Closed
Bug 1515769
Opened 6 years ago
Closed 6 years ago
wyciwyg protocol doesn't set loadInfo before running init()
Categories
(Core :: DOM: Security, defect, P2)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jkt, Unassigned)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-backlog1])
wysiwyg protocol code doesn't call Init() after setting loadInfo(): https://searchfox.org/mozilla-central/rev/232ced2697b8938073fa79b8e6aa3718876c0b69/netwerk/protocol/wyciwyg/nsWyciwygProtocolHandler.cpp#92,114
So instead the code falls back to setting in the parent channel the system principal:
https://searchfox.org/mozilla-central/rev/232ced2697b8938073fa79b8e6aa3718876c0b69/netwerk/protocol/wyciwyg/WyciwygChannelChild.cpp#112
There are however some cases where an InheritPrincipal isn't set on the loadInfo so something should be done there, like using the triggingPrincipal perhaps.
Reporter | ||
Updated•6 years ago
|
Priority: -- → P2
Whiteboard: [domsecurity-backlog1]
Comment 2•6 years ago
|
||
Fixed by bug 1489308.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•