[Webkit-unassigned] [Bug 146272] New: LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html always passes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=146272

            Bug ID: 146272
           Summary: LayoutTests/http/tests/security/contentSecurityPolicy/
                    media-src-track-block.html always passes
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dbates at webkit.org

The test LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html will always pass regardless of presence of the Content Security Policy <meta> tag in it because the referenced external text track file, <http://trac.webkit.org/browser/trunk/LayoutTests/http/tests/security/contentSecurityPolicy/resources/track.vtt?rev=138820>, is not a valid WebVTT-formatted file.

Steps to reproduce:

1. Run, Tools/Scripts/run-webkit-tests LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html
Notice that the test passes.

2. Open the file LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html in a text editor, remove the following line, and save the file:
<meta http-equiv="Content-Security-Policy" content="media-src 'none'"> LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html

3. Run, Tools/Scripts/run-webkit-tests LayoutTests/http/tests/security/contentSecurityPolicy/media-src-track-block.html
Notice that the test passes. But it should fail with JavaScript alert "FAIL".

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150624/a2eb6ff2/attachment-0001.html>