On Fri, Nov 17, 2017 at 9:25 AM, James Graham <ja...@hoppipolla.co.uk> wrote:
> On 17/11/17 16:06, Daniel Veditz wrote: > >> We fail many of the existing CSP web platform tests, despite having >> implemented most of the features, because they were written to use the >> violation events to check the results. >> >> Is that an issue with our implementation or something we should fix in > the tests? In either case it seems problematic to have such a feature and > no way of checking for compatibility with other implementations. > The issue with our implementation is that we don't yet support CSP violation DOM events (this Intent to Ship) and that very feature is relied on by most of the existing CSP web platform tests. Could you fix the tests? I suppose you could set up a CSP reporting end point and check test results that way, but that would add complexity just to work around the fact that we haven't implemented this one bit of the spec, which we are now implementing. -Dan Veditz _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
