Closed Bug 916586 Opened 11 years ago Closed 10 years ago

Don't expose window.getInterface to web content

Categories

(Core :: DOM: Core & HTML, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: bruant.d, Unassigned)

References

Details

I can see it from Firefox 23 to 26. I'm not sure what it is. I can't find a standard for it (tried to look in the Window interface and WebIDL as they are the only specs that look relevant), Chrome doesn't seem to have it.
I assume it's internal infrastructure.
It's http://mxr.mozilla.org/mozilla-central/source/xpcom/base/nsIInterfaceRequestor.idl#33 and we have no way to hide it right now if chrome script pokes it.  See also bug 866222.

Moving to WebIDL bindings will let us fix this.
Depends on: 789261
(In reply to Boris Zbarsky [:bz] from comment #1)
> Moving to WebIDL bindings will let us fix this.
That's what I thought too (I should have set the dependency, sorry). Just wanted to file it to make sure it's not forgetten.
David, do you mind retesting this please?
Flags: needinfo?(bruant.d)
(In reply to :Ehsan Akhgari (lagging on bugmail, needinfo? me!) from comment #3)
> David, do you mind retesting this please?
I don't see getInterface any longer. So it's been properly fixed by bug 789261. Thanks! :-)
Status: NEW → RESOLVED
Closed: 10 years ago
Flags: needinfo?(bruant.d)
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.