Closed
Bug 821676
Opened 12 years ago
Closed 11 years ago
It's possible to break XBL scripts for video controls
Categories
(Core :: Security, defect)
Tracking
()
RESOLVED
FIXED
mozilla21
Tracking | Status | |
---|---|---|
firefox-esr17 | --- | unaffected |
firefox-esr24 | --- | unaffected |
b2g18 | --- | unaffected |
People
(Reporter: moz_bug_r_a4, Assigned: bholley)
References
Details
(Keywords: regression, sec-other, Whiteboard: reveals part of bug 816071 [dupe 823279] Embargo until ESR17 EOL)
Attachments
(1 file, 1 obsolete file)
(deleted),
text/html
|
Details |
This is a regression from bug 818716 and bug 820666.
Once a PoC code runs, XBL scripts for video controls no longer work even after restarting Firefox.
The problem does not happen when nglayout.debug.disable_xul_cache is true.
I'm marking this as s-s since the testcase might reveal a part of bug 816071.
Reporter | ||
Comment 1•12 years ago
|
||
Reporter | ||
Comment 2•12 years ago
|
||
Sorry, I was wrong. The code in the old testcase is irrelevant.
Steps to reproduce:
1. Run Firefox with a clean profile.
2. Load a page that contains a video element.
3. Restart Firefox.
4. Repeat 2 & 3 a few times.
Attachment #692257 -
Attachment is obsolete: true
Reporter | ||
Comment 3•12 years ago
|
||
So this is not a security bug, except that the first testcase might reveal a part of other security bug.
Updated•12 years ago
|
Assignee | ||
Comment 4•12 years ago
|
||
Hopefully bug 821850 works, and then this will hopefully be fixed.
Depends on: XBL-scopes
Reporter | ||
Comment 5•12 years ago
|
||
Sorry for the confusion. At first I thought the code in the 1st testcase caused the symptom, and thus I filed this bug with the wrong summary and description, and then I realized that the code is irrelevant (comment #2).
Actually this bug is a duplicate of bug 823279 and already fixed, and the issue the code in the 1st testcase involved is discussed in other bugs, so there is no need to keep this bug open. But, I'm concerned that resolving this bug as a duplicate of bug 823279 might reveal that there's a known security issue involved with XBL. Please properly close this bug.
Assignee | ||
Updated•12 years ago
|
Assignee: nobody → bobbyholley+bmo
Assignee | ||
Updated•12 years ago
|
No longer depends on: XBL-scopes
Comment 6•11 years ago
|
||
Closing per comment 5.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Whiteboard: reveals part of bug 816071 → reveals part of bug 816071 [dupe 823279]
Updated•11 years ago
|
Target Milestone: --- → mozilla21
Updated•11 years ago
|
status-firefox-esr17:
--- → unaffected
status-firefox-esr24:
--- → unaffected
Whiteboard: reveals part of bug 816071 [dupe 823279] → reveals part of bug 816071 [dupe 823279] Embargo until ESR17 EOL
Updated•11 years ago
|
status-b2g18:
--- → unaffected
Updated•9 years ago
|
Group: core-security → core-security-release
Updated•8 years ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•