Closed
Bug 1448736
Opened 7 years ago
Closed 7 years ago
Stop attaching Components to untrusted windows in SpecialPowers
Categories
(Core :: XPConnect, enhancement)
Core
XPConnect
Tracking
()
RESOLVED
FIXED
mozilla61
Tracking | Status | |
---|---|---|
firefox61 | --- | fixed |
People
(Reporter: bzbarsky, Assigned: bzbarsky)
References
Details
Attachments
(2 files)
(deleted),
patch
|
kmag
:
review+
|
Details | Diff | Splinter Review |
(deleted),
patch
|
kmag
:
review+
|
Details | Diff | Splinter Review |
SpecialPowers has this thing where it attaches Components to random content windows. We should stop doing that.
Assignee | ||
Updated•7 years ago
|
Summary: Stop attaching Components to random windows in SpecialPowers → Stop attaching Components to untrusted windows in SpecialPowers
Assignee | ||
Comment 1•7 years ago
|
||
Attachment #8962230 -
Flags: review?(kmaglione+bmo)
Assignee | ||
Updated•7 years ago
|
Assignee: nobody → bzbarsky
Status: NEW → ASSIGNED
Assignee | ||
Comment 2•7 years ago
|
||
Attachment #8962231 -
Flags: review?(kmaglione+bmo)
Comment 3•7 years ago
|
||
Comment on attachment 8962230 [details] [diff] [review]
part 1. Stop attaching Components to untrusted windows in SpecialPowers
Review of attachment 8962230 [details] [diff] [review]:
-----------------------------------------------------------------
::: testing/specialpowers/content/specialpowersAPI.js
@@ -59,5 @@
> }
>
> -function getRawComponents(aWindow) {
> - // If we're running in automation that supports enablePrivilege, then we also
> - // provided access to the privileged Components.
Ugh.
Attachment #8962230 -
Flags: review?(kmaglione+bmo) → review+
Updated•7 years ago
|
Attachment #8962231 -
Flags: review?(kmaglione+bmo) → review+
Assignee | ||
Comment 4•7 years ago
|
||
> Ugh.
I will see what I can do to nix enablePrivilege, or at lest its effects on Components, next... Tired of it.
Pushed by bzbarsky@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/52a5c033931f
part 1. Stop attaching Components to untrusted windows in SpecialPowers. r=kmag
https://hg.mozilla.org/integration/mozilla-inbound/rev/8606ad41744a
part 2. Remove the now-unused forcePrivilegedComponentsForScope API. r=kmag
Comment 6•7 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/52a5c033931f
https://hg.mozilla.org/mozilla-central/rev/8606ad41744a
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
status-firefox61:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla61
You need to log in
before you can comment on or make changes to this bug.
Description
•