Skip to content

[Gecko Bug 1940493] Implement trusted-types-eval CSP script-src keyword. #54657

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
moz-wptsync-bot merged 1 commit into from
Sep 3, 2025

Implement trusted-types-eval CSP script-src keyword.

a5d3490
Select commit
Loading
Failed to load commit list.
Merged

[Gecko Bug 1940493] Implement trusted-types-eval CSP script-src keyword. #54657

Implement trusted-types-eval CSP script-src keyword.
a5d3490
Select commit
Loading
Failed to load commit list.
Community-TC Integration / wpt-chrome-dev-results succeeded Sep 3, 2025 in 6m 33s

Community-TC (pull_request)

Collect results for all tests affected by a pull request in chrome.

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2025-09-03T09:01:00.380Z
Resolved: 2025-09-03T09:06:37.433Z
Task Execution Time: 5 minutes, 37 seconds, 53 milliseconds
Task Status: completed
Reason Resolved: completed
RunId: 0

Artifacts

- public/logs/live_backing.log
- public/logs/live.log
- public/results/checkrun.md
- public/results/wpt_report.json.gz
- public/results/wpt_screenshot.txt.gz

WPT Command: python3 ./wpt run --channel=dev --no-fail-on-unexpected --log-wptreport=../artifacts/wpt_report.json --log-wptscreenshot=../artifacts/wpt_screenshot.txt --affected base_head --log-mach-level=info --log-mach=- -y --no-pause --no-restart-on-unexpected --install-fonts --verify-log-full --no-headless --enable-swiftshader --install-browser --install-webdriver chrome

[taskcluster 2025-09-03 09:01:00.486Z] Task ID: L_t1wNWXSFSIXaYfN02yCw
[taskcluster 2025-09-03 09:01:00.486Z] Worker ID: 5905540448341310841
[taskcluster 2025-09-03 09:01:00.486Z] Worker Group: us-east1-d
[taskcluster 2025-09-03 09:01:00.486Z] Worker Node Type: projects/757942385826/machineTypes/n2-standard-4
[taskcluster 2025-09-03 09:01:00.486Z] Worker Pool: proj-wpt/ci
[taskcluster 2025-09-03 09:01:00.486Z] Worker Version: 46.1.0
[taskcluster 2025-09-03 09:01:00.486Z] Public IP: 34.74.30.74
[taskcluster 2025-09-03 09:01:00.486Z] Hostname: proj-wpt-ci-x9ylwf8urq-geh1mm95yqa

8f84a9f2102e - Started downloading
40516d781e70 - Started downloading
ac811f28856d - Started downloading
ac811f28856d - Downloaded in 0.031 seconds
8f84a9f2102e - Downloaded in 0.201 seconds
a8884b21e40e - Started downloading
a8884b21e40e - Downloaded in 0.414 seconds
4f4fb700ef54 - Started downloading
4f4fb700ef54 - Downloaded in 0.001 seconds
79c347416ee8 - Started downloading
79c347416ee8 - Downloaded in 0.072 seconds

...(419 lines hidden)...

Setting default value
Failed to read: session.screen0.maxDisableResize
Setting default value
Failed to read: session.screen0.workspacewarping
Setting default value
Failed to read: session.screen0.showwindowposition
Setting default value
Failed to read: session.screen0.autoRaise
Setting default value
Failed to read: session.screen0.clickRaises
Setting default value
Failed to read: session.screen0.defaultDeco
Setting default value
Failed to read: session.screen0.tab.placement
Setting default value
Failed to read: session.screen0.windowMenu
Setting default value
Failed to read: session.screen0.noFocusWhileTypingDelay
Setting default value
Failed to read: session.screen0.workspaces
Setting default value
Failed to read: session.screen0.edgeSnapThreshold
Setting default value
Failed to read: session.screen0.window.focus.alpha
Setting default value
Failed to read: session.screen0.window.unfocus.alpha
Setting default value
Failed to read: session.screen0.menu.alpha
Setting default value
Failed to read: session.screen0.menuDelay
Setting default value
Failed to read: session.screen0.tab.width
Setting default value
Failed to read: session.screen0.tooltipDelay
Setting default value
Failed to read: session.screen0.allowRemoteActions
Setting default value
Failed to read: session.screen0.clientMenu.usePixmap
Setting default value
Failed to read: session.screen0.tabs.usePixmap
Setting default value
Failed to read: session.screen0.tabs.maxOver
Setting default value
Failed to read: session.screen0.tabs.intitlebar
Setting default value
Failed to read: session.screen0.focusModel
Setting default value
Failed to read: session.screen0.tabFocusModel
Setting default value
Failed to read: session.screen0.focusNewWindows
Setting default value
Failed to read: session.screen0.focusSameHead
Setting default value
Failed to read: session.screen0.rowPlacementDirection
Setting default value
Failed to read: session.screen0.colPlacementDirection
Setting default value
Failed to read: session.screen0.windowPlacement
Setting default value
Failed to read: session.screen0.slit.acceptKdeDockapps
Setting default value
Failed to read: session.screen0.slit.autoHide
Setting default value
Failed to read: session.screen0.slit.maxOver
Setting default value
Failed to read: session.screen0.slit.placement
Setting default value
Failed to read: session.screen0.slit.alpha
Setting default value
Failed to read: session.screen0.slit.onhead
Setting default value
Failed to read: session.screen0.slit.layer
Setting default value
Failed to read: session.screen0.toolbar.autoHide
Setting default value
Failed to read: session.screen0.toolbar.maxOver
Setting default value
Failed to read: session.screen0.toolbar.visible
Setting default value
Failed to read: session.screen0.toolbar.alpha
Setting default value
Failed to read: session.screen0.toolbar.layer
Setting default value
Failed to read: session.screen0.toolbar.onhead
Setting default value
Failed to read: session.screen0.toolbar.placement
Setting default value
Failed to read: session.screen0.toolbar.height
Setting default value
Failed to read: session.screen0.iconbar.mode
Setting default value
Failed to read: session.screen0.iconbar.alignment
Setting default value
Failed to read: session.screen0.iconbar.iconWidth
Setting default value
Failed to read: session.screen0.iconbar.iconTextPadding
Setting default value
Failed to read: session.screen0.iconbar.usePixmap
Setting default value
 0:00.00 INFO Set tests_root to /home/test/web-platform-tests
 0:00.00 INFO Set metadata_root to /home/test/web-platform-tests
 0:00.00 INFO Set manifest_update to True
 0:00.00 INFO Set manifest_download to True
 0:14.20 INFO Identified 1 affected tests
 0:14.20 INFO Installing browser
 0:14.25 INFO Downloading Chrome for Testing from https://storage.googleapis.com/chrome-for-testing-public/141.0.7378.3/linux64/chrome-linux64.zip
 0:18.70 INFO Downloading Mojo bindings from https://storage.googleapis.com/chrome-for-testing-public/141.0.7378.3/mojojs.zip
 0:18.75 INFO MojoJS enabled automatically (mojojs_path: /home/test/web-platform-tests/_venv3/mojojs/gen)
 0:18.78 INFO Download info for matching ChromeDriver version found.
 0:18.78 INFO Downloading ChromeDriver from https://storage.googleapis.com/chrome-for-testing-public/141.0.7378.3/linux64/chromedriver-linux64.zip
 0:19.10 INFO Automatically turning on experimental features for Chrome Dev/Canary or Chromium trunk
 0:25.42 INFO Installed font: Ahem.ttf
 0:26.17 wptserve INFO Starting http server on http://127.0.0.1:8002
 0:26.27 wptserve INFO Starting http server on http://127.0.0.1:8000
 0:26.32 wptserve INFO Starting http server on http://127.0.0.1:8001
 0:26.35 wptserve INFO Starting https server on https://127.0.0.1:8444
 0:26.39 wptserve INFO Starting http server on http://127.0.0.1:8003
 0:26.39 wptserve INFO Starting https server on https://127.0.0.1:8443
 0:26.39 wptserve INFO Create socket on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8888))
 0:26.39 wptserve INFO Bind on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8888))
 0:26.39 wptserve INFO Listen on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8888))
 0:26.41 wptserve INFO Starting https server on https://127.0.0.1:8445
 0:26.50 wptserve INFO Starting https server on https://127.0.0.1:8446
 0:26.50 wptserve INFO Create socket on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8889))
 0:26.51 wptserve INFO Bind on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8889))
 0:26.51 wptserve INFO Listen on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8889))
 0:26.51 wptserve INFO Starting http2 server on https://127.0.0.1:9000
 0:26.61 wptserve INFO Starting WebTransport over HTTP/3 server on 127.0.0.1:11000
 0:27.04 SUITE_START: web-platform-test - running 1 tests
 0:37.61 INFO Using 1 child processes
 0:37.61 INFO Starting WebDriver: /home/test/web-platform-tests/_venv3/bin/chrome/chromedriver --port=53717 --ignore-explicit-port --url-base=/ --enable-chrome-logs --disable-build-check
 0:37.63 INFO Got WebDriver port 35897
 0:37.73 pid:2151 Full command: /home/test/web-platform-tests/_venv3/bin/chrome/chromedriver --port=53717 --ignore-explicit-port --url-base=/ --enable-chrome-logs --disable-build-check
pid:2151 Starting ChromeDriver 141.0.7378.3 (abc2a1775f62aea9893ba3099b3e86dfa04e3fd5-refs/branch-heads/7378@{#7}) on port 0
 0:37.73 pid:2151 Only local connections are allowed.
 0:37.73 pid:2151 Please see https://chromedriver.chromium.org/security-considerations for suggestions on keeping ChromeDriver safe.
 0:37.73 pid:2151 ChromeDriver was started successfully on port 35897.
 0:37.73 INFO Webdriver started successfully.
 0:37.73 INFO Starting runner
 0:38.98 pid:2151 [2199:2199:0903/090632.515115:WARNING:ui/gfx/linux/gpu_memory_buffer_support_x11.cc:49] dri3 extension not supported.
 0:38.98 pid:2151 [2199:2199:0903/090632.518765:WARNING:sandbox/policy/linux/sandbox_linux.cc:414] InitializeSandbox() called with multiple threads in process gpu-process.
Failed to read: session.screen0.titlebar.left
Setting default value
Failed to read: session.screen0.titlebar.right
Setting default value
 0:39.07 pid:2151 [1756890392.610][WARNING]: You are using an unsupported command-line switch: --disable-build-check. Please don't report bugs that cannot be reproduced with this switch removed.
 0:39.11 pid:2151 [2168:2168:0903/090632.645071:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.UPower was not provided by any .service files
 0:39.11 pid:2151 [2168:2168:0903/090632.645088:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device
 0:39.13 pid:2151 [2168:2168:0903/090632.663793:WARNING:ui/base/idle/idle_linux.cc:98] None of the known D-Bus ScreenSaver services could be used.
 0:39.21 TEST_START: /content-security-policy/script-src/script-src-trusted_types_eval_DedicatedWorker.html
 0:39.32 pid:2151 [2168:2168:0903/090632.852813:INFO:CONSOLE:0] "The source list for the Content Security Policy directive 'script-src' contains an invalid source: ''trusted-types-eval''. It will be ignored.", source: http://web-platform.test:8000/content-security-policy/script-src/script-src-trusted_types_eval_DedicatedWorker.html (0)
 0:39.34 pid:2151 [2168:2168:0903/090632.881000:INFO:CONSOLE:0] "The source list for the Content Security Policy directive 'script-src' contains an invalid source: ''trusted-types-eval''. It will be ignored.", source: http://web-platform.test:8000/content-security-policy/script-src/script-src-trusted_types_eval_DedicatedWorker.html (0)
 0:39.36 pid:2151 [2168:2168:0903/090632.896293:INFO:CONSOLE:0] "The source list for the Content Security Policy directive 'script-src' contains an invalid source: ''trusted-types-eval''. It will be ignored.", source: http://web-platform.test:8000/content-security-policy/script-src/script-src-trusted_types_eval_DedicatedWorker.html (0)
 0:39.43 TEST_END: Test OK. Subtests passed 2/3. Unexpected 1
FAIL Script injected via direct `eval` is allowed with `trusted-types-eval` and `require-trusted-types-for 'script'` (Dedicated Worker). - assert_unreached: `eval` should be allowed with `trusted-types-eval` and `require-trusted-types-for 'script'`. Reached unreachable code
    at Test.<anonymous> (http://web-platform.test:8000/content-security-policy/script-src/support/script-src-trusted_types_eval_with_require_trusted_types_eval_DedicatedWorker.js:17:5)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2869:25)
    at async_test (http://web-platform.test:8000/resources/testharness.js:681:34)
    at http://web-platform.test:8000/content-security-policy/script-src/support/script-src-trusted_types_eval_with_require_trusted_types_eval_DedicatedWorker.js:8:1

 0:39.43 INFO No more tests
 0:39.49 INFO Closing logging queue
 0:39.49 INFO queue closed
 0:39.55 SUITE_END

web-platform-test
~~~~~~~~~~~~~~~~~
Ran 4 checks (3 subtests, 1 tests)
Expected results: 3
Unexpected results: 1
  subtest: 1 (1 fail)

Unexpected Results
------------------
/content-security-policy/script-src/script-src-trusted_types_eval_DedicatedWorker.html
  FAIL Script injected via direct `eval` is allowed with `trusted-types-eval` and `require-trusted-types-for 'script'` (Dedicated Worker). - assert_unreached: `eval` should be allowed with `trusted-types-eval` and `require-trusted-types-for 'script'`. Reached unreachable code
    at Test.<anonymous> (http://web-platform.test:8000/content-security-policy/script-src/support/script-src-trusted_types_eval_with_require_trusted_types_eval_DedicatedWorker.js:17:5)
    at Test.step (http://web-platform.test:8000/resources/testharness.js:2869:25)
    at async_test (http://web-platform.test:8000/resources/testharness.js:681:34)
    at http://web-platform.test:8000/content-security-policy/script-src/support/script-src-trusted_types_eval_with_require_trusted_types_eval_DedicatedWorker.js:8:1
 0:39.55 INFO Got 1 unexpected results, with 0 unexpected passes
 0:39.55 wptserve INFO Stopped WebTransport over HTTP/3 server on 127.0.0.1:11000
 0:39.86 wptserve INFO Stopped http server on 127.0.0.1:8000
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8002
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8003
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8446
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8444
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8445
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8443
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:8001
 0:40.06 wptserve INFO Close on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8888))
 0:40.06 wptserve INFO Stopped http server on 127.0.0.1:9000
 0:40.06 wptserve INFO Close on: (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('127.0.0.1', 8889))
 0:40.18 INFO Removed font: Ahem.ttf
 0:40.20 INFO Closing logging queue
 0:40.20 INFO queue closed
 0:40.20 INFO Tolerating 1 unexpected results
[taskcluster 2025-09-03 09:06:35.617Z] === Task Finished ===
[taskcluster 2025-09-03 09:06:36.630Z] Successful task run with exit code: 0 completed in 336.146 seconds
View more details on Community-TC Integration