Closed Bug 1203981 Opened 9 years ago Closed 9 years ago

Icons for feed reader applications no longer show in feed subscription UI

Categories

(Firefox Graveyard :: RSS Discovery and Preview, defect)

Product:
Firefox Graveyard
Component:
RSS Discovery and Preview
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(firefox43 affected)

Status:
RESOLVED INVALID
Tracking Flags:
Tracking Status
firefox43 --- affected

People

(Reporter: Gijs, Unassigned)

References

Details

Because the feed reader page isn't privileged, the icons don't show up.

Chalking up another reason why this subscription UI needs to move into chrome. :-(
The subscription UI used to be privileged and was a regular source of remote code execution bugs. Be very very careful in how this is exposed. Mainly the problems were elsewhere, but an easily accessible way for web content to open a reference to a privileged window turns a "universal XSS" bug into a "remote code execution" bug (that is turns a sec-high into a sec-critical, but sec-high is already really bad).
In bug 1109714 the UI is changed to no longer have icons, so this becomes INVALID.
Blocks: 1109714
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INVALID
Product: Firefox → Firefox Graveyard
You need to log in before you can comment on or make changes to this bug.