Bug 1703629 Comment 4 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

### Security Approval Request
* **How easily could an exploit be constructed based on the patch?**: The patch is vague/generic enough that it shouldn't be too obvious what the problem is. It does point at prompt acting on the wrong window which is a good hint though, only if you read the code, the commit message is vague on purpose.
* **Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?**: No
* **Which older supported branches are affected by this flaw?**: all
* **If not all supported branches, which bug introduced the flaw?**: None
* **Do you have backports for the affected branches?**: Yes
* **If not, how different, hard to create, and risky will they be?**: 
* **How likely is this patch to cause regressions; how much testing does it need?**: It might cause some regressions in prompts being discarded too eagerly, there might be cases where we do want to keep a prompt around when the page navigates that I didn't think of.
### Security Approval Request
* **How easily could an exploit be constructed based on the patch?**: The patch is vague/generic enough that it shouldn't be too obvious what the problem is. It does point at prompt acting on the wrong window which is a good hint though, only if you read the code, the commit message is vague on purpose.
* **Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?**: No
* **Which older supported branches are affected by this flaw?**: all
* **If not all supported branches, which bug introduced the flaw?**: None
* **Do you have backports for the affected branches?**: Yes
* **If not, how different, hard to create, and risky will they be?**: 
* **How likely is this patch to cause regressions; how much testing does it need?**: It might cause some regressions in prompts being discarded too eagerly, there might be cases not covered by automation where we do want to keep a prompt around when the page navigates that I didn't think of.

Back to Bug 1703629 Comment 4