1274020 - Add a test to show that the DOM Cache is separated by origin attributes

Status: RESOLVED FIXED

(Core :: DOM: Security, defect, P2)

Description

[Tanvi Vyas[:tanvi]]

The DOM Cache is a separate cache/datastore that is used by ServiceWorkers and scripts.  This could be an easy way to track across containers if we didn't properly segragate the DOM cache by usercontextid.  This bug is to add an automated test case to ensure that we do separate based on usercontextId.

I believe this depends on the quota manager bug 1195930, as the DOM cache gets the principal from quota manager.

A bunch of useful links on DOM Cache:
https://developer.mozilla.org/cs/docs/Web/API/Cache
https://bugzilla.mozilla.org/show_bug.cgi?id=940273
https://dxr.mozilla.org/mozilla-central/source/dom/cache/PrincipalVerifier.cpphttps://dxr.mozilla.org/mozilla-central/source/dom/cache/ManagerId.cpp
https://blog.wanderview.com/blog/2014/12/08/implementing-the-serviceworker-cache-api-in-gecko/
https://slightlyoff.github.io/ServiceWorker/spec/service_worker/#cache-objects

Comment 1

[Jonathan Hao (inactive) [:jhao]]

Attachment: Bug 1274020 - Tests that shows the Cache Web API is separated by origin attributes.

Review commit: https://reviewboard.mozilla.org/r/96886/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/96886/

Comment 2

[Andrea Marchesini [:baku]]

Comment on attachment 8816083 [details]
Bug 1274020 - Tests that shows the Cache Web API is separated by origin attributes.

https://reviewboard.mozilla.org/r/96886/#review98540

::: browser/components/originattributes/test/browser/browser_cacheAPI.js:19
(Diff revision 1)
> +  });
> +}
> +
> +IsolationTestTools.runTests("https://test2.example.com", getResult, null, null,
> +                            false, /* aUseHttps */ true);
> +

extra line

Comment 3

[Jonathan Hao (inactive) [:jhao]]

Thanks, baku.

Comment 4

[Jonathan Hao (inactive) [:jhao]]

Comment on attachment 8816083 [details]
Bug 1274020 - Tests that shows the Cache Web API is separated by origin attributes.

Review request updated; see interdiff: https://reviewboard.mozilla.org/r/96886/diff/1-2/

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/4264286be28a
Tests that shows the Cache Web API is separated by origin attributes. r=baku

Comment 6

[Phil Ringnalda (:philor)]

https://hg.mozilla.org/mozilla-central/rev/4264286be28a