Re: CSP: 'connect-src' should not cause exceptions. (#5205)

 [View the complete job log.](https://travis-ci.org/w3c/web-platform-tests/jobs/214005975)

# Chrome (unstable channel) #
Testing web-platform-tests at revision 7da99af8fba8e6f463765560cb8f6d4362e03fd8
Using browser at version 59.0.3047.0 dev
Starting 10 test iterations
All results were stable
## All results ##
<details>
<summary>25 tests ran</summary>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/connect-src/connect-src-beacon-blocked.sub.html">/content-security-policy/connect-src/connect-src-beacon-blocked.sub.html</a></summary>


|            Subtest             | Results |                                                                                             Messages                                                                                             |
|--------------------------------|---------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|                                | OK      |                                                                                                                                                                                                  |
| `sendBeacon should not throw.` | FAIL    | `Failed to execute 'sendBeacon' on 'Navigator': Refused to send beacon to 'http://www.web-platform.test:8000/common/text-plain.txt' because it violates the document's Content Security Policy.` |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/connect-src/connect-src-eventsource-blocked.sub.html">/content-security-policy/connect-src/connect-src-eventsource-blocked.sub.html</a></summary>


| Subtest | Results | Messages |
|---------|---------|----------|
|         | TIMEOUT |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/connect-src/connect-src-websocket-blocked.sub.html">/content-security-policy/connect-src/connect-src-websocket-blocked.sub.html</a></summary>


|               Subtest                | Results |                                                                           Messages                                                                          |
|--------------------------------------|---------|-------------------------------------------------------------------------------------------------------------------------------------------------------------|
|                                      | OK      |                                                                                                                                                             |
| `WebSocket should fire error event.` | FAIL    | `Failed to construct 'WebSocket': Refused to connect to 'ws://www.web-platform.test:8888/echo' because it violates the document's Content Security Policy.` |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/connect-src/connect-src-xmlhttprequest-blocked.sub.html">/content-security-policy/connect-src/connect-src-xmlhttprequest-blocked.sub.html</a></summary>


|                   Subtest                   | Results |                                                                                           Messages                                                                                          |
|---------------------------------------------|---------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|                                             | OK      |                                                                                                                                                                                             |
| `XHR should fire onerror.`                  | FAIL    | `Failed to execute 'open' on 'XMLHttpRequest': Refused to connect to 'http://www.web-platform.test:8000/common/text-plain.txt' because it violates the document's Content Security Policy.` |
| `XHR should fire onerror after a redirect.` | PASS    |                                                                                                                                                                                             |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/inside-worker/dedicated-inheritance.html">/content-security-policy/inside-worker/dedicated-inheritance.html</a></summary>


|                                                      Subtest                                                       | Results |     Messages     |
|--------------------------------------------------------------------------------------------------------------------|---------|------------------|
|                                                                                                                    | TIMEOUT |                  |
| `Filesystem and blob.`                                                                                             | PASS    |                  |
| `Same-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27none%27)`                 | PASS    | `{}`             |
| `Same-origin XHR in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27none%27)`                       | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27none%27)`                | PASS    | `{}`             |
| `Cross-origin XHR in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27none%27)`                      | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27none%27)` | PASS    | `{}`             |
| `Same-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27none%27)`                 | PASS    | `{}`             |
| `Same-origin XHR in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27none%27)`                       | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27none%27)`                | PASS    | `{}`             |
| `Cross-origin XHR in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27none%27)`                      | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27none%27)` | PASS    | `{}`             |
| `Same-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20*)`                          | PASS    | `{}`             |
| `Same-origin XHR in http:?pipe=sub|header(Content-Security-Policy,connect-src%20*)`                                | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20*)`                         | PASS    | `{}`             |
| `Cross-origin XHR in http:?pipe=sub|header(Content-Security-Policy,connect-src%20*)`                               | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20*)`          | PASS    | `{}`             |
| `Same-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20*)`                          | PASS    | `{}`             |
| `Same-origin XHR in http:?pipe=sub|header(Content-Security-Policy,default-src%20*)`                                | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20*)`                         | PASS    | `{}`             |
| `Cross-origin XHR in http:?pipe=sub|header(Content-Security-Policy,default-src%20*)`                               | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20*)`          | PASS    | `{}`             |
| `Same-origin 'fetch()' in http:`                                                                                   | PASS    | `{}`             |
| `Same-origin XHR in http:`                                                                                         | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:`                                                                                  | PASS    | `{}`             |
| `Cross-origin XHR in http:`                                                                                        | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:`                                                                   | PASS    | `{}`             |
| `Same-origin 'fetch()' in blob:`                                                                                   | PASS    | `{}`             |
| `Same-origin XHR in blob:`                                                                                         | PASS    | `{}`             |
| `Cross-origin 'fetch()' in blob:`                                                                                  | PASS    | `{}`             |
| `Cross-origin XHR in blob:`                                                                                        | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in blob:`                                                                   | PASS    | `{}`             |
| `Same-origin 'fetch()' in filesystem:`                                                                             | PASS    | `{}`             |
| `Same-origin XHR in filesystem:`                                                                                   | PASS    | `{}`             |
| `Cross-origin 'fetch()' in filesystem:`                                                                            | PASS    | `{}`             |
| `Cross-origin XHR in filesystem:`                                                                                  | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in filesystem:`                                                             | PASS    | `{}`             |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/inside-worker/shared-inheritance.html">/content-security-policy/inside-worker/shared-inheritance.html</a></summary>


|                                                      Subtest                                                       | Results |     Messages     |
|--------------------------------------------------------------------------------------------------------------------|---------|------------------|
|                                                                                                                    | TIMEOUT |                  |
| `Same-origin 'fetch()' in http:`                                                                                   | PASS    | `{}`             |
| `Same-origin XHR in http:`                                                                                         | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:`                                                                                  | PASS    | `{}`             |
| `Cross-origin XHR in http:`                                                                                        | PASS    | `{}`             |
| `Same-origin => cross-origin 'fetch()' in http:`                                                                   | PASS    | `{}`             |
| `Same-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27self%27)`                 | PASS    | `{}`             |
| `Same-origin XHR in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27self%27)`                       | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27self%27)`                | PASS    | `{}`             |
| `Cross-origin XHR in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27self%27)`                      | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,connect-src%20%27self%27)` | PASS    | `{}`             |
| `Same-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27self%27)`                 | PASS    | `{}`             |
| `Same-origin XHR in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27self%27)`                       | PASS    | `{}`             |
| `Cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27self%27)`                | PASS    | `{}`             |
| `Cross-origin XHR in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27self%27)`                      | TIMEOUT | `Test timed out` |
| `Same-origin => cross-origin 'fetch()' in http:?pipe=sub|header(Content-Security-Policy,default-src%20%27self%27)` | PASS    | `{}`             |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image-from-script.sub.html">/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image-from-script.sub.html</a></summary>


|                       Subtest                        | Results | Messages |
|------------------------------------------------------|---------|----------|
|                                                      | OK      |          |
| `Non-redirected cross-origin URLs are not stripped.` | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image.sub.html">/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-cross-origin-image.sub.html</a></summary>


|                       Subtest                        | Results | Messages |
|------------------------------------------------------|---------|----------|
|                                                      | OK      |          |
| `Non-redirected cross-origin URLs are not stripped.` | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-image-from-script.sub.html">/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-image-from-script.sub.html</a></summary>


|                       Subtest                        | Results | Messages |
|------------------------------------------------------|---------|----------|
|                                                      | OK      |          |
| `Non-redirected cross-origin URLs are not stripped.` | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-image.sub.html">/content-security-policy/securitypolicyviolation/securitypolicyviolation-block-image.sub.html</a></summary>


|                       Subtest                       | Results | Messages |
|-----------------------------------------------------|---------|----------|
|                                                     | OK      |          |
| `Non-redirected same-origin URLs are not stripped.` | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/dedicated-child.sub.html">/content-security-policy/worker-src/dedicated-child.sub.html</a></summary>


|                              Subtest                              | Results | Messages |
|-------------------------------------------------------------------|---------|----------|
|                                                                   | OK      |          |
| `Same-origin dedicated worker allowed by host-source expression.` | PASS    |          |
| `blob: dedicated worker allowed by 'blob:'.`                      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/dedicated-fallback.sub.html">/content-security-policy/worker-src/dedicated-fallback.sub.html</a></summary>


|                              Subtest                              | Results | Messages |
|-------------------------------------------------------------------|---------|----------|
|                                                                   | OK      |          |
| `Same-origin dedicated worker allowed by host-source expression.` | PASS    |          |
| `blob: dedicated worker allowed by 'blob:'.`                      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/dedicated-list.sub.html">/content-security-policy/worker-src/dedicated-list.sub.html</a></summary>


|                              Subtest                              | Results | Messages |
|-------------------------------------------------------------------|---------|----------|
|                                                                   | OK      |          |
| `Same-origin dedicated worker allowed by host-source expression.` | PASS    |          |
| `blob: dedicated worker allowed by 'blob:'.`                      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/dedicated-none.sub.html">/content-security-policy/worker-src/dedicated-none.sub.html</a></summary>


|                              Subtest                              | Results | Messages |
|-------------------------------------------------------------------|---------|----------|
|                                                                   | OK      |          |
| `Same-origin dedicated worker blocked by host-source expression.` | PASS    |          |
| `blob: dedicated worker blocked by 'blob:'.`                      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/dedicated-self.sub.html">/content-security-policy/worker-src/dedicated-self.sub.html</a></summary>


|                      Subtest                      | Results | Messages |
|---------------------------------------------------|---------|----------|
|                                                   | OK      |          |
| `Same-origin dedicated worker allowed by 'self'.` | PASS    |          |

</details>
<details>
<summary><a href="https://w3c-test.org/submissions/5205/content-security-policy/worker-src/service-child.https.sub.html">/content-security-policy/worker-src/service-child.https.sub.html</a></summary>


|                             Subtest                             | Results | Messages |
|-----------------------------------------------------------------|---------|----------|
|                                                                 | OK      |          |
| `Same-origin service worker allowed by host-source expression.` | PASS    |          |

</details>
<details>
<summary><a href="https://w3c-test.org/submissions/5205/content-security-policy/worker-src/service-fallback.https.sub.html">/content-security-policy/worker-src/service-fallback.https.sub.html</a></summary>


|                             Subtest                             | Results | Messages |
|-----------------------------------------------------------------|---------|----------|
|                                                                 | OK      |          |
| `Same-origin service worker allowed by host-source expression.` | PASS    |          |

</details>
<details>
<summary><a href="https://w3c-test.org/submissions/5205/content-security-policy/worker-src/service-list.https.sub.html">/content-security-policy/worker-src/service-list.https.sub.html</a></summary>


|                             Subtest                             | Results | Messages |
|-----------------------------------------------------------------|---------|----------|
|                                                                 | OK      |          |
| `Same-origin service worker allowed by host-source expression.` | PASS    |          |

</details>
<details>
<summary><a href="https://w3c-test.org/submissions/5205/content-security-policy/worker-src/service-none.https.sub.html">/content-security-policy/worker-src/service-none.https.sub.html</a></summary>


|                     Subtest                     | Results | Messages |
|-------------------------------------------------|---------|----------|
|                                                 | OK      |          |
| `Same-origin service worker blocked by 'none'.` | PASS    |          |

</details>
<details>
<summary><a href="https://w3c-test.org/submissions/5205/content-security-policy/worker-src/service-self.https.sub.html">/content-security-policy/worker-src/service-self.https.sub.html</a></summary>


|                     Subtest                     | Results | Messages |
|-------------------------------------------------|---------|----------|
|                                                 | OK      |          |
| `Same-origin service worker allowed by 'self'.` | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/shared-child.sub.html">/content-security-policy/worker-src/shared-child.sub.html</a></summary>


|                      Subtest                      | Results | Messages |
|---------------------------------------------------|---------|----------|
|                                                   | OK      |          |
| `Same-origin dedicated worker allowed by 'self'.` | PASS    |          |
| `blob: dedicated worker allowed by 'blob:'.`      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/shared-fallback.sub.html">/content-security-policy/worker-src/shared-fallback.sub.html</a></summary>


|                      Subtest                      | Results | Messages |
|---------------------------------------------------|---------|----------|
|                                                   | OK      |          |
| `Same-origin dedicated worker allowed by 'self'.` | PASS    |          |
| `blob: dedicated worker allowed by 'blob:'.`      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/shared-list.sub.html">/content-security-policy/worker-src/shared-list.sub.html</a></summary>


|                      Subtest                      | Results | Messages |
|---------------------------------------------------|---------|----------|
|                                                   | OK      |          |
| `Same-origin dedicated worker allowed by 'self'.` | PASS    |          |
| `blob: dedicated worker allowed by 'blob:'.`      | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/shared-none.sub.html">/content-security-policy/worker-src/shared-none.sub.html</a></summary>


|                    Subtest                     | Results | Messages |
|------------------------------------------------|---------|----------|
|                                                | OK      |          |
| `Same-origin shared worker blocked by 'none'.` | PASS    |          |
| `blob: shared worker blocked by 'none'.`       | PASS    |          |

</details>
<details>
<summary><a href="http://w3c-test.org/submissions/5205/content-security-policy/worker-src/shared-self.sub.html">/content-security-policy/worker-src/shared-self.sub.html</a></summary>


|                      Subtest                      | Results | Messages |
|---------------------------------------------------|---------|----------|
|                                                   | OK      |          |
| `Same-origin dedicated worker allowed by 'self'.` | PASS    |          |

</details>
</details>

View on GitHub: https://github.com/w3c/web-platform-tests/pull/5205#issuecomment-288543404

Received on Wednesday, 22 March 2017 21:20:42 UTC