### Security Approval Request * **How easily could an exploit be constructed based on the patch?**: The patch is vague/generic enough that it shouldn't be too obvious what the problem is. It does point at prompt acting on the wrong window which is a good hint though, only if you read the code, the commit message is vague on purpose. * **Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?**: No * **Which older supported branches are affected by this flaw?**: all * **If not all supported branches, which bug introduced the flaw?**: None * **Do you have backports for the affected branches?**: Yes * **If not, how different, hard to create, and risky will they be?**: * **How likely is this patch to cause regressions; how much testing does it need?**: It might cause some regressions in prompts being discarded too eagerly, there might be cases where we do want to keep a prompt around when the page navigates that I didn't think of.
Bug 1703629 Comment 4 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
### Security Approval Request * **How easily could an exploit be constructed based on the patch?**: The patch is vague/generic enough that it shouldn't be too obvious what the problem is. It does point at prompt acting on the wrong window which is a good hint though, only if you read the code, the commit message is vague on purpose. * **Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?**: No * **Which older supported branches are affected by this flaw?**: all * **If not all supported branches, which bug introduced the flaw?**: None * **Do you have backports for the affected branches?**: Yes * **If not, how different, hard to create, and risky will they be?**: * **How likely is this patch to cause regressions; how much testing does it need?**: It might cause some regressions in prompts being discarded too eagerly, there might be cases not covered by automation where we do want to keep a prompt around when the page navigates that I didn't think of.