Prevent usage of eval() in any context in the Parent Process
Categories
(Core :: DOM: Security, task, P2)
Tracking
()
Tracking | Status | |
---|---|---|
firefox70 | --- | fixed |
People
(Reporter: tjr, Assigned: tjr)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-active])
Attachments
(2 files)
(deleted),
text/plain
|
chutten
:
data-review+
|
Details |
(deleted),
text/x-phabricator-request
|
Details |
Assuming I did this try run successfully - we don't have any such usage!
https://treeherder.mozilla.org/#/jobs?repo=try&revision=3320cee4a3776e5f9eaf02a3c3470bb0c101ad87
I'm going to update the patch to collect telemetry and send it out to Nightly...
Assignee | ||
Comment 1•5 years ago
|
||
This Data Review is basically a copy/paste as the one you just reviewed in Bug 1567623 - except now it's looking at eval usage in the parent process.
Assignee | ||
Comment 2•5 years ago
|
||
Updated•5 years ago
|
Comment 3•5 years ago
|
||
Comment 4•5 years ago
|
||
Assignee | ||
Updated•5 years ago
|
Pushed by apavel@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/428881fad4a8
Record Telemetry if eval() is used in the Parent Process r=ckerschb
Comment 7•5 years ago
|
||
bugherder |
Comment 8•5 years ago
|
||
(In reply to Chris H-C :chutten from comment #4)
Comment on attachment 9082418 [details]
data-review.txt( ni?ckerschb to clarify that they're fine with being nominated to
permanently monitor this data )
Yes, that's fine with me. Thanks!
Description
•