Closed
Bug 905379
Opened 11 years ago
Closed 6 years ago
Audit about:healthreport for chrome privileges and iframe docshell
Categories
(Firefox Health Report Graveyard :: Client: Android, defect)
Firefox Health Report Graveyard
Client: Android
Tracking
(Not tracked)
RESOLVED
INCOMPLETE
People
(Reporter: nalexander, Unassigned)
References
Details
gavin commented about chrome privileges in Bug 904612.
We need the chrome privileges set in
http://mxr.mozilla.org/mozilla-central/source/mobile/android/components/AboutRedirector.js#78
in
http://mxr.mozilla.org/mozilla-central/source/mobile/android/chrome/content/aboutHealthReport.js
to send messages to Java (for things like reading and setting Android shared preferences).
Presumably we're exposing a chrome docshell to the remote content
http://mxr.mozilla.org/mozilla-central/source/mobile/android/chrome
/content/aboutHealthReport.xhtml
as well. I think we should set 'mozframetype="content"' for the iframe here like you're suggesting in Bug 904612. gavin, can you verify, and suggest anything else that needs to happen?
Reporter | ||
Updated•11 years ago
|
Flags: needinfo?(gavin.sharp)
Comment 1•11 years ago
|
||
Looks like that is a bug that exists (though I don't have an easy way to verify), and that fix should be sufficient.
Flags: needinfo?(gavin.sharp)
Comment 2•11 years ago
|
||
Looks like I may have been wrong - see bug 856527 comment 5. I don't quite understand why, though.
Comment 3•6 years ago
|
||
Per https://bugzilla.mozilla.org/show_bug.cgi?id=1497137, this component is deprecated. Resolving this bug as incomplete, per :sdaswani.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → INCOMPLETE
Updated•6 years ago
|
Product: Firefox Health Report → Firefox Health Report Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•