Skip to content

Add Last-Event-ID to CORS-safelisted headers #49257

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
rexxars wants to merge 5 commits into
base: master
Choose a base branch
from

Add tests for `Last-Event-ID` in XMLHttpRequest CORS

b4e66b1
Select commit
Loading
Failed to load commit list.
Open

Add Last-Event-ID to CORS-safelisted headers #49257

Add tests for `Last-Event-ID` in XMLHttpRequest CORS
b4e66b1
Select commit
Loading
Failed to load commit list.
This check has been archived and is scheduled for deletion. Learn more about checks retention
Community-TC Integration / wpt-chrome-dev-results succeeded Mar 21, 2025 in 3m 58s

Community-TC (pull_request)

Collect results for all tests affected by a pull request in chrome.

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2025-03-21T06:03:11.285Z
Resolved: 2025-03-21T06:05:58.809Z
Task Execution Time: 2 minutes, 47 seconds, 524 milliseconds
Task Status: completed
Reason Resolved: completed
RunId: 0

Artifacts

- public/logs/live_backing.log
- public/logs/live.log
- public/results/checkrun.md
- public/results/wpt_report.json.gz
- public/results/wpt_screenshot.txt.gz

WPT Command: python3 ./wpt run --channel=dev --no-fail-on-unexpected --log-wptreport=../artifacts/wpt_report.json --log-wptscreenshot=../artifacts/wpt_screenshot.txt --affected base_head --log-mach-level=info --log-mach=- -y --no-pause --no-restart-on-unexpected --install-fonts --verify-log-full --no-headless --enable-swiftshader --install-browser --install-webdriver chrome

[taskcluster 2025-03-21 06:03:11.417Z] Task ID: eCkRIQdXRaa-7tavOTd9tg
[taskcluster 2025-03-21 06:03:11.417Z] Worker ID: 6032457917405380109
[taskcluster 2025-03-21 06:03:11.417Z] Worker Group: us-east1-d
[taskcluster 2025-03-21 06:03:11.417Z] Worker Node Type: projects/757942385826/machineTypes/n2-standard-4
[taskcluster 2025-03-21 06:03:11.417Z] Worker Pool: proj-wpt/ci
[taskcluster 2025-03-21 06:03:11.417Z] Worker Version: 46.1.0
[taskcluster 2025-03-21 06:03:11.417Z] Public IP: 34.138.113.169
[taskcluster 2025-03-21 06:03:11.417Z] Hostname: proj-wpt-ci-ksqnwwdsqbqgmev0rqwvlq

ff2b96c8f8ff - Started downloading
ff2b96c8f8ff - Downloaded in 0.011 seconds
560c024910be - Started downloading
72ebe8ecf66d - Started downloading
430011f338a2 - Started downloading
430011f338a2 - Downloaded in 0.042 seconds
560c024910be - Downloaded in 0.185 seconds
79df10d18997 - Started downloading
4f4fb700ef54 - Started downloading
4f4fb700ef54 - Downloaded in 0 seconds
7e274023cae9 - Started downloading

...(618 lines hidden)...

    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35

 0:32.16 TEST_START: /eventsource/eventsource-cross-origin-preflight.window.html
 0:32.52 TEST_END: Test OK. Subtests passed 1/3. Unexpected 2
FAIL EventSource: cross-origin preflight - unsafe `last-event-id` (preflight because too long) - assert_unreached: expected preflight, did not get one Reached unreachable code
    at Test.<anonymous> (http://web-platform.test:8000/eventsource/eventsource-cross-origin-preflight.window.js:41:9)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at EventSource.<anonymous> (http://web-platform.test:8000/resources/testharness.js:2717:32)
FAIL EventSource: cross-origin preflight - unsafe `last-event-id` (preflight because unsafe characters) - assert_unreached: expected preflight, did not get one Reached unreachable code
    at Test.<anonymous> (http://web-platform.test:8000/eventsource/eventsource-cross-origin-preflight.window.js:41:9)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at EventSource.<anonymous> (http://web-platform.test:8000/resources/testharness.js:2717:32)

 0:32.52 TEST_START: /fetch/api/cors/cors-no-preflight.any.html
 0:33.38 pid:2097 [2114:2114:0321/060546.774065:INFO:CONSOLE:0] "Access to fetch at 'http://www1.web-platform.test:8000/fetch/api/resources/preflight.py?token=e604c55f-520a-456c-9c43-1fe0ae032eeb&max_age=0' from origin 'http://web-platform.test:8000' has been blocked by CORS policy: Request header field last-event-id is not allowed by Access-Control-Allow-Headers in preflight response.", source: http://web-platform.test:8000/fetch/api/cors/cors-no-preflight.any.html (0)
 0:33.43 pid:2097 [2114:2114:0321/060546.822268:INFO:CONSOLE:0] "Access to fetch at 'http://www1.web-platform.test:8000/fetch/api/resources/preflight.py?token=9cf9a5b7-d052-4f12-953c-13b05ed5ec1e&max_age=0' from origin 'http://web-platform.test:8000' has been blocked by CORS policy: Request header field last-event-id is not allowed by Access-Control-Allow-Headers in preflight response.", source: http://web-platform.test:8000/fetch/api/cors/cors-no-preflight.any.html (0)
 0:33.45 TEST_END: Test OK. Subtests passed 15/17. Unexpected 2
FAIL Cross domain [GET] [Last-Event-ID: evt-14] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
FAIL Cross domain [GET] [Last-Event-ID: EvT-15] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35

 0:33.45 TEST_START: /fetch/api/cors/cors-no-preflight.any.worker.html
 0:34.32 pid:2097 [2114:2114:0321/060547.713715:INFO:CONSOLE:0] "Access to fetch at 'http://www1.web-platform.test:8000/fetch/api/resources/preflight.py?token=4cb7f494-baaa-40cb-b149-7b81fbf1e528&max_age=0' from origin 'http://web-platform.test:8000' has been blocked by CORS policy: Request header field last-event-id is not allowed by Access-Control-Allow-Headers in preflight response.", source: http://web-platform.test:8000/fetch/api/cors/cors-no-preflight.any.worker.html (0)
 0:34.37 pid:2097 [2114:2114:0321/060547.762008:INFO:CONSOLE:0] "Access to fetch at 'http://www1.web-platform.test:8000/fetch/api/resources/preflight.py?token=c46f7280-8b23-45ff-bd38-90ee0e7eceae&max_age=0' from origin 'http://web-platform.test:8000' has been blocked by CORS policy: Request header field last-event-id is not allowed by Access-Control-Allow-Headers in preflight response.", source: http://web-platform.test:8000/fetch/api/cors/cors-no-preflight.any.worker.html (0)
 0:34.43 TEST_END: Test OK. Subtests passed 15/17. Unexpected 2
FAIL Cross domain [GET] [Last-Event-ID: evt-14] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
FAIL Cross domain [GET] [Last-Event-ID: EvT-15] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35

 0:34.43 TEST_START: /fetch/api/cors/cors-preflight-not-cors-safelisted.any.worker.html
 0:35.79 TEST_END: Test OK. Subtests passed 14/14. Unexpected 0
 0:35.79 TEST_START: /fetch/api/cors/cors-preflight-not-cors-safelisted.any.html
 0:37.12 TEST_END: Test OK. Subtests passed 14/14. Unexpected 0
 0:37.12 TEST_START: /fetch/api/headers/headers-no-cors.any.html
 0:37.27 TEST_END: Test OK. Subtests passed 29/29. Unexpected 0
 0:37.27 TEST_START: /fetch/api/headers/headers-no-cors.any.sharedworker.html
 0:37.49 TEST_END: Test OK. Subtests passed 29/29. Unexpected 0
 0:37.49 TEST_START: /fetch/api/headers/headers-no-cors.any.serviceworker.html
 0:37.84 TEST_END: Test OK. Subtests passed 29/29. Unexpected 0
 0:37.84 TEST_START: /fetch/api/headers/headers-no-cors.any.worker.html
 0:38.02 TEST_END: Test OK. Subtests passed 29/29. Unexpected 0
 0:38.02 TEST_START: /xhr/access-control-basic-cors-safelisted-request-headers.htm
 0:38.09 pid:2097 [2114:2114:0321/060551.488674:INFO:CONSOLE:22] "Access to XMLHttpRequest at 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-cors-safelisted-request-headers.py' from origin 'http://web-platform.test:8000' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.", source: http://web-platform.test:8000/xhr/access-control-basic-cors-safelisted-request-headers.htm (22)
 0:38.17 TEST_END: Test OK. Subtests passed 0/1. Unexpected 1
FAIL Request with CORS-safelisted headers - Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-cors-safelisted-request-headers.py'.
NetworkError: Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-cors-safelisted-request-headers.py'.
    at Test.<anonymous> (http://web-platform.test:8000/xhr/access-control-basic-cors-safelisted-request-headers.htm:22:11)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at test (http://web-platform.test:8000/resources/testharness.js:633:30)
    at http://web-platform.test:8000/xhr/access-control-basic-cors-safelisted-request-headers.htm:11:5

 0:38.17 TEST_START: /xhr/access-control-basic-non-cors-safelisted-last-event-id.htm
 0:38.25 pid:2097 [2114:2114:0321/060551.645995:INFO:CONSOLE:17] "Access to XMLHttpRequest at 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-put-allow.py' from origin 'http://web-platform.test:8000' has been blocked by CORS policy: Request header field last-event-id is not allowed by Access-Control-Allow-Headers in preflight response.", source: http://web-platform.test:8000/xhr/access-control-basic-non-cors-safelisted-last-event-id.htm (17)
 0:38.32 TEST_END: Test OK. Subtests passed 0/1. Unexpected 1
FAIL Deny cross-origin request with non-CORS-safelisted last-event-id value - Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-put-allow.py'.
NetworkError: Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-put-allow.py'.
    at Test.<anonymous> (http://web-platform.test:8000/xhr/access-control-basic-non-cors-safelisted-last-event-id.htm:17:11)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at test (http://web-platform.test:8000/resources/testharness.js:633:30)
    at http://web-platform.test:8000/xhr/access-control-basic-non-cors-safelisted-last-event-id.htm:11:5

 0:38.32 INFO No more tests
 0:38.38 INFO Closing logging queue
 0:38.38 INFO queue closed
 0:38.43 SUITE_END

web-platform-test
~~~~~~~~~~~~~~~~~
Ran 280 checks (267 subtests, 13 tests)
Expected results: 270
Unexpected results: 10
  subtest: 10 (10 fail)

Unexpected Results
------------------
/cors/cors-safelisted-request-header.any.worker.html
  FAIL No preflight for {"last-event-id":"abc123"} - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
/cors/cors-safelisted-request-header.any.html
  FAIL No preflight for {"last-event-id":"abc123"} - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
/eventsource/eventsource-cross-origin-preflight.window.html
  FAIL EventSource: cross-origin preflight - unsafe `last-event-id` (preflight because too long) - assert_unreached: expected preflight, did not get one Reached unreachable code
    at Test.<anonymous> (http://web-platform.test:8000/eventsource/eventsource-cross-origin-preflight.window.js:41:9)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at EventSource.<anonymous> (http://web-platform.test:8000/resources/testharness.js:2717:32)
  FAIL EventSource: cross-origin preflight - unsafe `last-event-id` (preflight because unsafe characters) - assert_unreached: expected preflight, did not get one Reached unreachable code
    at Test.<anonymous> (http://web-platform.test:8000/eventsource/eventsource-cross-origin-preflight.window.js:41:9)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at EventSource.<anonymous> (http://web-platform.test:8000/resources/testharness.js:2717:32)
/fetch/api/cors/cors-no-preflight.any.html
  FAIL Cross domain [GET] [Last-Event-ID: evt-14] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
  FAIL Cross domain [GET] [Last-Event-ID: EvT-15] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
/fetch/api/cors/cors-no-preflight.any.worker.html
  FAIL Cross domain [GET] [Last-Event-ID: evt-14] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
  FAIL Cross domain [GET] [Last-Event-ID: EvT-15] - promise_test: Unhandled rejection with value: object "TypeError: Failed to fetch"
Error
    at get_stack (http://web-platform.test:8000/resources/testharness.js:4571:21)
    at new AssertionError (http://web-platform.test:8000/resources/testharness.js:4564:22)
    at assert (http://web-platform.test:8000/resources/testharness.js:4548:19)
    at Test.<anonymous> (http://web-platform.test:8000/resources/testharness.js:764:29)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at http://web-platform.test:8000/resources/testharness.js:2689:35
/xhr/access-control-basic-cors-safelisted-request-headers.htm
  FAIL Request with CORS-safelisted headers - Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-cors-safelisted-request-headers.py'.
NetworkError: Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-cors-safelisted-request-headers.py'.
    at Test.<anonymous> (http://web-platform.test:8000/xhr/access-control-basic-cors-safelisted-request-headers.htm:22:11)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at test (http://web-platform.test:8000/resources/testharness.js:633:30)
    at http://web-platform.test:8000/xhr/access-control-basic-cors-safelisted-request-headers.htm:11:5
/xhr/access-control-basic-non-cors-safelisted-last-event-id.htm
  FAIL Deny cross-origin request with non-CORS-safelisted last-event-id value - Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-put-allow.py'.
NetworkError: Failed to execute 'send' on 'XMLHttpRequest': Failed to load 'http://www1.web-platform.test:8000/xhr/resources/access-control-basic-put-allow.py'.
    at Test.<anonymous> (http://web-platform.test:8000/xhr/access-control-basic-non-cors-safelisted-last-event-id.htm:17:11)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2642:25)
    at test (http://web-platform.test:8000/resources/testharness.js:633:30)
    at http://web-platform.test:8000/xhr/access-control-basic-non-cors-safelisted-last-event-id.htm:11:5
 0:38.43 INFO Got 7 unexpected results, with 0 unexpected passes
 0:38.43 wptserve INFO Stopped WebTransport over HTTP/3 server on 127.0.0.1:11000
 0:38.75 wptserve INFO Stopped http server on 127.0.0.1:8000
 0:38.76 wptserve INFO Stopped http server on 127.0.0.1:8001
 0:38.76 wptserve INFO Stopped http server on 127.0.0.1:8443
 0:38.78 wptserve INFO Stopped http server on 127.0.0.1:8002
 0:38.78 wptserve INFO Stopped http server on 127.0.0.1:8446
 0:38.78 wptserve INFO Stopped http server on 127.0.0.1:9000
 0:38.78 wptserve INFO Stopped http server on 127.0.0.1:8003
 0:38.78 wptserve INFO Close on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8888))
 0:38.78 wptserve INFO Close on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8889))
 0:38.78 wptserve INFO Stopped http server on 127.0.0.1:8444
 0:38.78 wptserve INFO Stopped http server on 127.0.0.1:8445
 0:38.87 INFO Removed font: Ahem.ttf
 0:38.90 INFO Closing logging queue
 0:38.90 INFO queue closed
 0:38.90 INFO Tolerating 7 unexpected results
X connection to :99.0 broken (explicit kill or server shutdown).

[taskcluster 2025-03-21 06:05:57.199Z] === Task Finished ===
[taskcluster 2025-03-21 06:05:58.080Z] Successful task run with exit code: 0 completed in 166.665 seconds
View more details on Community-TC Integration