Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

frame-ancestor reporting test issue due to download triggered #45249

Open
JannisBush opened this issue Mar 21, 2024 · 0 comments
Open

frame-ancestor reporting test issue due to download triggered #45249

JannisBush opened this issue Mar 21, 2024 · 0 comments

Comments

@JannisBush
Copy link
Contributor

The two CSP frame-ancestor reporting tests fail in Firefox as they trigger a download there and the about:blank iframe after the download is not blocked. The other browsers do not trigger a download.

I don't know whether the response should trigger a download or not and if a frame-ancestor on the downloaded iframe should have any effect.
However, the test should test for the normal reporting behavior and not the download-edge case behavior. Simply, adding a content-type: text/html header to the response fixes the incorrect results in Firefox while not changing the results in the other browsers.

Tests: https://wpt.fyi/results/content-security-policy/reporting?label=master&label=experimental&aligned&q=frame-ancestors
WPT.fyi: https://wpt.live/content-security-policy/reporting/report-frame-ancestors.sub.html (triggers download)
Helper function that should be changed (add content-type):

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant