Open Bug 1136836 Opened 9 years ago Updated 2 years ago

Load chrome: URLs through parent process


(Core :: Security: Process Sandboxing, defect, P3)





(Reporter: billm, Unassigned)


(Blocks 1 open bug)


(Whiteboard: sb+)

Filing this based on bug 1136407. If we prevent the content process from accessing the profile directory, then we need to give it a way to access chrome: URLs. Otherwise, add-ons won't be able to load frame scripts.

Jed, please dupe this if it's already filed. I couldn't find anything.
Blocks: 1083344
This bug is also affecting at least Mac but I don't know for Windows, so I refrain from changing platform to "all". Bugzilla offers not multiple choice option here.
Blocks: 1124817
I filed bug 1109293 for something similar with resource: URLs.  In that bug I suggested that they resolve to the remoteopenfile: scheme instead of file:, to reuse the code that currently makes app:// work on B2G, but there might be a better way than that.
Whiteboard: sbwc2
Whiteboard: sbwc2 → sbwc3
Blocks: 922481
Priority: -- → P3
Whiteboard: sbwc3 → sb+
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.