Closed Bug 1170193 Opened 10 years ago Closed 6 years ago

The permission UI in data: URIs allows you to add a Permission Manager entry

Categories

(Firefox :: Site Permissions, defect)

Product:
Firefox
Component:
Site Permissions
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: nika, Unassigned, Mentored)

Details

If a data: URI requests access to the camera, the user has the option to "Never Share" which adds an entry to the Permission Manager with a host like `moz-nullprincipal:{64232ad3-acb0-b84f-b06f-199591434642}`. This isn't even useful within a single session, as if the page requests again, the request will pop up again. The UI should not allow users to add permission entries for data: URIs.
-> Device Permissions
Component: WebRTC → Device Permissions
Product: Core → Firefox
The test at http://mxr.mozilla.org/mozilla-central/source/browser/modules/webrtcUI.jsm?rev=56da5d401fe2#229 needs to be changed a little bit to take this case into account.
Mentor: florian

This was solved for gUM in bug 1371741 and is "prevented" for other permission prompts by bug 1438781.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.