Closed Bug 1647412 Opened 4 years ago Closed 4 years ago

Fix use of GetCrossDocParentNode in CredentialsContainer.cpp:IsSameOriginWithAncestors

Categories

(Core :: DOM: Device Interfaces, defect, P2)

Product:
Core
Component:
DOM: Device Interfaces
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1579278

People

(Reporter: kmag, Unassigned)

References

Details

Under Fission, GetCrossDocParentNode will never walk to a cross-origin parent document, and will therefore never detect a cross-origin ancestor. The code needs to walk WindowContexts instead, and assume any cross-process context is cross-origin.

Severity: -- → S3
Priority: -- → P2
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.