Bug 1558299 Comment 19 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on 
### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: File: URLs treated as same origins cause an important security issue as this bug shows.
* **User impact if declined**: see the description of this bug and the following comments
* **Fix Landed on Version**: 69
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: This patch has been discussed a lot and we decide that we want to have this patch in ESR60. The risk is low because other browsers have a similar behavior. Plus, we have a pref to restore the previous value if needed: security.fileuri.strict_origin_policy
* **String or UUID changes made by this patch**: none

### Beta/Release Uplift Approval Request
* **User impact if declined**: See the rest of this comment
* **Is this code covered by automated tests?**: No
* **Has the fix been verified in Nightly?**: Yes
* **Needs manual test from QE?**: Yes
* **If yes, steps to reproduce**: STR in a previous comment
* **List of other uplifts needed**: None
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: See above.
* **String changes made/needed**: none
Revision 1 by
on 
### ESR Uplift Approval Request
* **If this is not a sec:{high,crit} bug, please state case for ESR consideration**: File: URLs treated as same origins cause an important security issue as this bug shows.
* **User impact if declined**: see the description of this bug and the following comments
* **Fix Landed on Version**: 69
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: This patch has been discussed a lot and we decide that we want to have this patch in ESR68. The risk is low because other browsers have a similar behavior. Plus, we have a pref to restore the previous value if needed: nprivacy.file_unique_origin
* **String or UUID changes made by this patch**: none

### Beta/Release Uplift Approval Request
* **User impact if declined**: See the rest of this comment
* **Is this code covered by automated tests?**: No
* **Has the fix been verified in Nightly?**: Yes
* **Needs manual test from QE?**: Yes
* **If yes, steps to reproduce**: STR in a previous comment
* **List of other uplifts needed**: None
* **Risk to taking this patch**: Low
* **Why is the change risky/not risky? (and alternatives if risky)**: See above.
* **String changes made/needed**: none

Back to Bug 1558299 Comment 19