Closed Bug 1498560 Opened 6 years ago Closed 5 years ago

Remove new Function from autocomplete.xml

Categories

(Core :: DOM: Security, enhancement, P3)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla70
Tracking Flags:
Tracking Status
firefox70 --- fixed

People

(Reporter: vinoth, Assigned: jallmann)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog1])

Attachments

(1 file)

Bug 1498560 - Remove `new Function` from autocomplete.xml, r=mak
(deleted), text/x-phabricator-request
Details 
Eval(), new Function() should never execute with system principal.It is being removed everywhere from our codebase as part of Bug 1473549.

The affected code which should be rewritten,
https://dxr.mozilla.org/mozilla-central/rev/c291143e24019097d087f9307e59b49facaf90cb/toolkit/content/widgets/autocomplete.xml#415
Component: Autocomplete → DOM: Security
Product: Toolkit → Core
Whiteboard: [domsecurity-backlog1]
Assignee: nobody → jallmann
Status: NEW → ASSIGNED
Attachment #9078085 - Attachment description: Bug 1498560 - Remove `new Function` from autocomplete.xml, r=gijs → Bug 1498560 - Remove `new Function` from autocomplete.xml, r=mak
Keywords: checkin-needed

Pushed by apavel@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/dc7cc0b7c0df
Remove new Function from autocomplete.xml, r=mak

Keywords: checkin-needed

https://hg.mozilla.org/mozilla-central/rev/dc7cc0b7c0df

Status: ASSIGNED → RESOLVED
Closed: 5 years ago
status-firefox70: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla70
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: