Closed Bug 1287647 Opened 9 years ago Closed 9 years ago

Resource Timing should not include no-cors cross-origin stylesheet subresources

Categories

(Core :: DOM: Core & HTML, defect)

50 Branch
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1180145

People

(Reporter: jackwillzac, Unassigned)

Details

1. Visit http://jsfiddle.net/g4z32jfa/ 2. See console logs Resource Timing should not include an entry for the font.
Valentin, looks like you've done work on the resource timing API in the past, can you take a look? (FWIW, I don't know that I understand exactly how this is a security issue and/or if it needs to stay sec-sensitive?)
Group: firefox-core-security → core-security
Component: Developer Tools: Performance Tools (Profiler/Timeline) → DOM
Flags: needinfo?(valentin.gosu)
OS: Windows 7 → All
Product: Firefox → Core
Hardware: x86_64 → All
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Flags: needinfo?(valentin.gosu)
Resolution: --- → DUPLICATE
Group: core-security
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.