Closed
Bug 858789
Opened 12 years ago
Closed 12 years ago
CSP should use the spec compliant pref to determine what parser to use for apps
Categories
(Core :: Security, defect)
Core
Security
Tracking
()
RESOLVED
FIXED
mozilla23
People
(Reporter: imelven, Assigned: imelven)
References
(Blocks 2 open bugs)
Details
Attachments
(1 file)
(deleted),
patch
|
jst
:
review+
|
Details | Diff | Splinter Review |
In bug 746978, I made apps always use the 1.0 spec compliant CSP parser to process their default or manifest specified. After discussing with Paul Theriault, we think we want to choose which parser to use based on the same pref that opts in to using the new parser for an unprefixed CSP header. I'll write the patch to do that.
Assignee | ||
Updated•12 years ago
|
Assignee: nobody → imelven
Status: NEW → ASSIGNED
OS: Linux → All
Hardware: x86_64 → All
Assignee | ||
Updated•12 years ago
|
Blocks: csp-w3c-1.0, CSP
Assignee | ||
Comment 1•12 years ago
|
||
Assignee | ||
Comment 2•12 years ago
|
||
I did a try push to check that the B2G mochitests pass with this patch and the other patches I would like to land to turn on CSP 1.0 for desktop Firefox. https://tbpl.mozilla.org/?tree=Try&rev=6cda7e50be0c&showall=1 There are existing mochitests that check that privileged/trusted apps have the correct default CSP applied to them and that apps that specify a CSP in their manifest work correctly. This patch makes sure the behavior of B2G doesn't change until it's explicitly decided to do so by landing bug 858787 and we're sure we've done the work to make it ok to do so wrt apps, mochitests, etc. by fixing that bug's blockers.
Assignee | ||
Updated•12 years ago
|
Attachment #734866 -
Flags: review?(jonas)
Comment 3•12 years ago
|
||
Comment on attachment 734866 [details] [diff] [review] patch v1 Stealing review from Jonas here to offload him a bit. r=jst
Attachment #734866 -
Flags: review?(jonas) → review+
Assignee | ||
Comment 4•12 years ago
|
||
(In reply to Johnny Stenback (:jst, jst@mozilla.com) from comment #3) > Comment on attachment 734866 [details] [diff] [review] > patch v1 > > Stealing review from Jonas here to offload him a bit. r=jst Thank you Johnny !
Assignee | ||
Comment 5•12 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/0dd127fed18a
Comment 6•12 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/0dd127fed18a
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla23
You need to log in
before you can comment on or make changes to this bug.
Description
•