13021 - Replace AppCores with scriptable components

Status: RESOLVED FIXED

(Core :: XUL, defect, P1)

Description

[Norris Boyd]

From Brendan's Architectural meeting notes:

2.2  AppCores (http://lxr.mozilla.org/seamonkey/find?string=AppCore)
  should be superceded by XPIDL-declared scriptable components.

  Alecf is leading the way, everyone agrees on the goal, so I'm closing
  this as an architecture action; bugzilla can handle any implementation
  problems.

This item is important because there is no mechanism for securing access to
AppCores, only to scriptable components.

Comment 1

[Peter Trudelle]

reassigning to scc

Comment 2

[Norris Boyd]

Needed for beta security. cc'ing jevering as per our meeting today

Comment 3

[Scott Collins]

*** Bug 9615 has been marked as a duplicate of this bug. ***

Comment 4

[Scott Collins]

No visible effect to users.  Not dogfood.

Comment 5

[Norris Boyd]

Not dogfood, but some solution is needed for beta to close the security holes.

Comment 6

[Scott Collins]

re-prioritizing to M12, as warranted by security concerns.  Thanks norris.

Comment 7

[Brendan Eich [:brendan]]

don sez law has this almost fixed.

/be

Comment 8

[Bill Law]

No "appcores" are utilized nowadays.  I'm holding changes to actually remove the
mozilla/xpfe/AppCores directory from the build so I'm leaving this bug open till
that happens.

Comment 9

[don]

Move this to M13 since it's not a dogfood issue.

Comment 10

[Paul MacQuiddy]

giving me rest of phillips open qa contact bugs, sorry for spam

Comment 11

[don]

Not required for beta 1.

Comment 12

[Norris Boyd]

Actually, XPAppCoresManager isn't defined anymore in the namespace of web
scripts, so the security bugs that depend on this have been resolved. Did
XPAppCoresManager just get renamed, since this bug is still open?

Comment 13

[Bill Law]

No, all the appcores stuff is no longer used.  It is still built because I
haven't checked in all the makefile/script tweaks to remove it.  This bug is
waiting for that to happen (which I really should get around to...).

Comment 14

[Simon Fraser [no longer active]]

Well, i nuked appcores and associated resources on the Mac, god help me.

Comment 15

[Paul MacQuiddy]

*IGNORE* - more massive spam, changing open XPToolkit bug's QA contact to
[e-mail]

Comment 16

[Paul MacQuiddy]

*IGNORE* - massive spam changing open XPToolkit bug's QA contact to
[e-mail]

Comment 17

[don]

Move to M16 for now ...

Comment 18

[K Carter]

Should this bug be closed - or is work still required for Windows?

Comment 19

[John Morrison]

Looks like sspitzer did the honors on win32 and unix Feb 05 2000
  e.g. http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/xpfe/Makefile.in
       http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/xpfe/Makefile.in
and xpfe/AppCores is no longer in the tree.

I'd say it's done, but perhaps there is something else I'm not aware of, so...

Comment 20

[Bill Law]

Yes, this can be closed now.  It just never had a high enough priority to even
appear on any of the queries I've been working from, sad to say.

Comment 21

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/fa82a0322741
[fenix] Closes https://github.com/mozilla-mobile/fenix/issues/13021: Fix verifyAboutFirefoxPreview UI test