Google Git
Sign in
chromium / chromium / src / 2b80fa7d815200d210189eb9eb123597f5e3925c
commit2b80fa7d815200d210189eb9eb123597f5e3925c[log] [tgz]
authorAntonio Sartori <antoniosartori@chromium.org>Mon Dec 14 10:11:46 2020
committerChromium LUCI CQ <chromium-scoped@luci-project-accounts.iam.gserviceaccount.com>Mon Dec 14 10:11:46 2020
tree6634df319d30424f1846dabe422e0b03753c146b
parenta9bc4573704c6718e5117502603144dc11187d90 [diff]
CSP: Fix WPT tests for CSP inheritance of dedicated/shared workers

Some Web Platform Test was expecting that dedicated workers served
with Content-Security-Policy: script-src 'none' would block
importScripts and setTimeout because of that CSP. However, according
to the spec, dedicated workers inherit their CSP from the creator
document and disregard the CSPs they are served with.

We rewrite those tests with two different cases. For dedicated
workers, we expect the inherited CSPs to be applied. For shared
workers, we expect the CSP delivered with the worker to be applied.

Bug: 1021462,1149272
Change-Id: I64469b2c9017b1d41a65abd4305d2440250b64d5
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2578837
Commit-Queue: Antonio Sartori <antoniosartori@chromium.org>
Reviewed-by: Mike West <mkwst@chromium.org>
Cr-Commit-Position: refs/heads/master@{#836564}
12 files changed
tree: 6634df319d30424f1846dabe422e0b03753c146b
  1. android_webview/
  2. apps/
  3. ash/
  4. base/
  5. build/
  6. build_overrides/
  7. buildtools/
  8. cc/
  9. chrome/
  10. chromecast/
  11. chromeos/
  12. cloud_print/
  13. codelabs/
  14. components/
  15. content/
  16. courgette/
  17. crypto/
  18. dbus/
  19. device/
  20. docs/
  21. extensions/
  22. fuchsia/
  23. gin/
  24. google_apis/
  25. google_update/
  26. gpu/
  27. headless/
  28. infra/
  29. ios/
  30. ipc/
  31. jingle/
  32. media/
  33. mojo/
  34. native_client_sdk/
  35. net/
  36. pdf/
  37. ppapi/
  38. printing/
  39. remoting/
  40. rlz/
  41. sandbox/
  42. services/
  43. skia/
  44. sql/
  45. storage/
  46. styleguide/
  47. testing/
  48. third_party/
  49. tools/
  50. ui/
  51. url/
  52. weblayer/
  53. .clang-format
  54. .clang-tidy
  55. .eslintrc.js
  56. .git-blame-ignore-revs
  57. .gitattributes
  58. .gitignore
  59. .gn
  60. .vpython
  61. .vpython3
  62. .yapfignore
  63. AUTHORS
  64. BUILD.gn
  65. CODE_OF_CONDUCT.md
  66. codereview.settings
  67. DEPS
  68. DIR_METADATA
  69. ENG_REVIEW_OWNERS
  70. LICENSE
  71. LICENSE.chromium_os
  72. OWNERS
  73. PRESUBMIT.py
  74. PRESUBMIT_test.py
  75. PRESUBMIT_test_mocks.py
  76. README.md
  77. WATCHLISTS
README.md

Logo Chromium

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

The project's web site is https://www.chromium.org.

Documentation in the source is rooted in docs/README.md.

Learn how to Get Around the Chromium Source Code Directory Structure .

For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.