Closed
Bug 1028769
Opened 10 years ago
Closed 10 years ago
FxA navigator.mozID API: move access check from child process (nsDOMIdentity.js) to parent process(DOMIdentity.jsm)
Categories
(Firefox OS Graveyard :: FxA, defect)
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 1028398
People
(Reporter: spenrose, Assigned: jedp)
References
Details
Currently nsDOMIdentity.request() checks whether the calling app has permissions to access Firefox Accounts:
https://github.com/mozilla/gecko-dev/blob/master/dom/identity/nsDOMIdentity.js#L178
To deepen defense against a client which has comprised this routine, move the check to DOMIdentity.jsm.
Assignee | ||
Updated•10 years ago
|
Assignee: nobody → jparsons
Status: NEW → ASSIGNED
Assignee | ||
Comment 1•10 years ago
|
||
Oh sweet - :ferjm is already doing this as part of Bug 1028398. Thanks, Fernando.
Assignee | ||
Updated•10 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•