Meziantou.Framework

cookies

edit

WPT coverage of the tests of cookies at the revision 5602b0f210e3. The tests link to their results in the browsers on wpt.fyi. The tentative tests (experimental features) and the reftests are listed separately from the stable tests.

GroupPassingTestsDisabledPass rate
Stable7176093%
Tentative1113085%
Reftests000–
All8289092%

Failure reasons

The tests that do not pass (failing or disabled), by kind of reason. A test with several reasons counts once per kind.

  • TEST BUG: 3
  • NOT IMPLEMENTED: 4

Stable tests

TestResultSubtestsKindDescription
attributes/attributes-ctl.sub.htmlFail428 / 429TEST BUGa Secure attribute followed by a tab sets the cookie from an insecure page, which RFC 6265bis rejects (fails in every browser)
attributes/domain.sub.htmlPass55 / 55
attributes/expires.htmlPass23 / 23
attributes/httponly-overwrite.https.window.jsPass8 / 8
attributes/invalid.htmlPass26 / 26
attributes/max-age.htmlPass10 / 10
attributes/path-redirect.htmlPass18 / 18
attributes/path.htmlPass21 / 21
attributes/secure-non-secure.htmlPass12 / 12
attributes/secure.https.htmlPass9 / 9
cookie-enabled-noncookie-frame.htmlPass1 / 1
domain/domain-attribute-host-with-and-without-leading-period.sub.https.htmlPass3 / 3
domain/domain-attribute-host-with-leading-period.sub.https.htmlPass3 / 3
domain/domain-attribute-idn-host.sub.https.htmlPass6 / 6
domain/domain-attribute-matches-host.sub.https.htmlPass3 / 3
domain/domain-attribute-missing.sub.htmlPass3 / 3
encoding/charset.htmlPass6 / 6
meta-blocked.htmlPass1 / 1
name/name-ctl.htmlFail64 / 66TEST BUGa line feed or a carriage return in the Set-Cookie header ends the header, so the cookie is neither rejected nor modified (fails in every browser)
name/name.htmlPass45 / 45
navigated-away.htmlPass1 / 1
ordering/ordering.sub.htmlPass5 / 5
origin-bound-cookies/port-bound-cookies.htmlFail0 / 1NOT IMPLEMENTEDorigin-bound cookies (the cookies are not bound to the scheme and the port of the origin that set them)
origin-bound-cookies/scheme-bound-cookies.https.htmlFail1 / 2NOT IMPLEMENTEDorigin-bound cookies (the cookies are not bound to the scheme and the port of the origin that set them)
partitioned-cookies/partitioned-cookies-samesite-attribute.https.htmlPass2 / 2
path/default.htmlPass1 / 1
path/match-percent-encoded.https.window.jsPass10 / 10
path/match-segment-boundaries.https.window.jsPass6 / 6
path/match.htmlPass16 / 16
path/non-ascii-path-attribute.https.window.jsPass7 / 7
prefix/__Host-Http.https.htmlPass7 / 7
prefix/__Http.https.htmlPass7 / 7
prefix/__host.document-cookie.htmlPass18 / 18
prefix/__host.document-cookie.https.htmlPass14 / 14
prefix/__host.explicit-path.https.window.jsPass5 / 5
prefix/__host.header.htmlPass26 / 26
prefix/__host.header.https.htmlPass20 / 20
prefix/__secure.document-cookie.htmlPass12 / 12
prefix/__secure.document-cookie.https.htmlPass12 / 12
prefix/__secure.header.htmlPass16 / 16
prefix/__secure.header.https.htmlPass16 / 16
prefix/document-cookie.non-secure.htmlPass35 / 35
samesite-none-secure/cookies-without-samesite-must-be-secure.https.htmlPass1 / 1
samesite/about-blank-nested.https.htmlPass1 / 1
samesite/about-blank-subresource.https.htmlPass1 / 1
samesite/about-blank-toplevel.https.htmlPass1 / 1
samesite/fetch.https.htmlPass12 / 12
samesite/form-get-blank-reload.https.htmlPass3 / 3
samesite/form-get-blank.https.htmlPass12 / 12
samesite/form-post-blank-reload.https.htmlPass3 / 3
samesite/form-post-blank.https.htmlPass12 / 12
samesite/get_all_cookies-default-samesite.htmlPass1 / 1
samesite/get_named_cookie-default-samesite.htmlPass1 / 1
samesite/iframe-reload.https.htmlPass3 / 3
samesite/iframe.document.https.htmlPass2 / 2
samesite/iframe.https.htmlPass21 / 21
samesite/img.https.htmlPass12 / 12
samesite/multiple-samesite-attributes.https.htmlPass12 / 12
samesite/sandbox-iframe-nested.https.htmlPass1 / 1
samesite/sandbox-iframe-subresource.https.htmlPass1 / 1
samesite/setcookie-lax.https.htmlPass2 / 2
samesite/setcookie-navigation.https.htmlPass8 / 8
samesite/window-open-reload.https.htmlPass3 / 3
samesite/window-open.https.htmlPass12 / 12
secure/set-from-dom.https.sub.htmlPass2 / 2
secure/set-from-dom.sub.htmlPass2 / 2
secure/set-from-http.https.sub.htmlPass2 / 2
secure/set-from-http.sub.htmlPass2 / 2
secure/set-from-ws.sub.htmlPass1 / 1
secure/set-from-wss.https.sub.htmlPass1 / 1
set-and-delete-document-cookie.window.jsPass1 / 1
size/attributes.www.sub.htmlPass14 / 14
size/name-and-value.htmlPass11 / 11
value/value-ctl.htmlFail64 / 66TEST BUGa line feed or a carriage return in the Set-Cookie header ends the header, so the cookie is neither rejected nor modified (fails in every browser)
value/value-overwrite.https.window.jsPass25 / 25
value/value.htmlPass28 / 28

Tentative tests

TestResultSubtestsKindDescription
partitioned-cookies/partitioned-cookies-a-b-a-embed.tentative.https.htmlPass1 / 1
partitioned-cookies/partitioned-cookies-cross-site-subresource-to-same-site-redirect.tentative.https.htmlPass1 / 1
partitioned-cookies/partitioned-cookies-parallel-iframes.embed.tentative.https.htmlPass1 / 1
partitioned-cookies/partitioned-cookies-same-site-subresource-to-cross-site-redirect.tentative.https.htmlPass2 / 2
partitioned-cookies/partitioned-cookies-top-level-redirect.tentative.https.htmlPass1 / 1
partitioned-cookies/partitioned-cookies.tentative.https.htmlPass7 / 7
samesite/sandbox-allow-same-site-none-cookies-value.tentative.https.htmlPass4 / 4
schemeful-same-site/schemeful-iframe-subresource.tentative.htmlPass1 / 1
schemeful-same-site/schemeful-navigation.tentative.htmlPass2 / 2
schemeful-same-site/schemeful-subresource.tentative.htmlPass2 / 2
schemeful-same-site/schemeful-websockets.sub.tentative.htmlPass1 / 1
third-party-cookies/third-party-cookie-heuristics.tentative.https.htmlFail4 / 6NOT IMPLEMENTEDblocking the third-party cookies (the tentative tests expect the cross-site requests and iframes to have no cookies)
third-party-cookies/third-party-cookies.tentative.https.htmlFail4 / 10NOT IMPLEMENTEDblocking the third-party cookies (the tentative tests expect the cross-site requests and iframes to have no cookies)