Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(94)

Issue 2020053002: 'SecurityPolicyViolation' event data errors. (Closed)

Created:
4 years, 6 months ago by Mike West
Modified:
4 years, 6 months ago
CC:
blink-reviews, chromium-reviews, mkwst+watchlist-csp_chromium.org
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

'SecurityPolicyViolation' event data errors. This patch fixes two small bugs with the data delivered in the SecurityPolicyViolation event object: 1. 'blockedURI' is now 'inline' or 'eval' for those kinds of violations. 2. 'lineNumber' is populated correctly for inline violations. BUG=615862 R=jochen@chromium.org Committed: https://crrev.com/b31cfe4547ff32305bf02f6fed28229466a0ddf3 Cr-Commit-Position: refs/heads/master@{#397371}

Patch Set 1 #

Patch Set 2 : Missed a test. #

Patch Set 3 : Rebase. #

Patch Set 4 : Rebase #

Unified diffs Side-by-side diffs Delta from patch set Stats (+53 lines, -288 lines) Patch
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-basics.html View 1 chunk +0 lines, -34 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-basics-expected.txt View 1 chunk +0 lines, -22 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-cross-origin-image.html View 1 2 1 chunk +0 lines, -32 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-cross-origin-image-expected.txt View 1 2 1 chunk +0 lines, -22 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-cross-origin-image-from-script.html View 1 chunk +0 lines, -32 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-cross-origin-image-from-script-expected.txt View 1 chunk +0 lines, -22 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-image.html View 1 chunk +0 lines, -32 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-image-expected.txt View 1 chunk +0 lines, -22 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-image-from-script.html View 1 chunk +0 lines, -32 lines 0 comments Download
D third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/securitypolicyviolation-block-image-from-script-expected.txt View 1 chunk +0 lines, -22 lines 0 comments Download
A third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/blockeduri-eval.html View 1 1 chunk +19 lines, -0 lines 0 comments Download
A third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/blockeduri-inline.html View 1 chunk +18 lines, -0 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-basics.html View 0 chunks +-1 lines, --1 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-basics-expected.txt View 0 chunks +-1 lines, --1 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image.html View 0 chunks +-1 lines, --1 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image-expected.txt View 1 2 1 chunk +1 line, -1 line 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image-from-script.html View 0 chunks +-1 lines, --1 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image-from-script-expected.txt View 1 chunk +1 line, -1 line 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-image.html View 0 chunks +-1 lines, --1 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-image-expected.txt View 1 chunk +1 line, -1 line 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-image-from-script.html View 0 chunks +-1 lines, --1 lines 0 comments Download
A + third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/securitypolicyviolation/securitypolicyviolation-block-image-from-script-expected.txt View 1 chunk +1 line, -1 line 0 comments Download
M third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp View 1 2 3 1 chunk +1 line, -1 line 0 comments Download
M third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h View 1 2 1 chunk +1 line, -1 line 0 comments Download
M third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.cpp View 1 2 5 chunks +16 lines, -16 lines 0 comments Download

Dependent Patchsets:

Messages

Total messages: 19 (8 generated)
Mike West
This looks like a big change, but most of the diff is moving tests from ...
4 years, 6 months ago (2016-05-30 14:38:59 UTC) #1
Mike West
On 2016/05/30 at 14:38:59, Mike West (OOO until 30th) wrote: > This looks like a ...
4 years, 6 months ago (2016-06-01 06:36:45 UTC) #2
jochen (gone - plz use gerrit)
it's a bit odd that an URI would be "inline", but hey, whatever the spec ...
4 years, 6 months ago (2016-06-01 15:12:52 UTC) #3
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/2020053002/40001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/2020053002/40001
4 years, 6 months ago (2016-06-01 15:17:17 UTC) #5
Mike West
On 2016/06/01 at 15:12:52, jochen wrote: > it's a bit odd that an URI would ...
4 years, 6 months ago (2016-06-01 15:17:42 UTC) #6
commit-bot: I haz the power
Failed to apply patch for third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp: While running git apply --index -3 -p1; error: patch ...
4 years, 6 months ago (2016-06-01 17:05:16 UTC) #8
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/2020053002/60001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/2020053002/60001
4 years, 6 months ago (2016-06-02 07:20:00 UTC) #12
commit-bot: I haz the power
Try jobs failed on following builders: linux_android_rel_ng on tryserver.chromium.android (JOB_FAILED, https://build.chromium.org/p/tryserver.chromium.android/builders/linux_android_rel_ng/builds/80597)
4 years, 6 months ago (2016-06-02 09:15:49 UTC) #14
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/2020053002/60001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/2020053002/60001
4 years, 6 months ago (2016-06-02 10:56:06 UTC) #16
commit-bot: I haz the power
Committed patchset #4 (id:60001)
4 years, 6 months ago (2016-06-02 11:52:45 UTC) #17
commit-bot: I haz the power
4 years, 6 months ago (2016-06-02 11:53:54 UTC) #19
Message was sent while issue was closed.
Patchset 4 (id:??) landed as
https://crrev.com/b31cfe4547ff32305bf02f6fed28229466a0ddf3
Cr-Commit-Position: refs/heads/master@{#397371}

Powered by Google App Engine
This is Rietveld 408576698