Closed Bug 1260906 Opened 8 years ago Closed 8 years ago

StorageDirectoryHelper need to do the right thing with user context id origin attribute

Categories

(Core :: DOM: Security, defect)

Product:
Core
Component:
DOM: Security
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: huseby, Assigned: timhuang)

References

Details

(Whiteboard: [userContextId][OA]) 

There's a call to createCodebasePrincipal here:

https://mxr.mozilla.org/mozilla-central/source/dom/quota/ActorsParent.cpp#6197

It appears to be passing the origin attributes correctly to the function.  However, we need to analyze how the principal is used after being created.  Is it used to isolate browser state in any way?  If so, do we want to isolate on user context, or do we want to force it to the default value and disable user context isolation for this subsystem?
Component: DOM → DOM: Security
Assignee: nobody → tihuang
Status: NEW → ASSIGNED
(In reply to Dave Huseby [:huseby] from comment #0)
>
> Is it used to isolate browser state in any way?  If so, do we want to
> isolate on user context, or do we want to force it to the default value and
> disable user context isolation for this subsystem?
Bug 1195930 will use origin attributes for QuotaManager (StorageDirectoryHelper)

AFAIK we want to have seperate data-jar per userContext.
So we shouldn't use DEFAULT_USER_CONTEXT_ID here, as it will make all user contexts share the same data-jar.
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → INVALID
Whiteboard: [userContextId] → [userContextId][OA]
You need to log in before you can comment on or make changes to this bug.