1301201 - Avoid inheriting the origin attributes of the subject principal if it's system

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Comment 1

[(no longer active)]

Attachment: Avoid inheriting the origin attributes of the subject principal if it's system

Comment 2

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 8789065 [details] [diff] [review]
Avoid inheriting the origin attributes of the subject principal if it's system

r=me.  Though in the expanded/system principal case maybe it would make sense to inherit aParent's origin attributes?

Comment 3

[(no longer active)]

(In reply to Boris Zbarsky [:bz] from comment #2)
> Comment on attachment 8789065 [details] [diff] [review]
> Avoid inheriting the origin attributes of the subject principal if it's
> system
> 
> r=me.  Though in the expanded/system principal case maybe it would make
> sense to inherit aParent's origin attributes?

Hmm, maybe, but I'm curious to know your reasoning.  Can you please elaborate?

(FWIW I think we should make that change in a separate bug, if needed.)

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/c0322637f5ea
Avoid inheriting the origin attributes of the subject principal if it's system; r=bzbarsky

Comment 5

[Boris Zbarsky [:bzbarsky]]

> Hmm, maybe, but I'm curious to know your reasoning.  Can you please elaborate?

Sure.  Consider the "chrome or expanded principal calls window.open on a content window" case.  I think after the changes in this bug, that window will not be opened with any interesting OA, but it might make sense to use the OA of the content window the open() call happened on.

Comment 6

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/c0322637f5ea