connect-src test suite allows multiple non-interopable implementations.

[lukewarlow]

I've found that the test suite for connect-src has multiple competing pass states which should be addressed, I've raised web-platform-tests/wpt#50387 on WPT but wanted to bring it to this groups attention too.

This leads to a current situation where WebKit throws for EventSource and WebSocket when it shouldn't be (per Firefox and Chromium and I think the spec see #120 ).

Idk if there are other examples of real interop issues as a result but there could be.

https://bugs.webkit.org/show_bug.cgi?id=286744

[dveditz]

Thanks, Luke. Is there anyone who thinks the spec is ambiguous and needs changing? Back in #120 @annevk agreed with what chromium and gecko are doing now, so I think we're good wrt to the spec. You've filed an issue to change the test itself. I think the only thing to do in this repo/issue is make sure Apple folks agree and that there's a webkit bug on file. After that we can resolve the CSP copy of the issue

[annevk]

Let me now agree on behalf of WebKit that we should fix this bug. Thanks for finding it @lukewarlow!