Closed Bug 1557074 Opened 5 years ago Closed 5 years ago

Re-Enable Mozilla Content Process Isolation

Categories

(Core :: DOM: Content Processes, defect, P2)

defect

Tracking

()

VERIFIED FIXED
mozilla71
Tracking Status
firefox-esr60 --- unaffected
firefox-esr68 --- disabled
firefox69 --- disabled
firefox70 --- disabled
firefox71 + fixed

People

(Reporter: tjr, Assigned: tjr)

References

(Regressed 1 open bug)

Details

(Keywords: csectype-priv-escalation, sec-other, Whiteboard: [post-critsmash-triage])

Attachments

(2 files)

This bug's blockers are the things we need to fix to re-enable this.

Group: dom-core-security
Blocks: 1554596
Depends on: 1556655

The priority flag is not set for this bug.
:jimm, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(jmathies)
Flags: needinfo?(jmathies)
Priority: -- → P2

Noting for context, re-enablement will be done by switching the browser.tabs.remote.separatePrivilegedMozillaWebContentProcess pref from false to true, and once can do this locally for testing purposes.

Relman may want to keep an eye on this for Nightly 71.

(In reply to Ryan Kelly [:rfkelly] from comment #2)

Noting for context, re-enablement will be done by switching the browser.tabs.remote.separatePrivilegedMozillaWebContentProcess pref from false to true, and once can do this locally for testing purposes.

Does it mean that qa can do the AMO installs and Fxa testing on Nightly 71 by switching the mentioned pref on true or we must wait until we see it on true in about:config ( this is what I understand by being automatically enabled) ?

Also, should we wait until https://bugzilla.mozilla.org/show_bug.cgi?id=1556655 is fixed first ?

There is a PI filed for AMO installs and Fxa https://jira.mozilla.com/browse/PI-147 where Firefox Release Train is 70 and testing was requested only on beta (beta70). Manual qa was not requested for Nightly but only for Beta. I can update the PI with the correct testing environments if I get the correct information.

So please let us know.
Thanks!

(In reply to Ioana Rusiczki from comment #4)

(In reply to Ryan Kelly [:rfkelly] from comment #2)

Noting for context, re-enablement will be done by switching the browser.tabs.remote.separatePrivilegedMozillaWebContentProcess pref from false to true, and once can do this locally for testing purposes.

Does it mean that qa can do the AMO installs and Fxa testing on Nightly 71 by switching the mentioned pref on true or we must wait until we see it on true in about:config ( this is what I understand by being automatically enabled) ?

You can switch it now and test.

Also, should we wait until https://bugzilla.mozilla.org/show_bug.cgi?id=1556655 is fixed first ?

No, I will land a fix for this separately and verify it myself. The underlying problem causing this (relating to process switching during downloads) was concerning to me; but I could not cause it outside of this specific scenario (e.g. by doing Save Link As or anything else), so if it is a problem hopefully it will show up during your testing.

There is a PI filed for AMO installs and Fxa https://jira.mozilla.com/browse/PI-147 where Firefox Release Train is 70 and testing was requested only on beta (beta70). Manual qa was not requested for Nightly but only for Beta. I can update the PI with the correct testing environments if I get the correct information.

Yes, this should only be tested on 71

And Nightly only, this isn't riding trains yet.

https://hg.mozilla.org/integration/autoland/rev/c6cdd18f14022f0f808da0142b2180b3bef9b266
https://hg.mozilla.org/mozilla-central/rev/c6cdd18f1402

Not setting "Release-Track Client Security Bug" due to

And Nightly only, this isn't riding trains yet.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla71
Regressions: 1584709
Group: dom-core-security → core-security-release

I tested on FF71 the attached test cases - AMO installs and fxA

I did not find regressions caused by enabling browser.tabs.remote.separatePrivilegedMozillaWebContentProcess (already on true on FF71).

AMO installs:
There would be some edge cases which are already known since they're reproducible on FF69 (in the relation between the detail pages on AMO and add-on Manager). I will discuss those with the AMO team.

FxA:
I noticed two issues and logged them but none of these are a regression caused by this issue. The fxA UI is going through some changes right now.

https://bugzilla.mozilla.org/show_bug.cgi?id=1585299
https://bugzilla.mozilla.org/show_bug.cgi?id=1585315

Flags: qe-verify+
Whiteboard: [post-critsmash-triage]
Status: RESOLVED → VERIFIED
Flags: qe-verify+

@Tom Ritter <tom@mozilla.com>

The only issue tracking these changes was this one which is verified on Nightly 71.
Also https://bugzilla.mozilla.org/show_bug.cgi?id=1539595 was closed on FF69 milestone. I believe it is no longer up to date.

A next step is the beta testing meaning I should send a preliminary status report on Nov 15, 2019.
The pref browser.tabs.remote.separatePrivilegedMozillaWebContentProcess is set on false on FF71.0b6.
Can qa start testing it by switching the pref on true? And will you open another bugzilla issue so the beta testing can be tracked too?

I believe this modification is going to land in FF71 - release? Or does it have another schedule?

(In reply to Ioana Rusiczki from comment #9)

@Tom Ritter <tom@mozilla.com>

The only issue tracking these changes was this one which is verified on Nightly 71.
Also https://bugzilla.mozilla.org/show_bug.cgi?id=1539595 was closed on FF69 milestone. I believe it is no longer up to date.

A next step is the beta testing meaning I should send a preliminary status report on Nov 15, 2019.
The pref browser.tabs.remote.separatePrivilegedMozillaWebContentProcess is set on false on FF71.0b6.
Can qa start testing it by switching the pref on true? And will you open another bugzilla issue so the beta testing can be tracked too?

I believe this modification is going to land in FF71 - release? Or does it have another schedule?

We are holding this feature on Nightly for now. It will interact with other things that (I think) are Nightly only, so I do not think it is worth the time to test on Beta right now.

Group: core-security-release
Regressions: 1626362
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: