Open Bug 991758 Opened 11 years ago Updated 2 years ago

Poison the JSRuntime so that it may not run script without a valid entry on the script settings stack

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Platform:
x86
macOS
Type:
defect

Tracking

()

People

(Reporter: bholley, Unassigned)

References

Details

See the bottom of bug 989528 comment 3. We should decide whether we want to gracefully fail, or to just hard-abort. If we do the latter, we probably want to do it in release builds, to guard against nasty addons.

Graceful failure is probably better, though it's probably harder to track down bugs. One option is to abort in debug builds, and gracefully fail in release.
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.