GetChannelPrincipalWithSignedPkg needs to handle userContextId correctly.

RESOLVED WONTFIX

Status

()

Core
DOM: Security
RESOLVED WONTFIX
2 years ago
2 years ago

People

(Reporter: huseby, Unassigned)

Tracking

(Blocks: 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [userContextId][OA])

(Reporter)

Description

2 years ago
In the file TabParent.cpp there is a call to createCodebasePrincipal here: 

https://mxr.mozilla.org/mozilla-central/source/dom/ipc/TabParent.cpp#499

I am 99% sure this code is correct.  I'm filing this bug so that somebody will confirm that.  We need to look at how the newly created principal is used.  Is it used for isolating any browser state?  If so, do we want to isolate on user context id?
(Reporter)

Updated

2 years ago
Component: DOM → DOM: Security
That function is made for FXOS NSec, and Bug 1260876 is likely to remove mSignedPkg from TabParent::ShouldSwitchProcess.
(Reporter)

Updated

2 years ago
Whiteboard: [userContextId] → [userContextId][OA]
Bug 1260876 removed this function.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.