1216905 - CSP frame-ancestors shows wrong error message in b2g

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: General, defect)

Description

[Paul Theriault [:pauljt] (no longer reading bugmail)]

CSP frame-ancestors allows pages to decide who they get framed by. (basically the same effect as x-frame-options-allow). 

On b2g we dont have the rigth error page, and when CSP blocks the page, its just a generic network error. I'll attach screenshots to show the different between desktop and b2g.

Comment 1

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Attachment: cspUXerror.png

Comment 2

[Paul Theriault [:pauljt] (no longer reading bugmail)]

cspUXerror.png shows how on b2g we dont show a CSP warning, we just say it a was a network error.

Comment 3

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Attachment: nightlycsp.png

This is what it should look like.

Comment 4

[Paul Theriault [:pauljt] (no longer reading bugmail)]

(PS this doesn't need to block 2.5)

Comment 5

[Paul Theriault [:pauljt] (no longer reading bugmail)]

PPS you can test with http://praw.nz/frame.html

Comment 6

[Christoph Kerschbaumer [:ckerschb}]

Paul, B2G specific bug, can we close or reclassify?

Comment 7

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Realistically no-one is working on this any more. I think we can close this and roll this into the general task of improving warning pages on FxOS.