1246766 - [View Source] broken in Firefox OS nightly builds

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: Gaia::System, defect)

Description

[Marco Perez [:mpk]]

Trying to view the source of any page/app (enable View Source Gesture)
shows a blank page. It worked fine until a few days ago.
This happens on a Flame running nightly-latest (with base v4 as well as v5).

The console emits:
I/GeckoConsole(  206): Security Error:
   Content at app://system.gaiamobile.org/index.html may not load
   or link to view-source:http://example.com/.

Comment 1

[Marco Perez [:mpk]]

The regression was apparently introduced between
https://ftp.mozilla.org/pub/b2g/nightly/2016/01/2016-01-28-03-02-41-mozilla-central-flame-kk/
and
https://ftp.mozilla.org/pub/b2g/nightly/2016/01/2016-01-29-15-02-28-mozilla-central-flame-kk/
.

Comment 2

[:Gijs (he/him)]

Are app: URLs not privileged?

Comment 3

[Marco Perez [:mpk]]

(In reply to :Gijs Kruitbosch from comment #2)
> Are app: URLs not privileged?

I think they are.

It used to work in the browser, any other system app (including the lock screen and the home screen) and as far as I can tell any user app.

The actual steps-to-reproduce are:
- "Enable View Source Gesture" in "Settings" -> "Developer"
- navigate to whatever's source code you 'd like to see
- press and hold the Flame's power button -> menu
- select "View source"
- get the source code window (blank instead of with source code)

Comment 4

[Marco Perez [:mpk]]

Attachment: Screenshot of the [View Source Window] (with the problem)

Comment 5

[:Gijs (he/him)]

I don't have access to FxOS and so I can't do much to help beyond point at what is at issue here: the thing that's opening the view-source URL needs to have the privileges to do so. It would be an additional security risk to revert that decision (from bug 1172165).

Comment 6

[Boris Zbarsky [:bzbarsky]]

> I think they are.

Note that "privileged" in this case means "system principal".  I doubt app: URLs are that.

Comment 7

[[:fabrice] Fabrice Desré]

(In reply to Boris Zbarsky [:bz] from comment #6)
> > I think they are.
> 
> Note that "privileged" in this case means "system principal".  I doubt app:
> URLs are that.

That's correct. Also apps are going away, so I would not spend time fixing that.

Comment 8

[Marco Perez [:mpk]]

(In reply to [:fabrice] Fabrice Desré from comment #7)
> That's correct. Also apps are going away, so I would not spend time fixing that.

Ok, thanks. What's the bug number where this is being tracked?

Comment 9

[[:fabrice] Fabrice Desré]

The meta bug for that is bug 1252143

Comment 10

[Marco Perez [:mpk]]

There's no need to keep this open any longer.