chrome-devtools-frontend 1.0.1028626 → 1.0.1029149

package/config/gni/devtools_grd_files.gni

@@ -47,6 +47,7 @@ grd_files_release_sources = [
   "front_end/Images/chromeSelectDark.svg",
   "front_end/Images/circled_backslash_icon.svg",
   "front_end/Images/circled_exclamation_icon.svg",
+  "front_end/Images/clear-warning_icon.svg",
   "front_end/Images/close-icon.svg",
   "front_end/Images/copy_icon.svg",
   "front_end/Images/cssoverview_icons_2x.avif",
@@ -278,12 +279,11 @@ grd_files_release_sources = [
   "front_end/models/issues_manager/descriptions/TwaDigitalAssetLinksFailed.md",
   "front_end/models/issues_manager/descriptions/TwaHttpError.md",
   "front_end/models/issues_manager/descriptions/TwaPageUnavailableOffline.md",
-  "front_end/models/issues_manager/descriptions/arAttributionSourceUntrustworthyFrameOrigin.md",
-  "front_end/models/issues_manager/descriptions/arAttributionSourceUntrustworthyOrigin.md",
-  "front_end/models/issues_manager/descriptions/arAttributionUntrustworthyFrameOrigin.md",
-  "front_end/models/issues_manager/descriptions/arAttributionUntrustworthyOrigin.md",
-  "front_end/models/issues_manager/descriptions/arInvalidHeader.md",
+  "front_end/models/issues_manager/descriptions/arInsecureContext.md",
+  "front_end/models/issues_manager/descriptions/arInvalidRegisterSourceHeader.md",
+  "front_end/models/issues_manager/descriptions/arInvalidRegisterTriggerHeader.md",
   "front_end/models/issues_manager/descriptions/arPermissionPolicyDisabled.md",
+  "front_end/models/issues_manager/descriptions/arUntrustworthyReportingOrigin.md",
   "front_end/models/issues_manager/descriptions/clientHintMetaTagAllowListInvalidOrigin.md",
   "front_end/models/issues_manager/descriptions/clientHintMetaTagModifiedHTML.md",
   "front_end/models/issues_manager/descriptions/corsAllowCredentialsRequired.md",

package/config/gni/devtools_image_files.gni

@@ -58,6 +58,7 @@ devtools_svg_sources = [
   "chromeSelectDark.svg",
   "circled_backslash_icon.svg",
   "circled_exclamation_icon.svg",
+  "clear-warning_icon.svg",
   "close-icon.svg",
   "copy_icon.svg",
   "dropdown_7x6_icon.svg",

package/front_end/Images/src/clear-warning_icon.svg

@@ -0,0 +1,99 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   width="10"
+   height="10"
+   viewBox="0 0 2.6458333 2.6458334"
+   version="1.1"
+   id="svg278"
+   inkscape:version="1.1.2 (0a00cf5339, 2022-02-04)"
+   sodipodi:docname="clear-warning_icon.svg"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg">
+  <sodipodi:namedview
+     id="namedview280"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:pageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:document-units="mm"
+     showgrid="false"
+     units="px"
+     inkscape:zoom="5.1337949"
+     inkscape:cx="-96.712084"
+     inkscape:cy="68.760051"
+     inkscape:window-width="2028"
+     inkscape:window-height="1445"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="layer1" />
+  <defs
+     id="defs275">
+    <mask
+       id="path4453-6-mask">
+      <rect
+         id="rect8990"
+         style="fill:#ffffff"
+         height="10"
+         width="10"
+         x="0"
+         y="0" />
+      <path
+         style="fill:#000000"
+         inkscape:connector-curvature="0"
+         id="path4453-6"
+         d="m 64,3 h 2 V 5.25 L 65.5,7 h -1 L 64,5.25 V 3 m 0,5 h 2 v 1 h -2"
+         transform="translate(-60)" />
+    </mask>
+  </defs>
+  <g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1">
+    <g
+       mask="url(#path4453-6-mask)"
+       transform="matrix(0.26458333,0,0,0.26458333,1.6666664e-8,-1.6329569e-5)"
+       id="g4443-7">
+      <path
+         style="stroke:#c19600;stroke-width:2;stroke-linejoin:round"
+         inkscape:connector-curvature="0"
+         id="path4447-5"
+         d="m 61,9 4,-8 4,8 z"
+         transform="translate(-60)" />
+      <path
+         style="fill:#f4bd00;stroke:#f5bd00;stroke-width:1.5;stroke-linejoin:round"
+         inkscape:connector-curvature="0"
+         id="path4449-3"
+         d="m 61,9 4,-8 4,8 z"
+         transform="translate(-60)" />
+      <path
+         style="fill:#ad8601"
+         inkscape:connector-curvature="0"
+         id="path4451-5"
+         d="m 63.75,2.75 h 2.5 v 2.5 L 65.75,7 h -1.5 l -0.5,-1.75 v -2.5 m 0,5.25 h 2.5 v 1.25 h -2.5"
+         transform="translate(-60)" />
+      <mask
+         id="mask258">
+        <rect
+           id="rect254"
+           style="fill:#ffffff"
+           height="10"
+           width="10"
+           x="0"
+           y="0" />
+        <path
+           style="fill:#000000"
+           inkscape:connector-curvature="0"
+           id="path256"
+           d="m 64,3 h 2 V 5.25 L 65.5,7 h -1 L 64,5.25 V 3 m 0,5 h 2 v 1 h -2"
+           transform="translate(-60)" />
+      </mask>
+    </g>
+  </g>
+</svg>

package/front_end/core/common/WasmDisassembly.ts

@@ -14,10 +14,15 @@ interface FunctionBodyOffset {
   end: number;
 }
 export class WasmDisassembly {
+  readonly lines: string[];
   readonly #offsets: number[];
   #functionBodyOffsets: FunctionBodyOffset[];
 
-  constructor(offsets: number[], functionBodyOffsets: FunctionBodyOffset[]) {
+  constructor(lines: string[], offsets: number[], functionBodyOffsets: FunctionBodyOffset[]) {
+    if (lines.length !== offsets.length) {
+      throw new Error('Lines and offsets don\'t match');
+    }
+    this.lines = lines;
     this.#offsets = offsets;
     this.#functionBodyOffsets = functionBodyOffsets;
   }

package/front_end/core/host/ResourceLoader.ts

@@ -105,9 +105,10 @@ export let load = function(
         arg0: boolean, arg1: {
           [x: string]: string,
         },
-        arg2: string, arg3: LoadErrorDescription) => void): void {
+        arg2: string, arg3: LoadErrorDescription) => void,
+    allowFileUNCPaths: boolean): void {
   const stream = new Common.StringOutputStream.StringOutputStream();
-  loadAsStream(url, headers, stream, mycallback);
+  loadAsStream(url, headers, stream, mycallback, allowFileUNCPaths);
 
   function mycallback(
       success: boolean, headers: {
@@ -242,7 +243,8 @@ export const loadAsStream = function(
         ((arg0: boolean, arg1: {
            [x: string]: string,
          },
-          arg2: LoadErrorDescription) => void)): void {
+          arg2: LoadErrorDescription) => void),
+    allowFileUNCPaths?: boolean): void {
   const streamId = _bindOutputStream(stream);
   const parsedURL = new Common.ParsedURL.ParsedURL(url);
   if (parsedURL.isDataURL()) {
@@ -250,6 +252,18 @@ export const loadAsStream = function(
     return;
   }
 
+  if (!allowFileUNCPaths && url.startsWith('file:////')) {
+    if (callback) {
+      callback(/* success */ false, /* headers */ {}, {
+        statusCode: 400,  // BAD_REQUEST
+        netError: -20,    // BLOCKED_BY_CLIENT
+        netErrorName: 'net::BLOCKED_BY_CLIENT',
+        message: 'Loading from a Windows Share via UNC path is prohibited for security reasons.',
+      });
+    }
+    return;
+  }
+
   const rawHeaders = [];
   if (headers) {
     for (const key in headers) {

package/front_end/core/i18n/locales/en-US.json

@@ -5708,9 +5708,6 @@
   "panels/issues/AttributionReportingIssueDetailsView.ts | element": {
     "message": "Element"
   },
-  "panels/issues/AttributionReportingIssueDetailsView.ts | frame": {
-    "message": "Frame"
-  },
   "panels/issues/AttributionReportingIssueDetailsView.ts | invalidHeaderValue": {
     "message": "Invalid Header Value"
   },
@@ -7007,6 +7004,9 @@
   "panels/network/network-meta.ts | dontGroupNetworkLogItemsByFrame": {
     "message": "Don't group network log items by frame"
   },
+  "panels/network/network-meta.ts | enableUNCLoading": {
+    "message": "Allow DevTools to load resources, such as source maps, from Windows Shares via UNC paths. Disabled by default for security reasons."
+  },
   "panels/network/network-meta.ts | frame": {
     "message": "frame"
   },

package/front_end/core/i18n/locales/en-XL.json

@@ -5708,9 +5708,6 @@
   "panels/issues/AttributionReportingIssueDetailsView.ts | element": {
     "message": "Êĺêḿêńt̂"
   },
-  "panels/issues/AttributionReportingIssueDetailsView.ts | frame": {
-    "message": "F̂ŕâḿê"
-  },
   "panels/issues/AttributionReportingIssueDetailsView.ts | invalidHeaderValue": {
     "message": "Îńv̂ál̂íd̂ H́êád̂ér̂ V́âĺûé"
   },
@@ -7007,6 +7004,9 @@
   "panels/network/network-meta.ts | dontGroupNetworkLogItemsByFrame": {
     "message": "D̂ón̂'t́ ĝŕôúp̂ ńêt́ŵór̂ḱ l̂óĝ ít̂ém̂ś b̂ý f̂ŕâḿê"
   },
+  "panels/network/network-meta.ts | enableUNCLoading": {
+    "message": "Âĺl̂óŵ DevTools t́ô ĺôád̂ ŕêśôúr̂ćêś, ŝúĉh́ âś ŝóûŕĉé m̂áp̂ś, f̂ŕôḿ Ŵín̂d́ôẃŝ Śĥár̂éŝ v́îá UNC p̂át̂h́ŝ. D́îśâb́l̂éd̂ b́ŷ d́êf́âúl̂t́ f̂ór̂ śêćûŕît́ŷ ŕêáŝón̂ś."
+  },
   "panels/network/network-meta.ts | frame": {
     "message": "f̂ŕâḿê"
   },

package/front_end/core/sdk/NetworkManager.ts

@@ -1504,10 +1504,12 @@ export class MultitargetNetworkManager extends Common.ObjectWrapper.ObjectWrappe
       headers['Cache-Control'] = 'no-cache';
     }
 
+    const allowFileUNCPaths = Common.Settings.Settings.instance().moduleSetting('network.enable-unc-loading').get();
+
     return new Promise(
         resolve => Host.ResourceLoader.load(url, headers, (success, _responseHeaders, content, errorDescription) => {
           resolve({success, content, errorDescription});
-        }));
+        }, allowFileUNCPaths));
   }
 }
 

package/front_end/core/sdk/Script.ts

@@ -194,28 +194,54 @@ export class Script implements TextUtils.ContentProvider.ContentProvider, FrameA
       this.#originalContentProviderInternal =
           new TextUtils.StaticContentProvider.StaticContentProvider(this.contentURL(), this.contentType(), () => {
             if (!lazyContentPromise) {
-              lazyContentPromise = (async(): Promise<{
-                                      content: null,
-                                      error: Common.UIString.LocalizedString,
-                                      isEncoded: boolean,
-                                    }|{
-                                      content: string,
-                                      isEncoded: boolean,
-                                      error?: undefined,
-                                    }> => {
+              lazyContentPromise = (async(): Promise<TextUtils.ContentProvider.DeferredContent> => {
                 if (!this.scriptId) {
                   return {content: null, error: i18nString(UIStrings.scriptRemovedOrDeleted), isEncoded: false};
                 }
+                if (this.isWasm()) {
+                  const result = await this.debuggerModel.target().debuggerAgent().invoke_disassembleWasmModule(
+                      {scriptId: this.scriptId});
+
+                  if (result.getError()) {
+                    throw new Error(result.getError());
+                  }
+
+                  const {streamId, functionBodyOffsets, chunk: {lines, bytecodeOffsets}} = result;
+                  const lineChunks = [];
+                  const bytecodeOffsetChunks = [];
+                  if (streamId) {
+                    while (true) {
+                      const result =
+                          await this.debuggerModel.target().debuggerAgent().invoke_nextWasmDisassemblyChunk({streamId});
+
+                      if (result.getError()) {
+                        throw new Error(result.getError());
+                      }
+
+                      const {chunk: {lines: linesChunk, bytecodeOffsets: bytecodeOffsetsChunk}} = result;
+                      if (linesChunk.length === 0) {
+                        break;
+                      }
+                      lineChunks.push(linesChunk);
+                      bytecodeOffsetChunks.push(bytecodeOffsetsChunk);
+                    }
+                  }
+                  const functionBodyRanges: Array<{start: number, end: number}> = [];
+                  // functionBodyOffsets contains a sequence of pairs of start and end offsets
+                  for (let i = 0; i < functionBodyOffsets.length; i += 2) {
+                    functionBodyRanges.push({start: functionBodyOffsets[i], end: functionBodyOffsets[i + 1]});
+                  }
+                  const wasmDisassemblyInfo = new Common.WasmDisassembly.WasmDisassembly(
+                      lines.concat(...lineChunks), bytecodeOffsets.concat(...bytecodeOffsetChunks), functionBodyRanges);
+                  return {content: '', isEncoded: false, wasmDisassemblyInfo};
+                }
                 try {
                   const result = await this.debuggerModel.target().debuggerAgent().invoke_getScriptSource(
                       {scriptId: this.scriptId});
                   if (result.getError()) {
                     throw new Error(result.getError());
                   }
-                  const {scriptSource, bytecode} = result;
-                  if (bytecode) {
-                    return {content: bytecode, isEncoded: true};
-                  }
+                  const {scriptSource} = result;
                   let content: string = scriptSource || '';
                   if (this.hasSourceURL && this.sourceURL.startsWith('snippet://')) {
                     // TODO(crbug.com/1330846): Find a better way to establish the snippet automapping binding then adding

package/front_end/generated/InspectorBackendCommands.js

@@ -65,7 +65,7 @@ inspectorBackend.registerEnum("Audits.SharedArrayBufferIssueType", {TransferIssu
 inspectorBackend.registerEnum("Audits.TwaQualityEnforcementViolationType", {KHttpError: "kHttpError", KUnavailableOffline: "kUnavailableOffline", KDigitalAssetLinks: "kDigitalAssetLinks"});
 inspectorBackend.registerEnum("Audits.AttributionReportingIssueType", {PermissionPolicyDisabled: "PermissionPolicyDisabled", AttributionSourceUntrustworthyOrigin: "AttributionSourceUntrustworthyOrigin", AttributionUntrustworthyOrigin: "AttributionUntrustworthyOrigin", UntrustworthyReportingOrigin: "UntrustworthyReportingOrigin", InsecureContext: "InsecureContext", InvalidHeader: "InvalidHeader", InvalidRegisterTriggerHeader: "InvalidRegisterTriggerHeader"});
 inspectorBackend.registerEnum("Audits.GenericIssueErrorType", {CrossOriginPortalPostMessageError: "CrossOriginPortalPostMessageError"});
-inspectorBackend.registerEnum("Audits.DeprecationIssueType", {AuthorizationCoveredByWildcard: "AuthorizationCoveredByWildcard", CanRequestURLHTTPContainingNewline: "CanRequestURLHTTPContainingNewline", ChromeLoadTimesConnectionInfo: "ChromeLoadTimesConnectionInfo", ChromeLoadTimesFirstPaintAfterLoadTime: "ChromeLoadTimesFirstPaintAfterLoadTime", ChromeLoadTimesWasAlternateProtocolAvailable: "ChromeLoadTimesWasAlternateProtocolAvailable", CookieWithTruncatingChar: "CookieWithTruncatingChar", CrossOriginAccessBasedOnDocumentDomain: "CrossOriginAccessBasedOnDocumentDomain", CrossOriginWindowAlert: "CrossOriginWindowAlert", CrossOriginWindowConfirm: "CrossOriginWindowConfirm", CSSSelectorInternalMediaControlsOverlayCastButton: "CSSSelectorInternalMediaControlsOverlayCastButton", DeprecationExample: "DeprecationExample", DocumentDomainSettingWithoutOriginAgentClusterHeader: "DocumentDomainSettingWithoutOriginAgentClusterHeader", EventPath: "EventPath", ExpectCTHeader: "ExpectCTHeader", GeolocationInsecureOrigin: "GeolocationInsecureOrigin", GeolocationInsecureOriginDeprecatedNotRemoved: "GeolocationInsecureOriginDeprecatedNotRemoved", GetUserMediaInsecureOrigin: "GetUserMediaInsecureOrigin", HostCandidateAttributeGetter: "HostCandidateAttributeGetter", IdentityInCanMakePaymentEvent: "IdentityInCanMakePaymentEvent", InsecurePrivateNetworkSubresourceRequest: "InsecurePrivateNetworkSubresourceRequest", LegacyConstraintGoogIPv6: "LegacyConstraintGoogIPv6", LocalCSSFileExtensionRejected: "LocalCSSFileExtensionRejected", MediaSourceAbortRemove: "MediaSourceAbortRemove", MediaSourceDurationTruncatingBuffered: "MediaSourceDurationTruncatingBuffered", NavigateEventRestoreScroll: "NavigateEventRestoreScroll", NavigateEventTransitionWhile: "NavigateEventTransitionWhile", NoSysexWebMIDIWithoutPermission: "NoSysexWebMIDIWithoutPermission", NotificationInsecureOrigin: "NotificationInsecureOrigin", NotificationPermissionRequestedIframe: "NotificationPermissionRequestedIframe", ObsoleteWebRtcCipherSuite: "ObsoleteWebRtcCipherSuite", OpenWebDatabaseInsecureContext: "OpenWebDatabaseInsecureContext", OverflowVisibleOnReplacedElement: "OverflowVisibleOnReplacedElement", PictureSourceSrc: "PictureSourceSrc", PrefixedCancelAnimationFrame: "PrefixedCancelAnimationFrame", PrefixedRequestAnimationFrame: "PrefixedRequestAnimationFrame", PrefixedStorageInfo: "PrefixedStorageInfo", PrefixedVideoDisplayingFullscreen: "PrefixedVideoDisplayingFullscreen", PrefixedVideoEnterFullscreen: "PrefixedVideoEnterFullscreen", PrefixedVideoEnterFullScreen: "PrefixedVideoEnterFullScreen", PrefixedVideoExitFullscreen: "PrefixedVideoExitFullscreen", PrefixedVideoExitFullScreen: "PrefixedVideoExitFullScreen", PrefixedVideoSupportsFullscreen: "PrefixedVideoSupportsFullscreen", RangeExpand: "RangeExpand", RequestedSubresourceWithEmbeddedCredentials: "RequestedSubresourceWithEmbeddedCredentials", RTCConstraintEnableDtlsSrtpFalse: "RTCConstraintEnableDtlsSrtpFalse", RTCConstraintEnableDtlsSrtpTrue: "RTCConstraintEnableDtlsSrtpTrue", RTCPeerConnectionComplexPlanBSdpUsingDefaultSdpSemantics: "RTCPeerConnectionComplexPlanBSdpUsingDefaultSdpSemantics", RTCPeerConnectionSdpSemanticsPlanB: "RTCPeerConnectionSdpSemanticsPlanB", RtcpMuxPolicyNegotiate: "RtcpMuxPolicyNegotiate", SharedArrayBufferConstructedWithoutIsolation: "SharedArrayBufferConstructedWithoutIsolation", TextToSpeech_DisallowedByAutoplay: "TextToSpeech_DisallowedByAutoplay", V8SharedArrayBufferConstructedInExtensionWithoutIsolation: "V8SharedArrayBufferConstructedInExtensionWithoutIsolation", XHRJSONEncodingDetection: "XHRJSONEncodingDetection", XMLHttpRequestSynchronousInNonWorkerOutsideBeforeUnload: "XMLHttpRequestSynchronousInNonWorkerOutsideBeforeUnload", XRSupportsSession: "XRSupportsSession"});
+inspectorBackend.registerEnum("Audits.DeprecationIssueType", {AuthorizationCoveredByWildcard: "AuthorizationCoveredByWildcard", CanRequestURLHTTPContainingNewline: "CanRequestURLHTTPContainingNewline", ChromeLoadTimesConnectionInfo: "ChromeLoadTimesConnectionInfo", ChromeLoadTimesFirstPaintAfterLoadTime: "ChromeLoadTimesFirstPaintAfterLoadTime", ChromeLoadTimesWasAlternateProtocolAvailable: "ChromeLoadTimesWasAlternateProtocolAvailable", CookieWithTruncatingChar: "CookieWithTruncatingChar", CrossOriginAccessBasedOnDocumentDomain: "CrossOriginAccessBasedOnDocumentDomain", CrossOriginWindowAlert: "CrossOriginWindowAlert", CrossOriginWindowConfirm: "CrossOriginWindowConfirm", CSSSelectorInternalMediaControlsOverlayCastButton: "CSSSelectorInternalMediaControlsOverlayCastButton", DeprecationExample: "DeprecationExample", DocumentDomainSettingWithoutOriginAgentClusterHeader: "DocumentDomainSettingWithoutOriginAgentClusterHeader", EventPath: "EventPath", ExpectCTHeader: "ExpectCTHeader", GeolocationInsecureOrigin: "GeolocationInsecureOrigin", GeolocationInsecureOriginDeprecatedNotRemoved: "GeolocationInsecureOriginDeprecatedNotRemoved", GetUserMediaInsecureOrigin: "GetUserMediaInsecureOrigin", HostCandidateAttributeGetter: "HostCandidateAttributeGetter", IdentityInCanMakePaymentEvent: "IdentityInCanMakePaymentEvent", InsecurePrivateNetworkSubresourceRequest: "InsecurePrivateNetworkSubresourceRequest", LegacyConstraintGoogIPv6: "LegacyConstraintGoogIPv6", LocalCSSFileExtensionRejected: "LocalCSSFileExtensionRejected", MediaSourceAbortRemove: "MediaSourceAbortRemove", MediaSourceDurationTruncatingBuffered: "MediaSourceDurationTruncatingBuffered", NavigateEventRestoreScroll: "NavigateEventRestoreScroll", NavigateEventTransitionWhile: "NavigateEventTransitionWhile", NoSysexWebMIDIWithoutPermission: "NoSysexWebMIDIWithoutPermission", NotificationInsecureOrigin: "NotificationInsecureOrigin", NotificationPermissionRequestedIframe: "NotificationPermissionRequestedIframe", ObsoleteWebRtcCipherSuite: "ObsoleteWebRtcCipherSuite", OpenWebDatabaseInsecureContext: "OpenWebDatabaseInsecureContext", OverflowVisibleOnReplacedElement: "OverflowVisibleOnReplacedElement", PersistentQuotaType: "PersistentQuotaType", PictureSourceSrc: "PictureSourceSrc", PrefixedCancelAnimationFrame: "PrefixedCancelAnimationFrame", PrefixedRequestAnimationFrame: "PrefixedRequestAnimationFrame", PrefixedStorageInfo: "PrefixedStorageInfo", PrefixedVideoDisplayingFullscreen: "PrefixedVideoDisplayingFullscreen", PrefixedVideoEnterFullscreen: "PrefixedVideoEnterFullscreen", PrefixedVideoEnterFullScreen: "PrefixedVideoEnterFullScreen", PrefixedVideoExitFullscreen: "PrefixedVideoExitFullscreen", PrefixedVideoExitFullScreen: "PrefixedVideoExitFullScreen", PrefixedVideoSupportsFullscreen: "PrefixedVideoSupportsFullscreen", RangeExpand: "RangeExpand", RequestedSubresourceWithEmbeddedCredentials: "RequestedSubresourceWithEmbeddedCredentials", RTCConstraintEnableDtlsSrtpFalse: "RTCConstraintEnableDtlsSrtpFalse", RTCConstraintEnableDtlsSrtpTrue: "RTCConstraintEnableDtlsSrtpTrue", RTCPeerConnectionComplexPlanBSdpUsingDefaultSdpSemantics: "RTCPeerConnectionComplexPlanBSdpUsingDefaultSdpSemantics", RTCPeerConnectionSdpSemanticsPlanB: "RTCPeerConnectionSdpSemanticsPlanB", RtcpMuxPolicyNegotiate: "RtcpMuxPolicyNegotiate", SharedArrayBufferConstructedWithoutIsolation: "SharedArrayBufferConstructedWithoutIsolation", TextToSpeech_DisallowedByAutoplay: "TextToSpeech_DisallowedByAutoplay", V8SharedArrayBufferConstructedInExtensionWithoutIsolation: "V8SharedArrayBufferConstructedInExtensionWithoutIsolation", XHRJSONEncodingDetection: "XHRJSONEncodingDetection", XMLHttpRequestSynchronousInNonWorkerOutsideBeforeUnload: "XMLHttpRequestSynchronousInNonWorkerOutsideBeforeUnload", XRSupportsSession: "XRSupportsSession"});
 inspectorBackend.registerEnum("Audits.ClientHintIssueReason", {MetaTagAllowListInvalidOrigin: "MetaTagAllowListInvalidOrigin", MetaTagModifiedHTML: "MetaTagModifiedHTML"});
 inspectorBackend.registerEnum("Audits.FederatedAuthRequestIssueReason", {ApprovalDeclined: "ApprovalDeclined", TooManyRequests: "TooManyRequests", ManifestListHttpNotFound: "ManifestListHttpNotFound", ManifestListNoResponse: "ManifestListNoResponse", ManifestListInvalidResponse: "ManifestListInvalidResponse", ManifestNotInManifestList: "ManifestNotInManifestList", ManifestListTooBig: "ManifestListTooBig", ManifestHttpNotFound: "ManifestHttpNotFound", ManifestNoResponse: "ManifestNoResponse", ManifestInvalidResponse: "ManifestInvalidResponse", ClientMetadataHttpNotFound: "ClientMetadataHttpNotFound", ClientMetadataNoResponse: "ClientMetadataNoResponse", ClientMetadataInvalidResponse: "ClientMetadataInvalidResponse", ClientMetadataMissingPrivacyPolicyUrl: "ClientMetadataMissingPrivacyPolicyUrl", DisabledInSettings: "DisabledInSettings", ErrorFetchingSignin: "ErrorFetchingSignin", InvalidSigninResponse: "InvalidSigninResponse", AccountsHttpNotFound: "AccountsHttpNotFound", AccountsNoResponse: "AccountsNoResponse", AccountsInvalidResponse: "AccountsInvalidResponse", IdTokenHttpNotFound: "IdTokenHttpNotFound", IdTokenNoResponse: "IdTokenNoResponse", IdTokenInvalidResponse: "IdTokenInvalidResponse", IdTokenInvalidRequest: "IdTokenInvalidRequest", ErrorIdToken: "ErrorIdToken", Canceled: "Canceled"});
 inspectorBackend.registerEnum("Audits.InspectorIssueCode", {CookieIssue: "CookieIssue", MixedContentIssue: "MixedContentIssue", BlockedByResponseIssue: "BlockedByResponseIssue", HeavyAdIssue: "HeavyAdIssue", ContentSecurityPolicyIssue: "ContentSecurityPolicyIssue", SharedArrayBufferIssue: "SharedArrayBufferIssue", TrustedWebActivityIssue: "TrustedWebActivityIssue", LowTextContrastIssue: "LowTextContrastIssue", CorsIssue: "CorsIssue", AttributionReportingIssue: "AttributionReportingIssue", QuirksModeIssue: "QuirksModeIssue", NavigatorUserAgentIssue: "NavigatorUserAgentIssue", GenericIssue: "GenericIssue", DeprecationIssue: "DeprecationIssue", ClientHintIssue: "ClientHintIssue", FederatedAuthRequestIssue: "FederatedAuthRequestIssue"});
@@ -340,11 +340,11 @@ inspectorBackend.registerEnum("IndexedDB.KeyType", {Number: "number", String: "s
 inspectorBackend.registerEnum("IndexedDB.KeyPathType", {Null: "null", String: "string", Array: "array"});
 inspectorBackend.registerCommand("IndexedDB.clearObjectStore", [{"name": "securityOrigin", "type": "string", "optional": true}, {"name": "storageKey", "type": "string", "optional": true}, {"name": "databaseName", "type": "string", "optional": false}, {"name": "objectStoreName", "type": "string", "optional": false}], []);
 inspectorBackend.registerCommand("IndexedDB.deleteDatabase", [{"name": "securityOrigin", "type": "string", "optional": true}, {"name": "storageKey", "type": "string", "optional": true}, {"name": "databaseName", "type": "string", "optional": false}], []);
-inspectorBackend.registerCommand("IndexedDB.deleteObjectStoreEntries", [{"name": "securityOrigin", "type": "string", "optional": false}, {"name": "databaseName", "type": "string", "optional": false}, {"name": "objectStoreName", "type": "string", "optional": false}, {"name": "keyRange", "type": "object", "optional": false}], []);
+inspectorBackend.registerCommand("IndexedDB.deleteObjectStoreEntries", [{"name": "securityOrigin", "type": "string", "optional": true}, {"name": "storageKey", "type": "string", "optional": true}, {"name": "databaseName", "type": "string", "optional": false}, {"name": "objectStoreName", "type": "string", "optional": false}, {"name": "keyRange", "type": "object", "optional": false}], []);
 inspectorBackend.registerCommand("IndexedDB.disable", [], []);
 inspectorBackend.registerCommand("IndexedDB.enable", [], []);
 inspectorBackend.registerCommand("IndexedDB.requestData", [{"name": "securityOrigin", "type": "string", "optional": false}, {"name": "databaseName", "type": "string", "optional": false}, {"name": "objectStoreName", "type": "string", "optional": false}, {"name": "indexName", "type": "string", "optional": false}, {"name": "skipCount", "type": "number", "optional": false}, {"name": "pageSize", "type": "number", "optional": false}, {"name": "keyRange", "type": "object", "optional": true}], ["objectStoreDataEntries", "hasMore"]);
-inspectorBackend.registerCommand("IndexedDB.getMetadata", [{"name": "securityOrigin", "type": "string", "optional": false}, {"name": "databaseName", "type": "string", "optional": false}, {"name": "objectStoreName", "type": "string", "optional": false}], ["entriesCount", "keyGeneratorValue"]);
+inspectorBackend.registerCommand("IndexedDB.getMetadata", [{"name": "securityOrigin", "type": "string", "optional": true}, {"name": "storageKey", "type": "string", "optional": true}, {"name": "databaseName", "type": "string", "optional": false}, {"name": "objectStoreName", "type": "string", "optional": false}], ["entriesCount", "keyGeneratorValue"]);
 inspectorBackend.registerCommand("IndexedDB.requestDatabase", [{"name": "securityOrigin", "type": "string", "optional": false}, {"name": "databaseName", "type": "string", "optional": false}], ["databaseWithObjectStores"]);
 inspectorBackend.registerCommand("IndexedDB.requestDatabaseNames", [{"name": "securityOrigin", "type": "string", "optional": false}], ["databaseNames"]);
 

package/front_end/generated/protocol.ts

@@ -1055,6 +1055,7 @@ export namespace Audits {
     ObsoleteWebRtcCipherSuite = 'ObsoleteWebRtcCipherSuite',
     OpenWebDatabaseInsecureContext = 'OpenWebDatabaseInsecureContext',
     OverflowVisibleOnReplacedElement = 'OverflowVisibleOnReplacedElement',
+    PersistentQuotaType = 'PersistentQuotaType',
     PictureSourceSrc = 'PictureSourceSrc',
     PrefixedCancelAnimationFrame = 'PrefixedCancelAnimationFrame',
     PrefixedRequestAnimationFrame = 'PrefixedRequestAnimationFrame',
@@ -5899,7 +5900,15 @@ export namespace IndexedDB {
   }
 
   export interface DeleteObjectStoreEntriesRequest {
-    securityOrigin: string;
+    /**
+     * At least and at most one of securityOrigin, storageKey must be specified.
+     * Security origin.
+     */
+    securityOrigin?: string;
+    /**
+     * Storage key.
+     */
+    storageKey?: string;
     databaseName: string;
     objectStoreName: string;
     /**
@@ -5952,9 +5961,14 @@ export namespace IndexedDB {
 
   export interface GetMetadataRequest {
     /**
+     * At least and at most one of securityOrigin, storageKey must be specified.
      * Security origin.
      */
-    securityOrigin: string;
+    securityOrigin?: string;
+    /**
+     * Storage key.
+     */
+    storageKey?: string;
     /**
      * Database name.
      */

package/front_end/models/bindings/ContentProviderBasedProject.ts

@@ -68,7 +68,13 @@ export class ContentProviderBasedProject extends Workspace.Workspace.ProjectStor
     try {
       const [content, isEncoded] =
           await Promise.all([contentProvider.requestContent(), contentProvider.contentEncoded()]);
-      return {content: content.content, isEncoded, error: 'error' in content && content.error || ''};
+      const wasmDisassemblyInfo = 'wasmDisassemblyInfo' in content ? content.wasmDisassemblyInfo : undefined;
+      return {
+        content: content.content,
+        wasmDisassemblyInfo,
+        isEncoded,
+        error: 'error' in content && content.error || '',
+      };
     } catch (err) {
       // TODO(rob.paveza): CRBug 1013683 - Consider propagating exceptions full-stack
       return {

package/front_end/models/issues_manager/AttributionReportingIssue.ts

@@ -10,34 +10,29 @@ import {type MarkdownIssueDescription} from './MarkdownIssueDescription.js';
 
 export const enum IssueCode {
   PermissionPolicyDisabled = 'AttributionReportingIssue::PermissionPolicyDisabled',
-  AttributionSourceUntrustworthyFrameOrigin = 'AttributionReportingIssue::AttributionSourceUntrustworthyFrameOrigin',
-  AttributionSourceUntrustworthyOrigin = 'AttributionReportingIssue::AttributionSourceUntrustworthyOrigin',
-  AttributionUntrustworthyFrameOrigin = 'AttributionReportingIssue::AttributionUntrustworthyFrameOrigin',
-  AttributionUntrustworthyOrigin = 'AttributionReportingIssue::AttributionUntrustworthyOrigin',
   UntrustworthyReportingOrigin = 'AttributionReportingIssue::UntrustworthyReportingOrigin',
   InsecureContext = 'AttributionReportingIssue::InsecureContext',
-  InvalidHeader = 'AttributionReportingIssue::InvalidHeader',
+  InvalidRegisterSourceHeader = 'AttributionReportingIssue::InvalidRegisterSourceHeader',
   InvalidRegisterTriggerHeader = 'AttributionReportingIssue::InvalidRegisterTriggerHeader',
+  // TODO(apaseltiner): Remove this once old issue types are removed from
+  // protocol.
+  Unknown = 'AttributionReportingIssue::Unknown',
 }
 
 function getIssueCode(details: Protocol.Audits.AttributionReportingIssueDetails): IssueCode {
   switch (details.violationType) {
     case Protocol.Audits.AttributionReportingIssueType.PermissionPolicyDisabled:
       return IssueCode.PermissionPolicyDisabled;
-    case Protocol.Audits.AttributionReportingIssueType.AttributionSourceUntrustworthyOrigin:
-      return details.frame !== undefined ? IssueCode.AttributionSourceUntrustworthyFrameOrigin :
-                                           IssueCode.AttributionSourceUntrustworthyOrigin;
-    case Protocol.Audits.AttributionReportingIssueType.AttributionUntrustworthyOrigin:
-      return details.frame !== undefined ? IssueCode.AttributionUntrustworthyFrameOrigin :
-                                           IssueCode.AttributionUntrustworthyOrigin;
     case Protocol.Audits.AttributionReportingIssueType.UntrustworthyReportingOrigin:
       return IssueCode.UntrustworthyReportingOrigin;
     case Protocol.Audits.AttributionReportingIssueType.InsecureContext:
       return IssueCode.InsecureContext;
     case Protocol.Audits.AttributionReportingIssueType.InvalidHeader:
-      return IssueCode.InvalidHeader;
+      return IssueCode.InvalidRegisterSourceHeader;
     case Protocol.Audits.AttributionReportingIssueType.InvalidRegisterTriggerHeader:
       return IssueCode.InvalidRegisterTriggerHeader;
+    default:
+      return IssueCode.Unknown;
   }
 }
 
@@ -61,47 +56,27 @@ export class AttributionReportingIssue extends Issue<IssueCode> {
           file: 'arPermissionPolicyDisabled.md',
           links: [],
         };
-      case IssueCode.AttributionSourceUntrustworthyFrameOrigin:
+      case IssueCode.UntrustworthyReportingOrigin:
         return {
-          file: 'arAttributionSourceUntrustworthyFrameOrigin.md',
+          file: 'arUntrustworthyReportingOrigin.md',
           links: [],
         };
-      case IssueCode.AttributionSourceUntrustworthyOrigin:
-        return {
-          file: 'arAttributionSourceUntrustworthyOrigin.md',
-          links: [
-            {
-              link:
-                  'https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting-event-guide/#html-attribute-attributiondestination-required',
-              linkTitle: 'attributiondestination attribute',
-            },
-            {
-              link:
-                  'https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting-event-guide/#html-attribute-attributionreportto',
-              linkTitle: 'attributionreportto attribute',
-            },
-          ],
-        };
-      case IssueCode.AttributionUntrustworthyFrameOrigin:
+      case IssueCode.InsecureContext:
         return {
-          file: 'arAttributionUntrustworthyFrameOrigin.md',
+          file: 'arInsecureContext.md',
           links: [],
         };
-      case IssueCode.AttributionUntrustworthyOrigin:
+      case IssueCode.InvalidRegisterSourceHeader:
         return {
-          file: 'arAttributionUntrustworthyOrigin.md',
+          file: 'arInvalidRegisterSourceHeader.md',
           links: [],
         };
-      case IssueCode.UntrustworthyReportingOrigin:
-        return null;
-      case IssueCode.InsecureContext:
-        return null;
-      case IssueCode.InvalidHeader:
+      case IssueCode.InvalidRegisterTriggerHeader:
         return {
-          file: 'arInvalidHeader.md',
+          file: 'arInvalidRegisterTriggerHeader.md',
           links: [],
         };
-      case IssueCode.InvalidRegisterTriggerHeader:
+      case IssueCode.Unknown:
         return null;
     }
   }

package/front_end/models/issues_manager/DeprecationIssue.ts

@@ -27,9 +27,14 @@ const UIStrings = {
    */
   title: 'Deprecated Feature Used',
 
-  // Store alphabetized messages per DeprecationIssueType in this block.
   /**
-   * @description TODO(crbug.com/1318846): Description needed for translation
+   * @description We show this warning when 1) an "authorization" header is
+   *   attached to the request by scripts, 2) there is no "authorization" in
+   *   the "access-control-allow-headers" header in the response, and 3) there
+   *   is a wildcard symbol ("*") in the "access-control-allow-header" header
+   *   in the response. This is allowed now, but we're planning to reject such
+   *   responses and require responses to have an "access-control-allow-headers"
+   *   containing "authorization".
    */
   authorizationCoveredByWildcard:
       'Authorization will not be covered by the wildcard symbol (*) in CORS `Access-Control-Allow-Headers` handling.',

package/front_end/models/issues_manager/descriptions/arInsecureContext.md

@@ -0,0 +1,7 @@
+# Ensure that the attribution registration context is secure
+
+This page tried to register a source or trigger using the Attribution Reporting
+API but failed because the page that initiated the registration was not secure.
+
+The registration context must use HTTPS unless it is `localhost` or
+`127.0.0.1`.

package/front_end/models/issues_manager/descriptions/arInvalidRegisterSourceHeader.md

@@ -0,0 +1,5 @@
+# Ensure that the `Attribution-Reporting-Register-Source` header is valid
+
+This page tried to register a source using the Attribution Reporting API but
+failed because an `Attribution-Reporting-Register-Source` response header was
+invalid.

package/front_end/models/issues_manager/descriptions/arInvalidRegisterTriggerHeader.md

@@ -0,0 +1,5 @@
+# Ensure that the `Attribution-Reporting-Register-Trigger` header is valid
+
+This page tried to register a trigger using the Attribution Reporting API but
+failed because an `Attribution-Reporting-Register-Trigger` response header was
+invalid.

package/front_end/models/issues_manager/descriptions/arPermissionPolicyDisabled.md

@@ -1,6 +1,9 @@
-# Ensure the "attribution-reporting" Permission Policy is enabled when using the Attribution Reporting API
+# Ensure that the `attribution-reporting` permission policy is enabled
 
-This page tries to use the Attribution Reporting API but this was aborted, because the `attribution-reporting` policy is not enabled.
+This page tried to use the Attribution Reporting API but failed because the
+`attribution-reporting` permission policy is not enabled.
 
-This API is enabled by default in the top-level context and in same-origin child frames, but must
-be explicitly opted-in for cross-origin frames. Add the permission policy as follows: `<iframe src="..." allow="attribution-reporting">`.
+This API is enabled by default in the top-level context and in same-origin
+child frames, but must be explicitly opted-in for cross-origin frames. Add the
+permission policy as follows:
+`<iframe src="..." allow="attribution-reporting">`.

package/front_end/models/issues_manager/descriptions/arUntrustworthyReportingOrigin.md

@@ -0,0 +1,10 @@
+# Ensure that attribution reporting origins are trustworthy
+
+This page tried to register a source or trigger using the Attribution Reporting
+API but failed because the reporting origin was not potentially trustworthy.
+
+The reporting origin is typically the server that sets the
+`Attribution-Reporting-Register-Source` or
+`Attribution-Reporting-Register-Trigger` header.
+
+The reporting origin must use HTTPS unless it is `localhost` or `127.0.0.1`.

package/front_end/models/text_utils/ContentProvider.ts

@@ -59,4 +59,12 @@ export const contentAsDataURL = function(
 export type DeferredContent = {
   content: string,
   isEncoded: boolean,
-}|{content: null, error: string, isEncoded: boolean};
+}|{
+  content: '',
+  isEncoded: false,
+  wasmDisassemblyInfo: Common.WasmDisassembly.WasmDisassembly,
+}|{
+  content: null,
+  error: string,
+  isEncoded: boolean,
+};

package/front_end/panels/issues/AttributionReportingIssueDetailsView.ts

@@ -14,11 +14,6 @@ const UIStrings = {
    * @description Label for number of rows in the issue details table.
    */
   nViolations: '{n, plural, =1 {# violation} other {# violations}}',
-  /**
-   * @description Noun, label for the column showing the associated frame in the issue details table.
-   * The associated frame can either be the "main frame" (or main window), or an HTML iframe.
-   */
-  frame: 'Frame',
   /**
    * @description Noun, label for the column showing the associated HTML element in the issue details table.
    */
@@ -60,31 +55,18 @@ export class AttributionReportingIssueDetailsView extends AffectedResourcesView
       issues: Iterable<IssuesManager.AttributionReportingIssue.AttributionReportingIssue>): void {
     const header = document.createElement('tr');
     switch (issueCode) {
-      case IssuesManager.AttributionReportingIssue.IssueCode.AttributionUntrustworthyFrameOrigin:
-        this.appendColumnTitle(header, i18nString(UIStrings.frame));
-        this.appendColumnTitle(header, i18nString(UIStrings.request));
-        this.appendColumnTitle(header, i18nString(UIStrings.untrustworthyOrigin));
-        break;
-      case IssuesManager.AttributionReportingIssue.IssueCode.AttributionUntrustworthyOrigin:
+      case IssuesManager.AttributionReportingIssue.IssueCode.InvalidRegisterSourceHeader:
+      case IssuesManager.AttributionReportingIssue.IssueCode.InvalidRegisterTriggerHeader:
         this.appendColumnTitle(header, i18nString(UIStrings.request));
-        this.appendColumnTitle(header, i18nString(UIStrings.untrustworthyOrigin));
-        break;
-      case IssuesManager.AttributionReportingIssue.IssueCode.AttributionSourceUntrustworthyFrameOrigin:
-        this.appendColumnTitle(header, i18nString(UIStrings.frame));
-        this.appendColumnTitle(header, i18nString(UIStrings.element));
-        this.appendColumnTitle(header, i18nString(UIStrings.untrustworthyOrigin));
+        this.appendColumnTitle(header, i18nString(UIStrings.invalidHeaderValue));
         break;
-      case IssuesManager.AttributionReportingIssue.IssueCode.AttributionSourceUntrustworthyOrigin:
+      case IssuesManager.AttributionReportingIssue.IssueCode.InsecureContext:
+      case IssuesManager.AttributionReportingIssue.IssueCode.UntrustworthyReportingOrigin:
         this.appendColumnTitle(header, i18nString(UIStrings.element));
-        this.appendColumnTitle(header, i18nString(UIStrings.untrustworthyOrigin));
-        break;
-      case IssuesManager.AttributionReportingIssue.IssueCode.InvalidHeader:
-        this.appendColumnTitle(header, i18nString(UIStrings.frame));
         this.appendColumnTitle(header, i18nString(UIStrings.request));
-        this.appendColumnTitle(header, i18nString(UIStrings.invalidHeaderValue));
+        this.appendColumnTitle(header, i18nString(UIStrings.untrustworthyOrigin));
         break;
       case IssuesManager.AttributionReportingIssue.IssueCode.PermissionPolicyDisabled:
-        this.appendColumnTitle(header, i18nString(UIStrings.frame));
         this.appendColumnTitle(header, i18nString(UIStrings.element));
         this.appendColumnTitle(header, i18nString(UIStrings.request));
         break;
@@ -108,21 +90,18 @@ export class AttributionReportingIssueDetailsView extends AffectedResourcesView
     const details = issue.issueDetails;
 
     switch (issueCode) {
-      case IssuesManager.AttributionReportingIssue.IssueCode.AttributionSourceUntrustworthyOrigin:
-        await this.#appendElementOrEmptyCell(element, issue);
-        this.appendIssueDetailCell(element, details.invalidParameter || '');
-        break;
-      case IssuesManager.AttributionReportingIssue.IssueCode.AttributionUntrustworthyOrigin:
+      case IssuesManager.AttributionReportingIssue.IssueCode.InvalidRegisterSourceHeader:
+      case IssuesManager.AttributionReportingIssue.IssueCode.InvalidRegisterTriggerHeader:
         this.#appendRequestOrEmptyCell(element, details.request);
         this.appendIssueDetailCell(element, details.invalidParameter || '');
         break;
-      case IssuesManager.AttributionReportingIssue.IssueCode.InvalidHeader:
-        this.#appendFrameOrEmptyCell(element, issue);
+      case IssuesManager.AttributionReportingIssue.IssueCode.InsecureContext:
+      case IssuesManager.AttributionReportingIssue.IssueCode.UntrustworthyReportingOrigin:
+        await this.#appendElementOrEmptyCell(element, issue);
         this.#appendRequestOrEmptyCell(element, details.request);
         this.appendIssueDetailCell(element, details.invalidParameter || '');
         break;
       case IssuesManager.AttributionReportingIssue.IssueCode.PermissionPolicyDisabled:
-        this.#appendFrameOrEmptyCell(element, issue);
         await this.#appendElementOrEmptyCell(element, issue);
         this.#appendRequestOrEmptyCell(element, details.request);
         break;
@@ -131,16 +110,6 @@ export class AttributionReportingIssueDetailsView extends AffectedResourcesView
     this.affectedResources.appendChild(element);
   }
 
-  #appendFrameOrEmptyCell(
-      parent: HTMLElement, issue: IssuesManager.AttributionReportingIssue.AttributionReportingIssue): void {
-    const details = issue.issueDetails;
-    if (details.frame) {
-      parent.appendChild(this.createFrameCell(details.frame.frameId, issue.getCategory()));
-    } else {
-      this.appendIssueDetailCell(parent, '');
-    }
-  }
-
   async #appendElementOrEmptyCell(
       parent: HTMLElement, issue: IssuesManager.AttributionReportingIssue.AttributionReportingIssue): Promise<void> {
     const details = issue.issueDetails;

package/front_end/panels/network/components/RequestHeadersView.ts

@@ -350,14 +350,16 @@ export class RequestHeadersComponent extends HTMLElement {
     } else {
       cautionText = i18nString(UIStrings.provisionalHeadersAreShown);
     }
+    // Disabled until https://crbug.com/1079231 is fixed.
+    // clang-format off
     return html`
       <div class="call-to-action">
         <div class="call-to-action-body">
           <div class="explanation" title=${cautionTitle}>
             <${IconButton.Icon.Icon.litTagName} class="inline-icon" .data=${{
-              iconName: 'warning_icon',
-              width: '12px',
-              height: '12px',
+                iconName: 'clear-warning_icon',
+                width: '12px',
+                height: '12px',
               } as IconButton.Icon.IconData}>
             </${IconButton.Icon.Icon.litTagName}>
             ${cautionText} <x-link href="https://developer.chrome.com/docs/devtools/network/reference/#provisional-headers" class="link">${i18nString(UIStrings.learnMore)}</x-link>
@@ -365,6 +367,7 @@ export class RequestHeadersComponent extends HTMLElement {
         </div>
       </div>
     `;
+    // clang-format on
   }
 
   #renderHeader(header: HeaderDescriptor): LitHtml.TemplateResult {
@@ -373,11 +376,10 @@ export class RequestHeadersComponent extends HTMLElement {
     return html`
       <div class="row">
         <div class="header-name">
-          ${header.headerNotSet ? html`
-            <div class="header-badge header-badge-text">
-              ${i18n.i18n.lockedString('not-set')}
-            </div>
-          ` : ''}${header.name}:
+          ${header.headerNotSet ?
+            html`<div class="header-badge header-badge-text">${i18n.i18n.lockedString('not-set')}</div>` :
+            LitHtml.nothing
+          }${header.name}:
         </div>
         <div class="header-value ${header.headerValueIncorrect ? 'header-warning' : ''}">
           ${header.value?.toString() || ''}
@@ -399,10 +401,10 @@ export class RequestHeadersComponent extends HTMLElement {
       // clang-format off
       return html`
         <${IconButton.Icon.Icon.litTagName} class="inline-icon" title=${titleText} .data=${{
-          iconName: 'warning_icon',
-          width: '12px',
-          height: '12px',
-        } as IconButton.Icon.IconData}>
+            iconName: 'clear-warning_icon',
+            width: '12px',
+            height: '12px',
+          } as IconButton.Icon.IconData}>
         </${IconButton.Icon.Icon.litTagName}>
       `;
       // clang-format on

package/front_end/panels/network/network-meta.ts

@@ -108,6 +108,11 @@ const UIStrings = {
   *@description Title of a setting under the Network category that can be invoked through the Command Menu
   */
   dontGroupNetworkLogItemsByFrame: 'Don\'t group network log items by frame',
+  /**
+   * @description Label of a checkbox in the DevTools settings UI.
+   */
+  enableUNCLoading:
+      'Allow `DevTools` to load resources, such as source maps, from Windows Shares via `UNC` paths. Disabled by default for security reasons.',
 };
 const str_ = i18n.i18n.registerUIStrings('panels/network/network-meta.ts', UIStrings);
 const i18nLazyString = i18n.i18n.getLazilyComputedLocalizedString.bind(undefined, str_);
@@ -316,6 +321,17 @@ Common.Settings.registerSettingExtension({
   ],
 });
 
+// While this setting is used by the Network module, we place it under the
+// "sources" category as source map loading is the dominant use case.
+Common.Settings.registerSettingExtension({
+  category: Common.Settings.SettingCategory.SOURCES,
+  storageType: Common.Settings.SettingStorageType.Synced,
+  title: i18nLazyString(UIStrings.enableUNCLoading),
+  settingName: 'network.enable-unc-loading',
+  settingType: Common.Settings.SettingType.BOOLEAN,
+  defaultValue: false,
+});
+
 UI.ViewManager.registerLocationResolver({
   name: UI.ViewManager.ViewLocationValues.NETWORK_SIDEBAR,
   category: UI.ViewManager.ViewLocationCategoryValues.NETWORK,

package/front_end/panels/timeline/TimelineLoader.ts

@@ -98,7 +98,8 @@ export class TimelineLoader implements Common.StringOutputStream.OutputStream {
 
   static loadFromURL(url: Platform.DevToolsPath.UrlString, client: Client): TimelineLoader {
     const loader = new TimelineLoader(client);
-    Host.ResourceLoader.loadAsStream(url, null, loader);
+    const allowFileUNCPaths = Common.Settings.Settings.instance().moduleSetting('network.enable-unc-loading').get();
+    Host.ResourceLoader.loadAsStream(url, null, loader, undefined, allowFileUNCPaths);
     return loader;
   }
 

package/front_end/ui/legacy/components/source_frame/SourceFrame.ts

@@ -437,6 +437,8 @@ export class SourceFrameImpl extends Common.ObjectWrapper.eventMixin<EventTypes,
       progressIndicator.setTotalWork(100);
       this.progressToolbarItem.element.appendChild(progressIndicator.element);
 
+      progressIndicator.setWorked(1);
+
       const deferredContent = await this.lazyContent();
       let error, content;
       if (deferredContent.content === null) {
@@ -448,57 +450,13 @@ export class SourceFrameImpl extends Common.ObjectWrapper.eventMixin<EventTypes,
           const view = new DataView(Common.Base64.decode(deferredContent.content));
           const decoder = new TextDecoder();
           this.rawContent = decoder.decode(view, {stream: true});
+        } else if ('wasmDisassemblyInfo' in deferredContent && deferredContent.wasmDisassemblyInfo) {
+          const {wasmDisassemblyInfo} = deferredContent;
+          this.rawContent = CodeMirror.Text.of(wasmDisassemblyInfo.lines);
+          this.wasmDisassemblyInternal = wasmDisassemblyInfo;
         } else {
-          this.rawContent = deferredContent.content;
-        }
-      }
-
-      progressIndicator.setWorked(1);
-
-      if (!error && this.contentType === 'application/wasm') {
-        const worker = Common.Worker.WorkerWrapper.fromURL(
-            new URL('../../../../entrypoints/wasmparser_worker/wasmparser_worker-entrypoint.js', import.meta.url));
-        const promise = new Promise<{
-          lines: string[],
-          offsets: number[],
-          functionBodyOffsets: {
-            start: number,
-            end: number,
-          }[],
-        }>((resolve, reject) => {
-          worker.onmessage =
-              // TODO(crbug.com/1172300) Ignored during the jsdoc to ts migration)
-              // eslint-disable-next-line @typescript-eslint/no-explicit-any
-              ({data}: MessageEvent<any>): void => {
-                if ('event' in data) {
-                  switch (data.event) {
-                    case 'progress':
-                      progressIndicator.setWorked(data.params.percentage);
-                      break;
-                  }
-                } else if ('method' in data) {
-                  switch (data.method) {
-                    case 'disassemble':
-                      if ('error' in data) {
-                        reject(data.error);
-                      } else if ('result' in data) {
-                        resolve(data.result);
-                      }
-                      break;
-                  }
-                }
-              };
-          worker.onerror = reject;
-        });
-        worker.postMessage({method: 'disassemble', params: {content}});
-        try {
-          const {lines, offsets, functionBodyOffsets} = await promise;
-          this.rawContent = content = CodeMirror.Text.of(lines);
-          this.wasmDisassemblyInternal = new Common.WasmDisassembly.WasmDisassembly(offsets, functionBodyOffsets);
-        } catch (e) {
-          this.rawContent = content = error = e.message;
-        } finally {
-          worker.terminate();
+          this.rawContent = content;
+          this.wasmDisassemblyInternal = null;
         }
       }
 
@@ -514,7 +472,7 @@ export class SourceFrameImpl extends Common.ObjectWrapper.eventMixin<EventTypes,
         this.textEditor.editor.setState(this.placeholderEditorState(error));
         this.prettyToggle.setEnabled(false);
       } else {
-        if (this.shouldAutoPrettyPrint && TextUtils.TextUtils.isMinified(content)) {
+        if (this.shouldAutoPrettyPrint && TextUtils.TextUtils.isMinified(content || '')) {
           await this.setPretty(true);
         } else {
           await this.setContent(this.rawContent || '');

package/package.json

@@ -55,5 +55,5 @@
     "unittest": "scripts/test/run_unittests.py --no-text-coverage",
     "watch": "vpython third_party/node/node.py --output scripts/watch_build.js"
   },
-  "version": "1.0.1028626"
+  "version": "1.0.1029149"
 }

package/front_end/models/issues_manager/descriptions/arAttributionSourceUntrustworthyFrameOrigin.md

@@ -1,4 +0,0 @@
-# Ensure an attribution source triggers in a secure context
-
-An attribution source event was not recorded because the frame that triggered the event (or the main frame if they
-are different) is not trustworthy.

package/front_end/models/issues_manager/descriptions/arAttributionSourceUntrustworthyOrigin.md

@@ -1,5 +0,0 @@
-# Ensure the origins provided in an attribution source are trustworthy
-
-An attribution source event was not recorded because an untrustworthy origin was specified.
-Both, the `attributiondestination` and the `attributionreportto` origins must be
-trustworthy.

package/front_end/models/issues_manager/descriptions/arAttributionUntrustworthyFrameOrigin.md

@@ -1,4 +0,0 @@
-# Ensure an attribution triggers in a secure context
-
-An attribution was not recorded because the frame that triggered the attribution (or the main frame if they
-are different) is not trustworthy.

package/front_end/models/issues_manager/descriptions/arAttributionUntrustworthyOrigin.md

@@ -1,4 +0,0 @@
-# Ensure the origin of an attribution-registration request is trustworthy
-
-An attribution source or trigger was not registered because the origin of the
-request was not trustworthy.

package/front_end/models/issues_manager/descriptions/arInvalidHeader.md

@@ -1,3 +0,0 @@
-# Ensure that Attribution Reporting API response headers are valid
-
-This page tries to use the Attribution Reporting API but failed because a response header was invalid.