Closed Bug 1028769 Opened 10 years ago Closed 10 years ago

FxA navigator.mozID API: move access check from child process (nsDOMIdentity.js) to parent process(DOMIdentity.jsm)

Categories

(Firefox OS Graveyard :: FxA, defect)

Product:
Firefox OS Graveyard
Component:
FxA
Platform:
ARM
Gonk (Firefox OS)
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1028398

People

(Reporter: spenrose, Assigned: jedp)

References

Details

Currently nsDOMIdentity.request() checks whether the calling app has permissions to access Firefox Accounts:

  https://github.com/mozilla/gecko-dev/blob/master/dom/identity/nsDOMIdentity.js#L178

To deepen defense against a client which has comprised this routine, move the check to DOMIdentity.jsm.
Assignee: nobody → jparsons
Status: NEW → ASSIGNED
Oh sweet - :ferjm is already doing this as part of Bug 1028398.  Thanks, Fernando.
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.