In the file toolkit/components/places/nsLivemarkService.js there are "feed principals" created to check if we can load the URI. > 485 let feedPrincipal = secMan.getSimpleCodebasePrincipal(this.feedURI); the getSimpleCodebasePrincipal call needs to be converted to createCodebasePrincipal calls with origin attributes that have the global user context id set.

Comment on attachment 8717681 [details] [diff] [review] Bug_1237078.patch + let attrs = ChromeUtils.createOriginAttributesFromOrigin(this.feedURI.spec); Can you add a comment here that feeds will get the default user context id with this call to createOriginAttributesFromOrigin? That way if someone is looking into this later, they will see that we intentionally want to use the default context.

getSimpleCodebasePrincipal does the correct thing so we don't need to fix this.

Comment on attachment 8717681 [details] [diff] [review] Bug_1237078.patch this one is good to go.

Comment on attachment 8717681 [details] [diff] [review] Bug_1237078.patch Review of attachment 8717681 [details] [diff] [review]: ----------------------------------------------------------------- ::: toolkit/components/places/nsLivemarkService.js @@ +527,5 @@ > // automatically keep track of redirects, so we can always > // cancel the channel. > let loadgroup = Cc["@mozilla.org/network/load-group;1"]. > createInstance(Ci.nsILoadGroup); > + let attrs = ChromeUtils.createOriginAttributesFromOrigin(this.feedURI.spec); Again, won't this always be the default originAttributes?

This was resolved as won't fix because {} gives us the default origin attributes so we don't need to change the code. The default origin attributes is what we want.

Comment on attachment 8717681 [details] [diff] [review] Bug_1237078.patch patch not needed.