[WPT] Do not allow hash method mismatch in consuming preloads

Bug: whatwg/html#7973 Change-Id: I1bbe327080a83bcd74f46f64668cf73490ef6d7c Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3681845 Reviewed-by: Domenic Denicola <[email protected]> Commit-Queue: Hiroshige Hayashizaki <[email protected]> Cr-Commit-Position: refs/heads/main@{#1011137}
web-platform-tests · Jun 6, 2022 · b2e2d8a · b2e2d8a
1 parent b8ebea7
commit b2e2d8a
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/preload/subresource-integrity.html b/preload/subresource-integrity.html
@@ -331,18 +331,28 @@
         {integrity: sha256}
       )
 
-      // This is an acceptable failure
       SRIPreloadTest(
         true,
         true,
-        `[Tentative] Same-origin ${destination} with matching digest does not reuse preload with matching but stronger digest.`,
+        `Same-origin ${destination} with matching digest does not reuse preload with matching but stronger digest.`,
         2,
         destination,
         same_origin_prefix + destination + ext + `?${token()}`,
         {integrity: sha384},
         {integrity: sha256},
       )
 
+      SRIPreloadTest(
+        true,
+        false,
+        `Same-origin ${destination} with wrong digest does not reuse preload with correct and stronger digest.`,
+        2,
+        destination,
+        same_origin_prefix + destination + ext + `?${token()}`,
+        {integrity: sha384},
+        {integrity: "sha256-deadbeefQ15RYHFvsYdWumweeFAw0hJDTFt9seErghA="}
+      )
+
       SRIPreloadTest(
         true,
         true,