[webkit-changes] [WebKit/WebKit] 6dd9fa: Strip prefix from Trusted Type Function samples

[Luke Warlow]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 6dd9fa30a220a37e4edc257c79c3512403f25c17
      https://github.com/WebKit/WebKit/commit/6dd9fa30a220a37e4edc257c79c3512403f25c17
  Author: Luke Warlow <lwarlow at igalia.com>
  Date:   2024-12-18 (Wed, 18 Dec 2024)

  Changed paths:
    M LayoutTests/imported/w3c/web-platform-tests/content-security-policy/reporting/report-clips-sample.https-expected.txt
    M Source/WebCore/page/csp/ContentSecurityPolicy.cpp

  Log Message:
  -----------
  Strip prefix from Trusted Type Function samples
https://bugs.webkit.org/show_bug.cgi?id=277258

Reviewed by Tim Nguyen.

This strips "function anonymous" and similar prefixes for the function variants from the
CSP violation report sample produced by trusted types.

This aligns with Chromium's existing behaviour and the latest spec consensus.

Spec: https://w3c.github.io/trusted-types/dist/spec/#should-block-sink-type-mismatch

* LayoutTests/imported/w3c/web-platform-tests/content-security-policy/reporting/report-clips-sample.https-expected.txt:
* Source/WebCore/page/csp/ContentSecurityPolicy.cpp:
(WebCore::ContentSecurityPolicy::allowMissingTrustedTypesForSinkGroup const):

Canonical link: https://commits.webkit.org/287999@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications