1277381 - Prevent OS.File usage in the content process

Status: NEW

(Toolkit :: Async Tooling, defect)

Description

[Andrew McCreight [:mccr8]]

toolkit/components/osfile/modules/osfile_async_front.jsm implements various low-level file system related things. Right now, this can be loaded in the child process, though I don't know if it can actually be used. It would be good to raise an error or at least make osfile.jsm not load anything when run in a content process, to avoid future sandboxing issues.

I found one place that imports osfile.jsm in the content process, TelemetryController.jsm, but it doesn't actually seem to use it any more.

Haik, somebody from the sandboxing team might be interested in working on this.

Comment 1

[Andrew McCreight [:mccr8]]

Attachment: (not for landing) Throw when using OS.File in the content process.

This is just the simple bit of code I wrote to detect where it is being used.

Comment 2

[Julian Hector [:tedd] [:jhector]]

Moving to sblc3 which concludes removing/restricting file system access.