Apply Meta CSP to about:crashes
Categories
(Core :: DOM: Security, enhancement, P3)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox69 | --- | fixed |
People
(Reporter: ckerschb, Assigned: ckerschb)
References
Details
(Whiteboard: [domsecurity-backlog1])
Attachments
(3 files)
|
Assignee | |
Updated•6 years ago
|
|
|
Assignee | |
Comment 1•6 years ago
|
||
|
||
Updated•6 years ago
|
|
|
||
Comment 2•6 years ago
|
||
|
||
Comment 3•6 years ago
|
||
There's a r+ patch which didn't land and no activity in this bug for 2 weeks.
:ckerschb, could you have a look please?
|
|
Assignee | |
Comment 4•6 years ago
|
||
Before we can apply CSP to system privileged about pages we have to fix Bug 965637, in which we move the CSP from the Principal into the Client. Please note that the Meta Bug 1492063 for applying CSP to system privileged about: pages is blocked by 965637. At the moment we are fixing the last remaining blockers and as soon as we have landed Bug 965637 I'll try to land all the dependencies of Bug 1492063 so we end up having all about: pages secured by a CSP.
|
|
Assignee | |
Comment 5•5 years ago
|
||
|
||
Comment 7•5 years ago
|
||
| bugherder | ||
|
|
||
Comment 8•5 years ago
|
||
| bugherder | ||
|
|
Assignee | |
Comment 9•5 years ago
|
||
|
||
Comment 10•5 years ago
|
||
|
|
Assignee | |
Comment 11•5 years ago
|
||
(In reply to Pulsebot from comment #10)
Pushed by mozilla@christophkerschbaumer.com:
https://hg.mozilla.org/integration/autoland/rev/80e58bbe2e88
Apply Meta CSP to about:networking.
Ah boy - this patch has the wrong bug number, it should be Bug 1497201.
Aryx, anything we can do about that or do we have to back it out and land again with the right bug number?
|
||
Comment 12•5 years ago
|
||
| bugherder | ||
|
||
Comment 13•5 years ago
|
||
Backed out patch which landed with wrong bug number (and relanded it with bug 1497201): https://hg.mozilla.org/integration/autoland/rev/fa2384f76e274d7ce77039d0d2ff68905e03cf5c
Description
•