[Webkit-unassigned] [Bug 202004] New: http/tests/security/contentSecurityPolicy/user-style-sheet-font-crasher.php emits CSP blocked message multiple times

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 19 13:57:21 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=202004

            Bug ID: 202004
           Summary: http/tests/security/contentSecurityPolicy/user-style-s
                    heet-font-crasher.php emits CSP blocked message
                    multiple times
           Product: WebKit
           Version: WebKit Local Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dbates at webkit.org

While working on another bug I noticed that the test http/tests/security/contentSecurityPolicy/user-style-sheet-font-crasher.php emits the console message "Refused to load http://127.0.0.1:8000/security/contentSecurityPolicy/example_font.woff because it does not appear in the font-src directive of the Content Security Policy." multiple times. I would have expected the message to be emitted exactly once. Emitting the message multiple times likely has implications with respect to CSP reporting: multiple reports may be sent.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190919/001839da/attachment-0001.html>


More information about the webkit-unassigned mailing list