Diff
Modified: trunk/LayoutTests/ChangeLog (273493 => 273494)
--- trunk/LayoutTests/ChangeLog 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/ChangeLog 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,3 +1,54 @@
+2021-02-25 Chris Gambrell <cgambr...@apple.com>
+
+ [LayoutTests] Convert http/tests/contentdispositionattachmentsandbox convert PHP to Python
+ https://bugs.webkit.org/show_bug.cgi?id=221966
+ <rdar://problem/74393682>
+
+ Reviewed by Jonathan Bedard.
+
+ * http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled-expected.txt:
+ * http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled-expected.txt:
+ * http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled-expected.txt:
+ * http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/form-submission-disabled-expected.txt:
+ * http/tests/contentdispositionattachmentsandbox/form-submission-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/http-equiv-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/plugins-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-always.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-default.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-never.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer-when-downgrade.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-origin.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-unsafe-url.html:
+ * http/tests/contentdispositionattachmentsandbox/referer-header-stripped.html:
+ * http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.php: Removed.
+ * http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.py: Added.
+ * http/tests/contentdispositionattachmentsandbox/scripts-disabled-expected.txt:
+ * http/tests/contentdispositionattachmentsandbox/scripts-disabled.html:
+ * http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled-expected.txt:
+ * http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled.html:
+
2021-02-25 Said Abou-Hallawa <s...@apple.com>
[GPU Process] Stroke and fill StateChangeFlags should be set exclusively
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled-expected.txt (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled-expected.txt 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled-expected.txt 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
-CONSOLE MESSAGE: Unsafe attempt to load URL data:text/css,body::after { content: 'FAIL'; } from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.php.
+CONSOLE MESSAGE: Unsafe attempt to load URL data:text/css,body::after { content: 'FAIL'; } from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.py.
This test verifies that @imported stylesheets are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/at-import-stylesheets-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -6,4 +6,4 @@
internals.settings.setContentDispositionAttachmentSandboxEnabled(true);
</script>
<p>This test verifies that @imported stylesheets are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled-expected.txt (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled-expected.txt 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled-expected.txt 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
-CONSOLE MESSAGE: Unsafe attempt to load URL data:text/html,FAIL from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.php.
+CONSOLE MESSAGE: Unsafe attempt to load URL data:text/html,FAIL from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.py.
This test verifies that cross-origin frames are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/cross-origin-frames-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -6,4 +6,4 @@
internals.settings.setContentDispositionAttachmentSandboxEnabled(true);
</script>
<p>This test verifies that cross-origin frames are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled-expected.txt (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled-expected.txt 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled-expected.txt 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
-CONSOLE MESSAGE: Unsafe attempt to load URL data:text/css,body::after { content: 'FAIL'; } from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.php.
+CONSOLE MESSAGE: Unsafe attempt to load URL data:text/css,body::after { content: 'FAIL'; } from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.py.
This test verifies that external stylesheets are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/external-stylesheets-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -6,4 +6,4 @@
internals.settings.setContentDispositionAttachmentSandboxEnabled(true);
</script>
<p>This test verifies that external stylesheets are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/form-submission-disabled-expected.txt (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/form-submission-disabled-expected.txt 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/form-submission-disabled-expected.txt 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
-CONSOLE MESSAGE: Blocked form submission to 'http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/form-submission-frame.php' because the form's frame is sandboxed and the 'allow-forms' permission is not set.
+CONSOLE MESSAGE: Blocked form submission to 'http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/form-submission-frame.py' because the form's frame is sandboxed and the 'allow-forms' permission is not set.
This test verifies that form submission is disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/form-submission-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/form-submission-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/form-submission-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -23,5 +23,5 @@
}
</script>
<p>This test verifies that form submission is disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe style="border: 0px" src=""
+<iframe style="border: 0px" src=""
<input style="visibility: hidden" id="submitButtonForMetrics" type="submit">
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/http-equiv-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/http-equiv-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/http-equiv-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -6,4 +6,4 @@
internals.settings.setContentDispositionAttachmentSandboxEnabled(true);
</script>
<p>This test verifies that <meta http-equiv> processing is disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/plugins-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/plugins-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/plugins-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -19,4 +19,4 @@
}
</script>
<p>This test verifies that plug-ins are disabled when 'Content-Disposition: attachment' sandboxing is enabled. 'PASS' is displayed in the <iframe> below if the test passes.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-always.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-always.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-always.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-default.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-default.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-default.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-never.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-never.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-never.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer-when-downgrade.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer-when-downgrade.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer-when-downgrade.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-no-referrer.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-origin.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-origin.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-origin.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-unsafe-url.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-unsafe-url.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped-with-meta-referer-unsafe-url.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/referer-header-stripped.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
<!DOCTYPE html>
<script src=""
<p>This test verifies that a link redirected by a document which is loaded with Content-Disposition:attachment will not have http referer. Tess passes if no referer is printed.</p>
-<iframe src=""
+<iframe src=""
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,8 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<style>
-@import url("data:text/css,body::after { content: 'FAIL'; }");
-</style>
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,12 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<style>\n'
+ '@import url("data:text/css,body::after { content: \'FAIL\'; }");\n'
+ '</style>\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/at-import-stylesheets-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,6 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<iframe src=""
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,10 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<iframe src=""
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/cross-origin-frames-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,8 +0,0 @@
-<!DOCTYPE html>
-<script>
-if (window.parent.testRunner)
- testRunner.notifyDone();
-</script>
-<?php
-echo $_SERVER['HTTP_REFERER'];
-?>
\ No newline at end of file
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,15 @@
+#!/usr/bin/env python3
+
+import os
+import sys
+
+referer = os.environ.get('HTTP_REFERER', '')
+sys.stdout.write(
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<script>\n'
+ 'if (window.parent.testRunner)\n'
+ ' testRunner.notifyDone();\n'
+ '</script>\n'
+ '{}'.format(referer)
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/echo-http-referer.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,6 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<link rel="stylesheet" href="" { content: 'FAIL'; }">
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,10 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<link rel="stylesheet" href="" { content: \'FAIL\'; }">\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/external-stylesheets-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,13 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<style>
-body {
- margin: 0px;
-}
-</style>
-<form>
-<input type="submit">
-</form>
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,17 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<style>\n'
+ 'body {\n'
+ ' margin: 0px;\n'
+ '}\n'
+ '</style>\n'
+ '<form>\n'
+ '<input type="submit">\n'
+ '</form>\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/form-submission-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,6 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<meta http-equiv="refresh" content="0; url=""
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,10 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<meta http-equiv="refresh" content="0; url=""
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/http-equiv-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,6 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<object type="application/x-webkit-test-netscape">PASS</object>
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,10 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<object type="application/x-webkit-test-netscape">PASS</object>\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/plugins-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,16 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<head>
-<?php if (isset($_GET['referrer'])) print("<meta name=\"referrer\" content=\"" . $_GET['referrer'] . "\">\n"); ?>
-<style>
-a {
- display: block;
- width: 100vw;
- height: 100vh;
-}
-</style>
-</head>
-<a href="" to echo-http-referer.php</a>
\ No newline at end of file
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,29 @@
+#!/usr/bin/env python3
+
+import os
+import sys
+from urllib.parse import parse_qs
+
+referrer = parse_qs(os.environ.get('QUERY_STRING', ''), keep_blank_values=True).get('referrer', [''])[0]
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<head>\n'
+)
+
+if referrer:
+ sys.stdout.write('<meta name=\"referrer\" content=\"{}\">\n'.format(referrer))
+
+sys.stdout.write(
+ '<style>\n'
+ 'a {\n'
+ ' display: block;\n'
+ ' width: 100vw;\n'
+ ' height: 100vh;\n'
+ '}\n'
+ '</style>\n'
+ '</head>\n'
+ '<a href="" to echo-http-referer.py</a>\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/referer-header-stripped-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,8 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.html");
-header("Content-Type: text/html");
-?>
-<!DOCTYPE html>
-<script>
-document.write('FAIL');
-</script>
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,12 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.html\r\n'
+ 'Content-Type: text/html\r\n\r\n'
+ '<!DOCTYPE html>\n'
+ '<script>\n'
+ 'document.write(\'FAIL\');\n'
+ '</script>\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/scripts-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Deleted: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.php (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.php 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.php 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,9 +0,0 @@
-<?php
-header("Content-Disposition: attachment; filename=test.xhtml");
-header("Content-Type: application/xhtml+xml");
-echo "<?xml version=\"1.0\" encoding=\"UTF-8\" ?>\n";
-echo "<?xml-stylesheet href="" { content: 'FAIL'; }\" ?>\n";
-echo "<html xmlns=\"http://www.w3.org/1999/xhtml\">\n";
-echo "<body></body>\n";
-echo "</html>\n";
-?>
Added: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.py (0 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.py (rev 0)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.py 2021-02-25 18:32:31 UTC (rev 273494)
@@ -0,0 +1,13 @@
+#!/usr/bin/env python3
+
+import sys
+
+sys.stdout.write(
+ 'Content-Disposition: attachment; filename=test.xhtml\r\n'
+ 'Content-Type: application/xhtml+xml\r\n\r\n'
+ '<?xml version=\"1.0\" encoding=\"UTF-8\" ?>\n'
+ '<?xml-stylesheet href="" { content: \'FAIL\'; }\" ?>\n'
+ '<html xmlns=\"http://www.w3.org/1999/xhtml\">\n'
+ '<body></body>\n'
+ '</html>\n'
+)
\ No newline at end of file
Property changes on: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.py
___________________________________________________________________
Added: svn:executable
+*
\ No newline at end of property
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/scripts-disabled-expected.txt (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/scripts-disabled-expected.txt 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/scripts-disabled-expected.txt 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
-CONSOLE MESSAGE: Blocked script execution in 'http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/scripts-frame.php' because the document's frame is sandboxed and the 'allow-scripts' permission is not set.
+CONSOLE MESSAGE: Blocked script execution in 'http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/scripts-frame.py' because the document's frame is sandboxed and the 'allow-scripts' permission is not set.
This test verifies that scripts are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/scripts-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/scripts-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/scripts-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -6,4 +6,4 @@
internals.settings.setContentDispositionAttachmentSandboxEnabled(true);
</script>
<p>This test verifies that scripts are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe src=""
+<iframe src=""
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled-expected.txt (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled-expected.txt 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled-expected.txt 2021-02-25 18:32:31 UTC (rev 273494)
@@ -1,4 +1,4 @@
-CONSOLE MESSAGE: Unsafe attempt to load URL data:text/css,body::after { content: 'FAIL'; } from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.php.
+CONSOLE MESSAGE: Unsafe attempt to load URL data:text/css,body::after { content: 'FAIL'; } from document with Content-Disposition: attachment at URL http://127.0.0.1:8000/contentdispositionattachmentsandbox/resources/xml-stylesheet-processing-instructions-frame.py.
This test verifies that xml-stylesheet processing instructions are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.
Modified: trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled.html (273493 => 273494)
--- trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled.html 2021-02-25 18:24:22 UTC (rev 273493)
+++ trunk/LayoutTests/http/tests/contentdispositionattachmentsandbox/xml-stylesheet-processing-instructions-disabled.html 2021-02-25 18:32:31 UTC (rev 273494)
@@ -6,4 +6,4 @@
internals.settings.setContentDispositionAttachmentSandboxEnabled(true);
</script>
<p>This test verifies that xml-stylesheet processing instructions are disabled when 'Content-Disposition: attachment' sandboxing is enabled. A security error will be logged to the console if the test passes.</p>
-<iframe src=""
+<iframe src=""
