Issues

• WebKit export of https://bugs.webkit.org/show_bug.cgi?id=319577

  content-security-policywebkit-export
  Unread
  web-platform-tests/wpt#63779·annevk opened Oct 16, 2026 · Updated Oct 16, 2026
  

• Update wpt tests for CSP script-src 'trusted-types-eval'

  chromium-exportcontent-security-policy
  Unread
  web-platform-tests/wpt#63448·chromium-wpt-export-bot opened Oct 9, 2026 · Updated Oct 13, 2026

• [Blink] Resolve CSS Image and Font values per-document

  chromium-exportcontent-security-policy
  Unread
  web-platform-tests/wpt#62906·chromium-wpt-export-bot opened Sep 23, 2026 · Updated Sep 23, 2026
  1

• CSP: Extend tests for wildcard host and port.

  content-security-policy
  Unread
  web-platform-tests/wpt#61941·fred-wang opened Aug 14, 2026 · Updated Sep 29, 2026
  5

  

• CSP reporting-api: add test for ReportObserver without end points.

  content-security-policy
  Unread
  web-platform-tests/wpt#61687·fred-wang opened Aug 3, 2026 · Updated Aug 4, 2026·Draft
  2

  

• [import-bytes] add initial tests for import bytes proposal

  content-security-policyhtml
  Unread
  web-platform-tests/wpt#56938·styfle opened Dec 29, 2025 · Updated May 8, 2026
  

• Update content-security-policy/support/checkReport.sub.js to not crash on missing report

  content-security-policy
  Unread
  web-platform-tests/wpt#54488·nicolo-ribaudo opened Aug 23, 2025 · Updated Aug 23, 2025
  1

  

• accepting windows backslash paths

  accelerometeraiambient-lightappmanifestassetsattribution-reportingautoplay-policy-detectionAzure Pipelinesbackground-fetchbackground-syncbadgingbattery-statusbeaconbluetoothclipboard-apisclose-watchercompositingcompressioncompute-pressureconnection-allowlistconsolecontactscontainer-timingcontent-indexcontent-security-policycookie-storecookiescookiestorecpu-performancecredential-managementCSS2css-aligncss-anchor-positioncss-animationscss-backgroundscss-borderscss-boxcss-breakcss-cascadecss-colorcss-color-hdrcss-conditionalcss-containcss-contentcss-counter-stylescss-displaycss-envcss-flexboxcss-font-loadingcss-fontscss-formscss-gapscss-gridcss-highlight-apicss-imagescss-inlinecss-listscss-maskingcss-masonrycss-mixinscss-multicolcss-nestingcss-overflowcss-overscroll-behaviorcss-pagecss-positioncss-pseudocss-rhythmcss-rubycss-scroll-anchoringcss-scroll-snapcss-scrollbarscss-shadow-partscss-shapescss-sizingcss-tablescss-textcss-text-decorfetchFileAPIGitHub ActionsIndexedDBTaskclusterurlWebCryptoAPI.well-knownwg-cg_wicgwg-csswg-daswg-s_csswg-s_webappswg-s_webappsecwg-s_webeditingwg-s_webperfwg-wai_ariawg-webappswg-webcrypto
  Unread
  web-platform-tests/wpt#53459·mertcanaltin opened Jun 28, 2025 · Updated Apr 2, 2026
  10

  

• Update connect-src blocked tests to match spec

  content-security-policy
  Unread
  web-platform-tests/wpt#51097·lukewarlow opened Mar 4, 2025 · Updated Mar 4, 2025
  7

  

• connect-src tests allow two non-interopable implementations to both pass

  content-security-policywebappsec
  web-platform-tests/wpt#50387 · Filter by author lukewarlow opened on Jan 30, 2025
  2

• Remove domain from report-hash tests

  content-security-policy
  Unread
  web-platform-tests/wpt#49949·yoavweiss opened Jan 7, 2025 · Updated Jan 7, 2025
  

• Sandboxed origin comparison should use window.origin instead of location.origin

  content-security-policy
  Unread
  web-platform-tests/wpt#49840·icesfont opened Dec 24, 2024 · Updated Dec 24, 2024
  

• Content-Security-Policy (CSP) parsing for invalid bytes in directives

  content-security-policy
  Unread
  web-platform-tests/wpt#48855·JannisBush opened Oct 29, 2024 · Updated Oct 29, 2024
  

• Start running the parsed file lints against support files

  appmanifestclient-hintscompute-pressurecontent-security-policycookiesfenced-framefetchfocushtmlinfraintersection-observerlintloadingnav-tracking-mitigationsperformance-timelinepresentation-apiresource-timingservice-workersshared-storageshared-storage-selecturl-limitspeculation-ruleswg-cg_privacycgwg-cg_wicgwg-daswg-s_htmlwgwg-s_webappswg-s_webperfwg-secondscreenwg-swworkersworklets
  Unread
  web-platform-tests/wpt#48320·gsnedders opened Sep 23, 2024 · Updated Mar 3, 2025
  2

  

• frame-ancestor reporting test issue due to download triggered

  content-security-policy
  web-platform-tests/wpt#45249 · Filter by author JannisBush opened on Mar 21, 2024

• [WPT] [CSP] Tentative worker-src strict-dynamic test

  chromium-exportcontent-security-policydo not merge yet
  Unread
  web-platform-tests/wpt#43723·chromium-wpt-export-bot opened Dec 19, 2023 · Updated Dec 19, 2023
  1

• [WPT] CSP meta elements and preload scanner

  assetschromium-exportcontent-security-policydo not merge yet
  Unread
  web-platform-tests/wpt#43492·chromium-wpt-export-bot opened Dec 4, 2023 · Updated Dec 4, 2023
  1

• WPT tests for security features applied to speculation rules ruleset fetch

  assetschromium-exportcontent-security-policydo not merge yetfetchmixed-contentreferrer-policyspeculation-ruleswg-cg_wicgwg-s_webappsec
  Unread
  web-platform-tests/wpt#43488·chromium-wpt-export-bot opened Dec 2, 2023 · Updated Dec 6, 2023
  1

• [WPT] Fix polling reports

  chromium-exportcontent-security-policydo not merge yetinfranetwork-error-loggingpermissions-policyweb-bundlewg-s_webappsecwg-s_webperf
  Unread
  web-platform-tests/wpt#43201·chromium-wpt-export-bot opened Nov 16, 2023 · Updated Nov 16, 2023
  1

• [WPT] [CSP] Fix flaky test checking reports

  chromium-exportcontent-security-policydo not merge yetinfranetwork-error-loggingwg-s_webperf
  Unread
  web-platform-tests/wpt#43198·chromium-wpt-export-bot opened Nov 16, 2023 · Updated Nov 16, 2023
  1

• CSP: Add new directives to CSPEE strict-dynamic test

  content-security-policy
  Unread
  web-platform-tests/wpt#40056·tosmolka opened May 17, 2023 · Updated Oct 30, 2023
  1

  

• WebKit export of https://bugs.webkit.org/show_bug.cgi?id=243057

  content-security-policywebkit-export
  Unread
  web-platform-tests/wpt#34932·sysrqb opened Jul 22, 2022 · Updated Mar 7, 2024
  2

• blocked-uri in CSP report should be the request URI, not the URI after the redirect

  content-security-policy
  web-platform-tests/wpt#27384 · Filter by author ckerschb opened on Jan 29, 2021
  4

• csp: bump set-cookie expiration to 2121

  content-security-policy
  Unread
  web-platform-tests/wpt#23668·g-k opened May 18, 2020 · Updated Feb 14, 2022
  1

  

• [content-security-policy] script-src-strict_dynamic_in_img-src.html is imprecise

  content-security-policy
  web-platform-tests/wpt#20226 · Filter by author jugglinmike opened on Nov 13, 2019