Bug 1513003 Comment 0 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on 
The RemoteLogins:findLogins request and RemoteLogins:loginsFound response allows any origin to query for saved logins for any origin.

We should ensure that the form and action urls that are passed to the parent are valid for the Content Process they originate from.
Revision 1 by
on 
The PasswordManager:findLogins request and PasswordManager:loginsFound response allows any origin to query for saved logins for any origin.

We should ensure that the form and action urls that are passed to the parent are valid for the Content Process they originate from.

Back to Bug 1513003 Comment 0