mirror of
https://github.com/HeyPuter/firefox.git
synced 2026-11-13 20:14:57 -10:00
Ian Clelland
cd67efa755
Automatic update from web-platform-tests Add new tests for credentials and isolation in reporting. This adds WPT to ensure that credentials are not sent to cross-origin reporting endpoints, that they *are* sent to same-origin reporting endpoints (currently failing; tracked as crbug.com/1163645), and that reports which come from documents with different origins are not sent in the same bundle, even when configured to deliver reports to the same endpoint. Change-Id: Icb36647d02ad33e8a2f10901782ad9b92cd0f191 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2657296 Commit-Queue: Ian Clelland <[email protected]> Reviewed-by: Rodney Ding <[email protected]> Cr-Commit-Position: refs/heads/main@{#920222} -- wpt-commits: 824f5aadae74478bc2a3ad97b9c407fd2158508a wpt-pr: 27423
3 lines
256 B
Plaintext
3 lines
256 B
Plaintext
Reporting-Endpoints: csp-endpoint="https://{{domains[www]}}:{{ports[https][0]}}/reporting/resources/report.py?reportID=d0d517bf-891b-457a-b970-8b2b2c81a0bf"
|
|
Content-Security-Policy: script-src 'self' 'unsafe-inline'; img-src 'none'; report-to csp-endpoint
|