Comment on attachment 8789065 [details] [diff] [review] Avoid inheriting the origin attributes of the subject principal if it's system r=me. Though in the expanded/system principal case maybe it would make sense to inherit aParent's origin attributes?

(In reply to Boris Zbarsky [:bz] from comment #2) > Comment on attachment 8789065 [details] [diff] [review] > Avoid inheriting the origin attributes of the subject principal if it's > system > > r=me. Though in the expanded/system principal case maybe it would make > sense to inherit aParent's origin attributes? Hmm, maybe, but I'm curious to know your reasoning. Can you please elaborate? (FWIW I think we should make that change in a separate bug, if needed.)

Pushed by eakhgari@mozilla.com: https://hg.mozilla.org/integration/mozilla-inbound/rev/c0322637f5ea Avoid inheriting the origin attributes of the subject principal if it's system; r=bzbarsky

> Hmm, maybe, but I'm curious to know your reasoning. Can you please elaborate? Sure. Consider the "chrome or expanded principal calls window.open on a content window" case. I think after the changes in this bug, that window will not be opened with any interesting OA, but it might make sense to use the OA of the content window the open() call happened on.