merge_pr_49813

Bump mypy from 1.11.0 to 1.14.0 in /tools

Bumps mypy from 1.11.0 to 1.14.0.

• Changelog
• Commits

---

updated-dependencies:

• dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  ...

Signed-off-by: dependabot[bot] support@github.com

merge_pr_49761

[Sanitizer] Add tests for safe + unsafe cases. (#49761)

This tests for differences between setHTML and setHTMLUnsafe.

Since the html5lib testcase format only supports one result per testcase, we use two testcase files with identical inputs,
one each with the expectations for safe and unsafe variants.

Also, a drive-by fix for an issue uncovered by the tests: The
spec demands we block insertion in a <script> element (in safe cases).

Bug: 356601280
Change-Id: I1fb19f60fdcd7262292a983b548baebcaf43a440
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6039899
Commit-Queue: Daniel Vogelheim vogelheim@chromium.org
Reviewed-by: Yifan Luo lyf@chromium.org
Reviewed-by: Joey Arhar jarhar@chromium.org
Cr-Commit-Position: refs/heads/main@{#1397856}

Co-authored-by: Daniel Vogelheim vogelheim@chromium.org

merge_pr_49722

Add web platform test for CSP frame-ancestors with path (#49722)

The CSP frame-ancestors checking algorithm matches the frame
ancestor's origin against the source list. An origin will never match
a URL with a path in the source list. Hence this CL adds a web
platform test checking that frame loads are blocked if frame-ancestors
includes a URL with a path.

Bug: 40780874
Change-Id: I33a461a1f69b040d8a5e803978161352821d4161
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6094569
Reviewed-by: Antonio Sartori antoniosartori@chromium.org
Commit-Queue: Emily Stark estark@chromium.org
Cr-Commit-Position: refs/heads/main@{#1397345}

Co-authored-by: Emily Stark estark@google.com

merge_pr_49826

Accessibility: Input with multiple explicit label elements associated (#49826)

merge_pr_49823

Add missing new-line at the end of lint.ignore (#49823)

This PR add a missing new line at the end of lint.ignore, to fix the broken CTS CI workflow which would write line to that file assuming there is a new line existed at the end of file.

merge_pr_49816

part 1: Move delete-before-invisible-line-break.html and forwarddelete-before-invisible-line-break.html to under `mozilla

These tests were introduced in bug 1923251 at first landing. They are for
testing the behavior when the last character before block boundary is changed
because we require a padding line break if the last character is a collapsible
white-space.

However, Chrome uses an NBSP for the last white-space and <br> does not make
the last collapsible white-space visible different from Gecko. Therefore,
Microsoft has changed the test and changed the expected results which won't test
what I'd have liked to check.

In the Chrome's behavior, they are not required, but they are important to touch
our text editing code. So, they should be under Mozilla specific directory.

Differential Revision: https://phabricator.services.mozilla.com/D231661

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1936196
gecko-commit: 3ad01295891b44d4d569e436b2dc0341c79b6fae
gecko-reviewers: m_kato

merge_pr_49805

layout: Implement keyword sizes for block layout heuristics

Block layout uses some heuristics to guess whether margins are separated
by clearance and then don't collapse. These heuristics now take the
min-content, max-content, fit-content and stretch sizing keywords into
account.

Signed-off-by: Oriol Brufau obrufau@igalia.com

merge_pr_49820

[SRI Message Signatures] Drop the alg parameter.

As per WICG/signature-based-sri#33, the plan
is to reject the alg parameter entirely, rather than locking it to a
single value.

Bug: 385160702
Change-Id: Iba57570fd8d0136b1d68e143a2fde5f48cd69806
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6110599
Reviewed-by: Kenichi Ishibashi bashi@chromium.org
Commit-Queue: Mike West mkwst@chromium.org
Reviewed-by: Yoav Weiss (@Shopify) yoavweiss@chromium.org
Cr-Commit-Position: refs/heads/main@{#1399650}

merge_pr_49808

[wdspec] Fix WebDriver classic and BiDi drag and drop position tests.

Differential Revision: https://phabricator.services.mozilla.com/D232725

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1871346
gecko-commit: d13caad2c6161773f359021d3ebe132880d93bf6
gecko-reviewers: webdriver-reviewers, Sasha

merge_pr_49800

layout: Fix intrinsic contributions of anonymous blocks

In order to compute the inline min-content and max-content contributions
of an anonymous block, we were finding its min-content and max-content
inline size with a SizeConstraint coming from the block size of the box.

However, anonymous blocks do not establish a containing block for their
contents, so this patch uses a SizeConstraint from the block size of the
containing block.

Signed-off-by: Oriol Brufau obrufau@igalia.com