Open Bug 1716730 Opened 3 years ago Updated 3 years ago

[meta] Improve NullPrincipal/ExpandedPrincipal handling

Categories

(Core :: DOM: Security, task, P3)

Product:
Core
Component:
DOM: Security
Type:
task

Tracking

()

People

(Reporter: ckerschb, Unassigned)

References

(Depends on 2 open bugs)

Details

(Keywords: meta, Whiteboard: [domsecurity-meta])

There are various ways how we can improve our NullPrincipal/ExpandedPrincipal handling, most of which is important in the context of Fission and also to make Principals threadsafe.

In more detail we could improve the handling by:

  • Using secure PRNG when generating a NullPrincipalURI
  • Storing the precursor URI within NullPrincipals
  • Store information (maybe precursor URI) which allows to detect whether a NullPrincipal was created in a secure context
  • Move CSP off ExpandedPrincipals
  • ...
Assignee: nobody → ngogge
Status: NEW → ASSIGNED
Depends on: 1734379
Assignee: ngogge → nobody
Status: ASSIGNED → NEW
You need to log in before you can comment on or make changes to this bug.