Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Strip "function anonymous" prefixes from Function samples #539

Merged
merged 1 commit into from
Sep 10, 2024

Conversation

lukewarlow
Copy link
Member

@lukewarlow lukewarlow commented Jul 29, 2024

@lukewarlow lukewarlow marked this pull request as ready for review July 29, 2024 09:41
lukewarlow added a commit to lukewarlow/WebKit that referenced this pull request Jul 29, 2024
https://bugs.webkit.org/show_bug.cgi?id=277258

Reviewed by NOBODY (OOPS!).

This strips "function anonymous" and similar prefixes for the function variants from the
CSP violation report sample produced by trusted types.

This aligns with Chromium's existing behaviour and the latest spec consensus.

Spec PR: w3c/trusted-types#539

* LayoutTests/imported/w3c/web-platform-tests/content-security-policy/reporting/report-clips-sample.https-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/content-security-policy/reporting/report-clips-sample.https.html:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-csp-tt-default-policy-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-csp-tt-default-policy-mutate-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-csp-tt-default-policy-mutate.html:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-csp-tt-default-policy.html:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-csp-tt-no-default-policy-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-csp-tt-no-default-policy.html:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-function-constructor-expected.txt:
* LayoutTests/imported/w3c/web-platform-tests/trusted-types/eval-function-constructor.html:
* Source/WebCore/page/csp/ContentSecurityPolicy.cpp:
(WebCore::ContentSecurityPolicy::allowMissingTrustedTypesForSinkGroup const):
@lukewarlow lukewarlow merged commit 3b74745 into w3c:main Sep 10, 2024
3 checks passed
github-actions bot added a commit that referenced this pull request Sep 10, 2024
SHA: 3b74745
Reason: push, by lukewarlow

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
lukewarlow added a commit to lukewarlow/WebKit that referenced this pull request Dec 16, 2024
https://bugs.webkit.org/show_bug.cgi?id=277258

Reviewed by NOBODY (OOPS!).

This strips "function anonymous" and similar prefixes for the function variants from the
CSP violation report sample produced by trusted types.

This aligns with Chromium's existing behaviour and the latest spec consensus.

Spec PR: w3c/trusted-types#539

* LayoutTests/imported/w3c/web-platform-tests/content-security-policy/reporting/report-clips-sample.https-expected.txt:
* Source/WebCore/page/csp/ContentSecurityPolicy.cpp:
(WebCore::ContentSecurityPolicy::allowMissingTrustedTypesForSinkGroup const):
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CSP sample for eval and Function
1 participant