Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 6627b0ce039fd9655a6754e98c1effa67241086e
https://github.com/WebKit/WebKit/commit/6627b0ce039fd9655a6754e98c1effa67241086e
Author: Frédéric Wang Nélar <[email protected]>
Date: 2026-08-15 (Sat, 15 Aug 2026)
Changed paths:
A
LayoutTests/http/tests/security/contentSecurityPolicy/invalid-host-part-wildcard-dot-expected.txt
A
LayoutTests/http/tests/security/contentSecurityPolicy/invalid-host-part-wildcard-dot.html
M Source/WebCore/page/csp/ContentSecurityPolicySourceList.cpp
Log Message:
-----------
CSP source-expression *. is not treated as invalid
https://bugs.webkit.org/show_bug.cgi?id=321780
Reviewed by Patrick Griffis.
ContentSecurityPolicySourceList::parseHost successfuly parses "*." as a
Host with hasWildcard set to true and value set to an empty string,
instead of treating it as invalid. This is visible in the error console,
because no warning is triggered for that case.
*
LayoutTests/http/tests/security/contentSecurityPolicy/invalid-host-part-wildcard-dot-expected.txt:
Added.
*
LayoutTests/http/tests/security/contentSecurityPolicy/invalid-host-part-wildcard-dot.html:
Added.
* Source/WebCore/page/csp/ContentSecurityPolicySourceList.cpp:
(WebCore::ContentSecurityPolicySourceList::parseHost): return std::nullopt for
"*.".
Canonical link: https://commits.webkit.org/319232@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
