Closed Bug 1218284 Opened 4 years ago Closed 4 years ago

Match signed packages' with trust origin without suffix

Categories

(Core :: Security, defect)

defect
Not set

Tracking

()

RESOLVED FIXED
mozilla44
Tracking Status
firefox44 --- fixed

People

(Reporter: jhao, Assigned: jhao)

References

Details

Attachments

(1 file)

In bug 1216469, we use the whole origin including suffix like "appId=1001&isBrowser=1"

This bug is to remove those suffix when matching trusted origins.
Hi Valentin,

Could you review this very short patch? Thanks.
Assignee: nobody → jhao
Status: NEW → ASSIGNED
Attachment #8678727 - Flags: review?(valentin.gosu)
Comment on attachment 8678727 [details] [diff] [review]
Match signed packages' with trust origin without suffix

Thanks!
Attachment #8678727 - Flags: review?(valentin.gosu) → review+
Keywords: checkin-needed
Blocks: nsec-verify
https://hg.mozilla.org/mozilla-central/rev/3045e988dd9f
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla44
You need to log in before you can comment on or make changes to this bug.