167. service-workers/
  168. shadow-dom/
  169. shape-detection/
  170. signed-exchange/
  171. speech-api/
  172. storage/
  173. storage-access-api/
  174. streams/
  175. subresource-integrity/
  176. svg/
  177. svg-aam/
  178. timing-entrytypes-registry/
  179. tools/
  180. touch-events/
  181. trust-tokens/
  182. trusted-types/
  183. ua-client-hints/
  184. uievents/
  185. upgrade-insecure-requests/
  186. url/
  187. user-timing/
  188. vibration/
  189. video-rvfc/
  190. visual-viewport/
  191. wai-aria/
  192. wasm/
  193. web-animations/
  194. web-bundle/
  195. web-locks/
  196. web-nfc/
  197. web-otp/
  198. web-share/
  199. webaudio/
  200. webauthn/
  201. WebCryptoAPI/
  202. webdriver/
  203. webgl/
  204. webgpu/
  205. webhid/
  206. WebIDL/
  207. webmessaging/
  208. webmidi/
  209. webrtc/
  210. webrtc-extensions/
  211. webrtc-identity/
  212. webrtc-insertable-streams/
  213. webrtc-priority/
  214. webrtc-quic/
  215. webrtc-stats/
  216. webrtc-svc/
  217. websockets/
  218. webstorage/
  219. webtransport/
  220. webusb/
  221. webvr/
  222. webvtt/
  223. webxr/
  224. window-segments/
  225. workers/
  226. worklets/
  227. x-frame-options/
  228. xhr/
  229. xslt/
  230. .azure-pipelines.yml
  231. .codecov.yml
  232. .gitattributes
  233. .gitignore
  234. .mailmap
  235. .pyup.yml
  236. .taskcluster.yml
  237. CODE_OF_CONDUCT.md
  238. CODEOWNERS
  239. CONTRIBUTING.md
  240. LICENSE.md
  241. lint.ignore
  242. README.md
  243. testharness_runner.html
  244. update-built-tests.sh
  245. wpt
  246. wpt.py
README.md

The web-platform-tests Project

Taskcluster CI Status documentation manifest Python 3

The web-platform-tests Project is a cross-browser test suite for the Web-platform stack. Writing tests in a way that allows them to be run in all browsers gives browser projects confidence that they are shipping software that is compatible with other implementations, and that later implementations will be compatible with their implementations. This in turn gives Web authors/developers confidence that they can actually rely on the Web platform to deliver on the promise of working across browsers and devices without needing extra layers of abstraction to paper over the gaps left by specification editors and implementors.

The most important sources of information and activity are:

  • github.com/web-platform-tests/wpt: the canonical location of the project's source code revision history and the discussion forum for changes to the code
  • web-platform-tests.org: the documentation website; details how to set up the project, how to write tests, how to give and receive peer review, how to serve as an administrator, and more
  • wpt.live: a public deployment of the test suite, allowing anyone to run the tests by visiting from an Internet-enabled browser of their choice
  • wpt.fyi: an archive of test results collected from an array of web browsers on a regular basis
  • Real-time chat room: the IRC chat room named #testing on irc.w3.org; includes participants located around the world, but busiest during the European working day; all discussion is archived here
  • Mailing list: a public and low-traffic discussion list
  • RFCs: a repo for requesting comments on substantial changes that would impact other stakeholders or users; people who work on WPT infra are encouraged to watch the repo.

If you'd like clarification about anything, don't hesitate to ask in the chat room or on the mailing list.

Setting Up the Repo

Clone or otherwise get https://github.com/web-platform-tests/wpt.

Note: because of the frequent creation and deletion of branches in this repo, it is recommended to “prune” stale branches when fetching updates, i.e. use git pull --prune (or git fetch -p && git merge).

Running the Tests

See the documentation website and in particular the system setup for running tests locally.

Command Line Tools

The wpt command provides a frontend to a variety of tools for working with and running web-platform-tests. Some of the most useful commands are:

  • wpt serve - For starting the wpt http server
  • wpt run - For running tests in a browser
  • wpt lint - For running the lint against all tests
  • wpt manifest - For updating or generating a MANIFEST.json test manifest
  • wpt install - For installing the latest release of a browser or webdriver server on the local machine.
  • wpt serve-wave - For starting the wpt http server and the WAVE test runner. For more details on how to use the WAVE test runner see the documentation.

Windows Notes

On Windows wpt commands must be prefixed with python or the path to the python binary (if python is not in your %PATH%).

python wpt [command]

Alternatively, you may also use Bash on Ubuntu on Windows in the Windows 10 Anniversary Update build, then access your windows partition from there to launch wpt commands.

Please make sure git and your text editor do not automatically convert line endings, as it will cause lint errors. For git, please set git config core.autocrlf false in your working tree.

Publication

The master branch is automatically synced to http://w3c-test.org/.

Pull requests are automatically mirrored except those that modify sensitive resources (such as .py). The latter require someone with merge access to comment with “LGTM” or “w3c-test:mirror” to indicate the pull request has been checked.

Branches

In the vast majority of cases the only upstream branch that you should need to care about is master. If you see other branches in the repository, you can generally safely ignore them.

Contributing

Save the Web, Write Some Tests!

Absolutely everyone is welcome to contribute to test development. No test is too small or too simple, especially if it corresponds to something for which you've noted an interoperability bug in a browser.

The way to contribute is just as usual:

  • Fork this repository (and make sure you're still relatively in sync with it if you forked a while ago).
  • Create a branch for your changes: git checkout -b topic.
  • Make your changes.
  • Run ./wpt lint as described above.
  • Commit locally and push that to your repo.
  • Create a pull request based on the above.

Issues with web-platform-tests

If you spot an issue with a test and are not comfortable providing a pull request per above to fix it, please file a new issue. Thank you!