|
5 | 5 | "category": "F", |
6 | 6 | "mcp_suite": "ccb_mcp_compliance", |
7 | 7 | "prd": { |
8 | | - "user_story": "As a developer, I want to: Audit the Content Security Policy (CSP) enforcement infrastructure in Firefox. Find all C++ source files in `mozilla-firefox/firefox` under `dom/security/` that implement CSP parsing, evaluation, and violation reporting. Specifically: 1. The file that defines `nsCSPParser` — the CSP directive parser. 2. The file that implements `nsCSPContext` — the main CSP context that holds policies. 3. The file that implements CSP violation reporting (`nsCSPUtils` or similar). 4. The header file that declares the `nsIContentSecurityPolicy` XPCOM interface. 5. The file under `dom/security/` that performs script-src evaluation for inline scripts. Report each file path and its primary class or function.", |
9 | | - "constraints": ["Provide specific file paths and repository names in your answer.", "Write your findings to /workspace/answer.json."], |
| 8 | + "user_story": "As a developer, I want to: Audit the Content Security Policy (CSP) enforcement infrastructure in Firefox. Find all C++ source files in `mozilla-firefox/firefox` under `dom/security/` that implement CSP parsing, evaluation, and violation reporting. Specifically: 1. The file that defines `nsCSPParser` \u2014 the CSP directive parser. 2. The file that implements `nsCSPContext` \u2014 the main CSP context that holds policies. 3. The file that implements CSP violation reporting (`nsCSPUtils` or similar). 4. The header file that declares the `nsIContentSecurityPolicy` XPCOM interface. 5. The file under `dom/security/` that performs script-src evaluation for inline scripts. Report each file path and its primary class or function.", |
| 9 | + "constraints": [ |
| 10 | + "Provide specific file paths and repository names in your answer.", |
| 11 | + "Write your findings to /workspace/answer.json." |
| 12 | + ], |
10 | 13 | "success_definition": "Agent successfully identifies relevant files and symbols across all repos in the mozilla-firefox fixture.", |
11 | | - "seed_prompt": "Audit the Content Security Policy (CSP) enforcement infrastructure in Firefox. Find all C++ source files in `mozilla-firefox/firefox` under `dom/security/` that implement CSP parsing, evaluation, and violation reporting. Specifically: 1. The file that defines `nsCSPParser` — the CSP directive parser. 2. The file that implements `nsCSPContext` — the main CSP context that holds policies. 3. The file that implements CSP violation reporting (`nsCSPUtils` or similar). 4. The header file that declares the `nsIContentSecurityPolicy` XPCOM interface. 5. The file under `dom/security/` that performs script-src evaluation for inline scripts. Report each file path and its primary class or function." |
| 14 | + "seed_prompt": "Audit the Content Security Policy (CSP) enforcement infrastructure in Firefox. Find all C++ source files in `mozilla-firefox/firefox` under `dom/security/` that implement CSP parsing, evaluation, and violation reporting. Specifically: 1. The file that defines `nsCSPParser` \u2014 the CSP directive parser. 2. The file that implements `nsCSPContext` \u2014 the main CSP context that holds policies. 3. The file that implements CSP violation reporting (`nsCSPUtils` or similar). 4. The header file that declares the `nsIContentSecurityPolicy` XPCOM interface. 5. The file under `dom/security/` that performs script-src evaluation for inline scripts. Report each file path and its primary class or function." |
12 | 15 | }, |
13 | 16 | "artifacts": { |
14 | 17 | "repo_set_id": "mozilla-firefox", |
15 | 18 | "oracle": { |
16 | | - "required_files": [], |
17 | | - "required_symbols": [], |
| 19 | + "required_files": [ |
| 20 | + { |
| 21 | + "repo": "sg-evals/firefox--871325b8", |
| 22 | + "path": "dom/security/nsCSPParser.h" |
| 23 | + }, |
| 24 | + { |
| 25 | + "repo": "sg-evals/firefox--871325b8", |
| 26 | + "path": "dom/security/nsCSPParser.cpp" |
| 27 | + }, |
| 28 | + { |
| 29 | + "repo": "sg-evals/firefox--871325b8", |
| 30 | + "path": "dom/security/nsCSPContext.h" |
| 31 | + }, |
| 32 | + { |
| 33 | + "repo": "sg-evals/firefox--871325b8", |
| 34 | + "path": "dom/security/nsCSPContext.cpp" |
| 35 | + }, |
| 36 | + { |
| 37 | + "repo": "sg-evals/firefox--871325b8", |
| 38 | + "path": "dom/security/nsCSPUtils.h" |
| 39 | + }, |
| 40 | + { |
| 41 | + "repo": "sg-evals/firefox--871325b8", |
| 42 | + "path": "dom/security/nsCSPUtils.cpp" |
| 43 | + }, |
| 44 | + { |
| 45 | + "repo": "sg-evals/firefox--871325b8", |
| 46 | + "path": "dom/security/nsCSPService.h" |
| 47 | + }, |
| 48 | + { |
| 49 | + "repo": "sg-evals/firefox--871325b8", |
| 50 | + "path": "dom/security/nsCSPService.cpp" |
| 51 | + }, |
| 52 | + { |
| 53 | + "repo": "sg-evals/firefox--871325b8", |
| 54 | + "path": "dom/security/CSPViolationData.h" |
| 55 | + }, |
| 56 | + { |
| 57 | + "repo": "sg-evals/firefox--871325b8", |
| 58 | + "path": "dom/security/CSPViolationData.cpp" |
| 59 | + }, |
| 60 | + { |
| 61 | + "repo": "sg-evals/firefox--871325b8", |
| 62 | + "path": "dom/interfaces/security/nsIContentSecurityPolicy.idl" |
| 63 | + }, |
| 64 | + { |
| 65 | + "repo": "sg-evals/firefox--871325b8", |
| 66 | + "path": "dom/security/moz.build" |
| 67 | + }, |
| 68 | + { |
| 69 | + "repo": "sg-evals/firefox--871325b8", |
| 70 | + "path": "dom/security/nsContentSecurityUtils.cpp" |
| 71 | + }, |
| 72 | + { |
| 73 | + "repo": "sg-evals/firefox--871325b8", |
| 74 | + "path": "dom/security/nsMixedContentBlocker.cpp" |
| 75 | + }, |
| 76 | + { |
| 77 | + "repo": "sg-evals/firefox--871325b8", |
| 78 | + "path": "dom/security/SRIMetadata.cpp" |
| 79 | + }, |
| 80 | + { |
| 81 | + "repo": "sg-evals/firefox--871325b8", |
| 82 | + "path": "dom/security/PolicyContainer.cpp" |
| 83 | + } |
| 84 | + ], |
| 85 | + "required_symbols": [ |
| 86 | + { |
| 87 | + "repo": "sg-evals/firefox--871325b8", |
| 88 | + "path": "dom/security/nsCSPParser.h", |
| 89 | + "symbol": "nsCSPParser" |
| 90 | + }, |
| 91 | + { |
| 92 | + "repo": "sg-evals/firefox--871325b8", |
| 93 | + "path": "dom/security/nsCSPParser.h", |
| 94 | + "symbol": "parseContentSecurityPolicy" |
| 95 | + }, |
| 96 | + { |
| 97 | + "repo": "sg-evals/firefox--871325b8", |
| 98 | + "path": "dom/security/nsCSPContext.h", |
| 99 | + "symbol": "nsCSPContext" |
| 100 | + }, |
| 101 | + { |
| 102 | + "repo": "sg-evals/firefox--871325b8", |
| 103 | + "path": "dom/security/nsCSPContext.cpp", |
| 104 | + "symbol": "ShouldLoad" |
| 105 | + }, |
| 106 | + { |
| 107 | + "repo": "sg-evals/firefox--871325b8", |
| 108 | + "path": "dom/security/nsCSPUtils.h", |
| 109 | + "symbol": "nsCSPUtils" |
| 110 | + }, |
| 111 | + { |
| 112 | + "repo": "sg-evals/firefox--871325b8", |
| 113 | + "path": "dom/security/nsCSPService.h", |
| 114 | + "symbol": "nsCSPService" |
| 115 | + }, |
| 116 | + { |
| 117 | + "repo": "sg-evals/firefox--871325b8", |
| 118 | + "path": "dom/security/CSPViolationData.h", |
| 119 | + "symbol": "CSPViolationData" |
| 120 | + }, |
| 121 | + { |
| 122 | + "repo": "sg-evals/firefox--871325b8", |
| 123 | + "path": "dom/interfaces/security/nsIContentSecurityPolicy.idl", |
| 124 | + "symbol": "nsIContentSecurityPolicy" |
| 125 | + } |
| 126 | + ], |
18 | 127 | "required_references": [], |
19 | | - "dependency_chains": [] |
| 128 | + "dependency_chains": [ |
| 129 | + { |
| 130 | + "steps": [ |
| 131 | + { |
| 132 | + "repo": "sg-evals/firefox--871325b8", |
| 133 | + "path": "dom/interfaces/security/nsIContentSecurityPolicy.idl", |
| 134 | + "symbol": "nsIContentSecurityPolicy" |
| 135 | + }, |
| 136 | + { |
| 137 | + "repo": "sg-evals/firefox--871325b8", |
| 138 | + "path": "dom/security/nsCSPParser.h", |
| 139 | + "symbol": "nsCSPParser" |
| 140 | + }, |
| 141 | + { |
| 142 | + "repo": "sg-evals/firefox--871325b8", |
| 143 | + "path": "dom/security/nsCSPParser.cpp", |
| 144 | + "symbol": "parseContentSecurityPolicy" |
| 145 | + }, |
| 146 | + { |
| 147 | + "repo": "sg-evals/firefox--871325b8", |
| 148 | + "path": "dom/security/nsCSPContext.h", |
| 149 | + "symbol": "nsCSPContext" |
| 150 | + }, |
| 151 | + { |
| 152 | + "repo": "sg-evals/firefox--871325b8", |
| 153 | + "path": "dom/security/nsCSPContext.cpp", |
| 154 | + "symbol": "ShouldLoad" |
| 155 | + }, |
| 156 | + { |
| 157 | + "repo": "sg-evals/firefox--871325b8", |
| 158 | + "path": "dom/security/nsCSPService.cpp", |
| 159 | + "symbol": "nsCSPService" |
| 160 | + }, |
| 161 | + { |
| 162 | + "repo": "sg-evals/firefox--871325b8", |
| 163 | + "path": "dom/security/nsCSPUtils.cpp", |
| 164 | + "symbol": "nsCSPUtils" |
| 165 | + }, |
| 166 | + { |
| 167 | + "repo": "sg-evals/firefox--871325b8", |
| 168 | + "path": "dom/security/CSPViolationData.h", |
| 169 | + "symbol": "CSPViolationData" |
| 170 | + } |
| 171 | + ] |
| 172 | + } |
| 173 | + ] |
20 | 174 | } |
21 | 175 | }, |
22 | 176 | "evaluation": { |
23 | | - "modes": ["deterministic"], |
| 177 | + "modes": [ |
| 178 | + "deterministic" |
| 179 | + ], |
24 | 180 | "checks": [ |
25 | | - { |
26 | | - "type": "file_set_match", |
27 | | - "params": { |
28 | | - "search_pattern": "", |
29 | | - "file_filter": "" |
30 | | - } |
31 | | - } |
32 | | -], |
| 181 | + { |
| 182 | + "type": "file_set_match", |
| 183 | + "params": { |
| 184 | + "search_pattern": "", |
| 185 | + "file_filter": "" |
| 186 | + } |
| 187 | + }, |
| 188 | + { |
| 189 | + "type": "keyword_presence", |
| 190 | + "params": { |
| 191 | + "required_keywords": [ |
| 192 | + "nsCSPParser", |
| 193 | + "parseContentSecurityPolicy", |
| 194 | + "nsCSPContext", |
| 195 | + "ShouldLoad", |
| 196 | + "nsCSPUtils", |
| 197 | + "nsCSPService", |
| 198 | + "CSPViolationData", |
| 199 | + "nsIContentSecurityPolicy" |
| 200 | + ] |
| 201 | + } |
| 202 | + } |
| 203 | + ], |
33 | 204 | "eval_script": "/tests/eval.sh", |
34 | 205 | "pass_exit_code": 0 |
35 | 206 | }, |
36 | 207 | "logging": { |
37 | | - "required_metrics": ["oracle_coverage", "time_to_first_oracle_hit_ms", "unique_repos_touched"] |
| 208 | + "required_metrics": [ |
| 209 | + "oracle_coverage", |
| 210 | + "time_to_first_oracle_hit_ms", |
| 211 | + "unique_repos_touched" |
| 212 | + ] |
38 | 213 | } |
39 | 214 | } |
0 commit comments