1147996 - Enable interception of CSP reports through service workers

Status: RESOLVED FIXED

(Core :: DOM: Security, defect)

Description

[(no longer active)]

This is the exact underlying issue in bug 1147695, and I have a similar patch that fixes it.

Comment 1

[(no longer active)]

Attachment: Enable interception of CSP reports through service workers

Currently when sending a CSP report, HttpBaseChannel::ShouldIntercept tries to
get access to the nsINetworkInterceptController interface through the channel's
notification callbacks, but in this case the notification callback is the
CSPReportRedirectSink object (thanks to nsCORSListenerProxy::Init).

This patch extends CSPReportRedirectSink to make it aware of
nsINetworkInterceptController, and have it route the request for
nsINetworkInterceptController correctly to the docshell without the need to
mess with the notification callbacks.

This will be tested in bug 1147699.

Comment 2

[(no longer active)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/84792fb8d1bd

Comment 3

[Phil Ringnalda (:philor)]

https://hg.mozilla.org/mozilla-central/rev/84792fb8d1bd