Open Bug 699277 Opened 13 years ago Updated 2 years ago

Revert changes to ssltunnel and convert test from bug 599295 to xpcshell

Categories

(Testing :: General, defect)

Product:
Testing
Component:
General
Type:
defect

Tracking

(Not tracked)

People

(Reporter: mayhemer, Unassigned)

References

(Depends on 1 open bug)

Details

(Keywords: sec-other, Whiteboard: [sg:nse] keep hidden until 599295 unhidden)

Rather reporting as security bug. Using httpd.js component since there is no for ssltunnel and it is actually related. See https://bugzilla.mozilla.org/show_bug.cgi?id=599295#c17 and bellow. The goal is to keep the ssltunnel a simple and singe-purpose utility. The redirect change can be implemented in an xpcshell test easily.
This is not a security problem in shipping clients, right? Just hidden because the change is due to a security fix? If it's a risk in its own right please clear the '[sg:nse]' from the whiteboard.
Whiteboard: [sg:nse]
Whiteboard: [sg:nse] → [sg:nse] keep hidden until 599295 unhidden
(In reply to Daniel Veditz from comment #1) > This is not a security problem in shipping clients, right? Just hidden > because the change is due to a security fix? Yes to both questions. Thanks.
No time to work on this...
Assignee: honzab.moz → nobody
Group: core-security
Component: httpd.js → General
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.