Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(50)

Issue 1032033002: Fire error events for a variety of script and style failures. (Closed)

Created:
5 years, 9 months ago by jww
Modified:
5 years, 9 months ago
Reviewers:
pdr., Mike West
CC:
blink-reviews, blink-reviews-dom_chromium.org, blink-reviews-html_chromium.org, blink-reviews-style_chromium.org, dglazkov+blink, eae+blinkwatch, gavinp+prerender_chromium.org, mkwst+watchlist-csp_chromium.org, rwlbuis, sof, Yoav Weiss
Base URL:
https://chromium.googlesource.com/chromium/blink.git@master
Target Ref:
refs/heads/master
Project:
blink
Visibility:
Public.

Description

Fire error events for a variety of script and style failures. This is a follow up to https://codereview.chromium.org/1010433007/ that adds support for firing error events for a variety of script and style failures. In particular, for scripts, it adds error firing for MIME type blocking and CSP script hash failures. For styles, it add support for general CSP style-hash failures and style-hash and style-nonce failures. BUG=464648 Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=192646

Patch Set 1 #

Patch Set 2 : Changed processing result to an enum rather than a bool #

Total comments: 2

Patch Set 3 : Changed bool to enum #

Patch Set 4 : Fixed test failures #

Unified diffs Side-by-side diffs Delta from patch set Stats (+230 lines, -38 lines) Patch
A LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scripthash-basic-blocked-error-event.html View 1 chunk +10 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/1.1/scripthash-basic-blocked-error-event-expected.txt View 1 chunk +6 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/1.1/stylehash-basic-blocked-error-event.html View 1 chunk +19 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/1.1/stylehash-basic-blocked-error-event-expected.txt View 1 2 3 1 chunk +8 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/1.1/stylenonce-basic-blocked-error-event.html View 1 chunk +19 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/1.1/stylenonce-basic-blocked-error-event-expected.txt View 1 2 3 1 chunk +8 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/resources/fail-to-inject-script.js View 1 chunk +9 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/resources/script-set-value.js View 1 chunk +1 line, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/resources/style-set-red.css View 1 chunk +1 line, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/script-src-blocked-error-event.html View 1 chunk +23 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/style-src-blocked-error-event.html View 1 chunk +22 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentSecurityPolicy/style-src-blocked-error-event-expected.txt View 1 2 3 1 chunk +8 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentTypeOptions/image-as-script-blocked-with-error.html View 1 chunk +19 lines, -0 lines 0 comments Download
A LayoutTests/http/tests/security/contentTypeOptions/nosniff-script-blocked-with-error.html View 1 chunk +19 lines, -0 lines 0 comments Download
M Source/core/css/StyleSheetContents.cpp View 1 2 1 chunk +1 line, -1 line 0 comments Download
M Source/core/dom/Node.h View 1 2 1 chunk +5 lines, -1 line 0 comments Download
M Source/core/dom/ScriptLoader.cpp View 2 chunks +8 lines, -5 lines 0 comments Download
M Source/core/dom/StyleElement.h View 1 2 chunks +10 lines, -5 lines 0 comments Download
M Source/core/dom/StyleElement.cpp View 1 5 chunks +15 lines, -12 lines 0 comments Download
M Source/core/html/HTMLLinkElement.h View 1 2 2 chunks +2 lines, -2 lines 0 comments Download
M Source/core/html/HTMLLinkElement.cpp View 1 2 4 chunks +7 lines, -6 lines 0 comments Download
M Source/core/html/HTMLStyleElement.h View 1 2 1 chunk +1 line, -1 line 0 comments Download
M Source/core/html/HTMLStyleElement.cpp View 1 2 3 chunks +9 lines, -5 lines 0 comments Download

Messages

Total messages: 16 (6 generated)
jww
Mike, can you take a look at this? I'm a bit unsure about how we ...
5 years, 9 months ago (2015-03-25 02:34:23 UTC) #1
jww
Whoops, forgot to actually add mkwst@ and pdr@ the first time :-)
5 years, 9 months ago (2015-03-25 02:34:46 UTC) #3
pdr.
On 2015/03/25 at 02:34:23, jww wrote: > Mike, can you take a look at this? ...
5 years, 9 months ago (2015-03-25 03:08:36 UTC) #4
jww
On 2015/03/25 03:08:36, pdr wrote: > On 2015/03/25 at 02:34:23, jww wrote: > > Mike, ...
5 years, 9 months ago (2015-03-25 20:20:57 UTC) #5
Mike West
LGTM once pdr@ is happy. https://codereview.chromium.org/1032033002/diff/20001/Source/core/html/HTMLLinkElement.cpp File Source/core/html/HTMLLinkElement.cpp (right): https://codereview.chromium.org/1032033002/diff/20001/Source/core/html/HTMLLinkElement.cpp#newcode749 Source/core/html/HTMLLinkElement.cpp:749: notifyLoadedSheetAndAllCriticalSubresources(true); Nit: We should ...
5 years, 9 months ago (2015-03-26 04:41:08 UTC) #6
pdr.
LGTM for SVG as a followup.
5 years, 9 months ago (2015-03-26 19:07:23 UTC) #7
jww
Thanks for the reviews. Will start work on the SVG business today. https://codereview.chromium.org/1032033002/diff/20001/Source/core/html/HTMLLinkElement.cpp File Source/core/html/HTMLLinkElement.cpp ...
5 years, 9 months ago (2015-03-26 21:04:17 UTC) #10
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1032033002/40001
5 years, 9 months ago (2015-03-26 21:04:38 UTC) #12
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1032033002/60001
5 years, 9 months ago (2015-03-26 22:33:14 UTC) #15
commit-bot: I haz the power
5 years, 9 months ago (2015-03-27 03:36:22 UTC) #16
Message was sent while issue was closed.
Committed patchset #4 (id:60001) as
https://src.chromium.org/viewvc/blink?view=rev&revision=192646

Powered by Google App Engine
This is Rietveld 408576698