Skip to content

ref(security): Remove obsolete HPKP/Expect-CT/Expect-Staple relay tests#119685

Open
mrduncan wants to merge 1 commit into
masterfrom
mrduncan/remove-obsolete-security-report-integration-tests
Open

ref(security): Remove obsolete HPKP/Expect-CT/Expect-Staple relay tests#119685
mrduncan wants to merge 1 commit into
masterfrom
mrduncan/remove-obsolete-security-report-integration-tests

Conversation

@mrduncan

@mrduncan mrduncan commented Jul 14, 2026

Copy link
Copy Markdown
Member

Relay is dropping ingest support for Expect-CT, HPKP, and Expect-Staple security reports in getsentry/relay#6230 — these report types are dead in all shipping browsers (HPKP removed from Chrome 72 / Firefox 72; Expect-CT removed from Chromium 107; Expect-Staple never shipped broadly) and can no longer be produced.

This unblocks removing support from Relay, which uses these integration tests.

Refs getsentry/relay#6230
Refs #119638

Relay is dropping ingest support for Expect-CT, HPKP, and Expect-Staple
security reports (getsentry/relay#6230), since these report types are dead
in all shipping browsers and can no longer be produced. With Relay refusing
them, the relay integration tests that POST these reports and assert an event
comes back now fail on that PR's "Sentry-Relay Integration Tests" job.

Remove test_hpkp, test_expect_ct, and test_expect_staple. CSP is still
supported, so test_csp and its shared helper are untouched.

Refs getsentry/relay#6230
Refs #119638
Co-Authored-By: Claude <noreply@anthropic.com>
@mrduncan
mrduncan requested a review from a team as a code owner July 14, 2026 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants