4 Commits

Author	SHA1	Message	Date
WaterWhisperer	f405ddeaf7	script: Implement base-uri CSP check (#42272) ... Testing: `./mach test-wpt /content-security-policy/base-uri` Fixes: #42261 Signed-off-by: WaterWhisperer <waterwhisperer24@qq.com>	2026-02-01 17:03:23 +00:00
Josh Matthews	a97a345d6e	script: Check same-origin-domain when evaluating javscript: URLs. (#41969) ... These changes introduce a new OriginSnapshot type, which is an immutable version of MutableOrigin (ie. an origin that includes an optional domain modifier). This is now propagated as part of LoadData's origin, allowing us to perform the same-origin-domain check for javascript: URLs as needed. Testing: Newly-passing tests. Signed-off-by: Josh Matthews <josh@joshmatthews.net>	2026-01-18 02:32:51 +00:00
Anonmiraj	b207be05d9	change some allows to expects (#41040) ... Changed some allow to expects and removed the unfulfilled expectations. Testing: Refactor Part of: #40383 Signed-off-by: anonmiraj <nabilmalek48@gmail.com>	2025-12-05 07:23:32 +00:00
dyegoaurelio	ab5fbad90c	script: Move CSP DOM interfaces to script/dom/security (#40843) ... *Describe the changes that this pull request makes here. This will be the commit message.* Move CSP DOM interfaces to `script/dom/security` Testing: Just a refactor, it doesn't require tests Fixes: part of #38901 Signed-off-by: Dyego Aurélio <dyegoaurelio@gmail.com>	2025-11-24 11:48:06 +00:00