Skip to content

Add WebDriver BiDi CSP bypass hooks #12711

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
juliandescottes wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add WebDriver BiDi CSP bypass hooks #12711

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
57 changes: 37 additions & 20 deletions source
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4895,6 +4895,7 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
<li><dfn data-x-href="https://w3c.github.io/webdriver-bidi/#webdriver-bidi-file-dialog-opened">WebDriver BiDi file dialog opened</dfn></li>
<li><dfn data-x-href="https://w3c.github.io/webdriver-bidi/#webdriver-bidi-emulated-language">WebDriver BiDi emulated language</dfn></li>
<li><dfn data-x-href="https://w3c.github.io/webdriver-bidi/#webdriver-bidi-scripting-is-enabled">WebDriver BiDi scripting is enabled</dfn></li>
<li><dfn data-x-href="https://w3c.github.io/webdriver-bidi/#webdriver-bidi-csp-is-bypassed">WebDriver BiDi CSP is bypassed</dfn></li>
</ul>
</dd>

Expand Down Expand Up @@ -18837,7 +18838,11 @@ people expect to have work and what is necessary.
data-x="sandbox directive">sandbox</code> <span data-x="Content Security Policy
directive">directives</span> from <var>policy</var>.</p></li>

<li><p><span>Enforce the policy</span> <var>policy</var>.</p></li>
<li><p>Let <var>navigable</var> be the <code>meta</code> element's <span>node
navigable</span>.</p></li>

<li><p>If <var>navigable</var> is null, or <span>WebDriver BiDi CSP is bypassed</span> given
<var>navigable</var> is false, then <span>enforce the policy</span> <var>policy</var>.</p></li>
</ol>

</div>
Expand Down Expand Up @@ -96171,14 +96176,17 @@ interface <dfn interface data-x="dom-Origin-interface">Origin</dfn> {

<div algorithm>
<p>To <dfn export>clone a policy container</dfn> given a <span>policy container</span>
<var>policyContainer</var>:</p>
<var>policyContainer</var> and an optional <span>navigable</span>-or-null <var>navigable</var>
(default null):</p>

<ol>
<li><p>Let <var>clone</var> be a new <span>policy container</span>.</p></li>

<li><p><span data-x="list iterate">For each</span> <var>policy</var> in
<var>policyContainer</var>'s <span data-x="policy-container-csp-list">CSP list</span>, <span
data-x="list append">append</span> a copy of <var>policy</var> into <var>clone</var>'s <span
<li><p>If <var>navigable</var> is null, or <span>WebDriver BiDi CSP is bypassed</span>
given <var>navigable</var> is false, then <span data-x="list iterate">for each</span>
<var>policy</var> in <var>policyContainer</var>'s <span
data-x="policy-container-csp-list">CSP list</span>, <span data-x="list append">append</span> a
copy of <var>policy</var> into <var>clone</var>'s <span
data-x="policy-container-csp-list">CSP list</span>.</p></li>

<li><p>Set <var>clone</var>'s <span data-x="policy-container-embedder-policy">embedder
Expand Down Expand Up @@ -96222,22 +96230,25 @@ interface <dfn interface data-x="dom-Origin-interface">Origin</dfn> {
<div algorithm>
<p>To <dfn export data-lt="creating a policy container from a fetch response" data-x="creating a
policy container from a fetch response">create a policy container from a fetch response</dfn>
given a <span data-x="concept-response">response</span> <var>response</var> and an
<span>environment</span>-or-null <var>environment</var>:</p>
given a <span data-x="concept-response">response</span> <var>response</var>, an
<span>environment</span>-or-null <var>environment</var>, and an optional
<span>navigable</span>-or-null <var>navigable</var> (default null):</p>

<ol>
<li><p>If <var>response</var>'s <span data-x="concept-response-url">URL</span>'s <span
data-x="concept-url-scheme">scheme</span> is "<code data-x="">blob</code>", then return a <span
data-x="clone a policy container">clone</span> of <var>response</var>'s <span
data-x="concept-response-url">URL</span>'s <span data-x="concept-url-blob-entry">blob URL
entry</span>'s <span data-x="blob-url-entry-environment">environment</span>'s <span>policy
container</span>.</p></li>
container</span>, given <var>navigable</var>.</p></li>

<li><p>Let <var>result</var> be a new <span>policy container</span>.</p></li>

<li><p>Set <var>result</var>'s <span data-x="policy-container-csp-list">CSP list</span> to the
result of <span data-x="parse-response-csp">parsing a response's Content Security Policies</span>
given <var>response</var>.</p></li>
<li><p>If <var>navigable</var> is null, or <span>WebDriver BiDi CSP is bypassed</span>
given <var>navigable</var> is false, then set <var>result</var>'s <span
data-x="policy-container-csp-list">CSP list</span> to the result of <span
data-x="parse-response-csp">parsing a response's Content Security Policies</span> given
<var>response</var>.</p></li>

<li><p>If <var>environment</var> is non-null, then set <var>result</var>'s <span
data-x="policy-container-embedder-policy">embedder policy</span> to the result of <span
Expand All @@ -96259,10 +96270,11 @@ interface <dfn interface data-x="dom-Origin-interface">Origin</dfn> {

<div algorithm>
<p>To <dfn data-x="determining navigation params policy container">determine navigation params
policy container</dfn> given a <span>URL</span> <var>responseURL</var> and four <span
policy container</dfn> given a <span>URL</span> <var>responseURL</var>, four <span
data-x="policy container">policy container</span>-or-nulls <var>historyPolicyContainer</var>,
<var>initiatorPolicyContainer</var>, <var>parentPolicyContainer</var>, and
<var>responsePolicyContainer</var>:</p>
<var>responsePolicyContainer</var>, and an optional <span>navigable</span>-or-null
<var>navigable</var> (default null):</p>

<ol>
<li>
Expand All @@ -96273,7 +96285,7 @@ interface <dfn interface data-x="dom-Origin-interface">Origin</dfn> {
in history</span>.</p></li>

<li><p>Return a <span data-x="clone a policy container">clone</span> of
<var>historyPolicyContainer</var>.</p></li>
<var>historyPolicyContainer</var>, given <var>navigable</var>.</p></li>
</ol>
</li>

Expand All @@ -96284,13 +96296,14 @@ interface <dfn interface data-x="dom-Origin-interface">Origin</dfn> {
<li><p><span>Assert</span>: <var>parentPolicyContainer</var> is not null.</p></li>

<li><p>Return a <span data-x="clone a policy container">clone</span> of
<var>parentPolicyContainer</var>.</p></li>
<var>parentPolicyContainer</var>, given <var>navigable</var>.</p></li>
</ol>
</li>

<li><p>If <var>responseURL</var> <span data-x="is-local">is local</span> and
<var>initiatorPolicyContainer</var> is not null, then return a <span data-x="clone a policy
container">clone</span> of <var>initiatorPolicyContainer</var>.</p></li>
container">clone</span> of <var>initiatorPolicyContainer</var>, given
<var>navigable</var>.</p></li>

<li><p>If <var>responsePolicyContainer</var> is not null, then return
<var>responsePolicyContainer</var>.</p></li>
Expand Down Expand Up @@ -108189,7 +108202,8 @@ location.href = '#foo';</code></pre>
<var>response</var>'s <span data-x="concept-response-url">URL</span>,
null, <var>sourcePolicyContainer</var>, <var>navigable</var>'s <span
data-x="nav-container-document">container document</span>'s <span
data-x="concept-document-policy-container">policy container</span>, and null.</p></li>
data-x="concept-document-policy-container">policy container</span>, null, and
<var>navigable</var>.</p></li>

<li><p>Let <var>finalSandboxFlags</var> be the <span data-x="set union">union</span> of
<var>targetSnapshotParams</var>'s <span data-x="target-snapshot-params-sandbox">sandboxing
Expand Down Expand Up @@ -110066,7 +110080,8 @@ location.href = '#foo';</code></pre>
data-x="she-document-state">document state</span>'s <span
data-x="document-state-history-policy-container">history policy container</span>, null,
<var>navigable</var>'s <span data-x="nav-container-document">container document</span>'s <span
data-x="concept-document-policy-container">policy container</span>, and null.</p></li>
data-x="concept-document-policy-container">policy container</span>, null, and
<var>navigable</var>.</p></li>

<li>
<p>Return a new <span>navigation params</span>, with</p>
Expand Down Expand Up @@ -110461,8 +110476,9 @@ location.href = '#foo';</code></pre>
</li>

<li><p>Set <var>responsePolicyContainer</var> to the result of <span>creating a policy
container from a fetch response</span> given <var>response</var> and <var>request</var>'s
<span data-x="concept-request-reserved-client">reserved client</span>.</p></li>
container from a fetch response</span> given <var>response</var>, <var>request</var>'s
<span data-x="concept-request-reserved-client">reserved client</span>, and
<var>navigable</var>.</p></li>

<li><p>Set <var>finalSandboxFlags</var> to the <span data-x="set union">union</span> of
<var>targetSnapshotParams</var>'s <span data-x="target-snapshot-params-sandbox">sandboxing
Expand Down Expand Up @@ -161929,6 +161945,7 @@ INSERT INTERFACES HERE
Juanmi Huertas,
Jukka K. Korpela,
Jules Cl&eacute;ment-Ripoche,
Julian Descottes,
Julian Reschke,
Julio Lopez,
小勝　純 (Jun Kokatsu),
Expand Down