diff options
Diffstat (limited to 'tests/wpt/meta/css/css-values/attr-security.html.ini')
| -rw-r--r-- | tests/wpt/meta/css/css-values/attr-security.html.ini | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/tests/wpt/meta/css/css-values/attr-security.html.ini b/tests/wpt/meta/css/css-values/attr-security.html.ini index 7f13bf69342..de13155f29d 100644 --- a/tests/wpt/meta/css/css-values/attr-security.html.ini +++ b/tests/wpt/meta/css/css-values/attr-security.html.ini @@ -38,3 +38,39 @@ [CSS Values and Units Test: attr() security limitations 14] expected: FAIL + + ['--x: image-set(attr(data-foo))' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['--x: src(attr(data-foo))' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['background-image: src("https://does-not-exist.test/404.png")' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['--x: src(string("https://does-not-exist.test" attr(data-foo)))' with data-foo="/404.png"] + expected: FAIL + + ['background-image: src(string("https://does-not-exist.test/""404.png"))' with data-foo="/404.png"] + expected: FAIL + + ['--x: attr(data-foo type(<url>))' with data-foo="url(https://does-not-exist.test/404.png)"] + expected: FAIL + + ['--x: image(attr(data-foo))' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['background-image: image("https://does-not-exist.test/404.png")' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['background-image: url(https://does-not-exist.test/404.png), attr(data-foo type(<image>))' with data-foo="linear-gradient(#000000, #ffffff)"] + expected: FAIL + + ['--x: image-set(var(--y, attr(data-foo)))' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['--x: image-set(var(--some-string))' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL + + ['--x: image-set(var(--some-string-list))' with data-foo="https://does-not-exist.test/404.png"] + expected: FAIL |