Closed Bug 1515769 Opened 6 years ago Closed 6 years ago

wyciwyg protocol doesn't set loadInfo before running init()

Categories

(Core :: DOM: Security, defect, P2)

65 Branch
defect

Tracking

()

RESOLVED FIXED

People

(Reporter: jkt, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog1])

wysiwyg protocol code doesn't call Init() after setting loadInfo(): https://searchfox.org/mozilla-central/rev/232ced2697b8938073fa79b8e6aa3718876c0b69/netwerk/protocol/wyciwyg/nsWyciwygProtocolHandler.cpp#92,114 So instead the code falls back to setting in the parent channel the system principal: https://searchfox.org/mozilla-central/rev/232ced2697b8938073fa79b8e6aa3718876c0b69/netwerk/protocol/wyciwyg/WyciwygChannelChild.cpp#112 There are however some cases where an InheritPrincipal isn't set on the loadInfo so something should be done there, like using the triggingPrincipal perhaps.
Priority: -- → P2
Whiteboard: [domsecurity-backlog1]

That code is being deleted in bug 1489308.

Depends on: 1489308

Fixed by bug 1489308.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.