Closed Bug 13024 Opened 25 years ago Closed 25 years ago

Disable XUL download

Categories

(Core :: Networking, defect, P3)

Product:
Core
Component:
Networking
Platform:
All
Windows NT
Type:
defect

Tracking

()

Status:
VERIFIED INVALID

People

(Reporter: norrisboyd, Assigned: norrisboyd)

Details

We need to disable the ability to download XUL files to prevent a host of
security exploits. See 10725 and 11457 for examples.
Blocks: 12633
Assignee: gagan → rpotts
Summary: Disable XUL download → Disable XUL download
Target Milestone: M14
This doesn't seem like a necko issue. Maybe the docloader or something.
Blocks: 11457
Blocks: 11527
Blocks: 12190
Followup on warren's comment above: are you the right owner for this?

This is required for beta. M14 is too late.
cc'ing jevering as per our meeting today
No longer blocks: 12190
No longer blocks: 11527
Bulk move of all Necko (to be deleted component) bugs to new Networking

component.
Moving Rick's M14 bugs to M13 (since he won't be here for M14). He can triage
them to M15 as appropriate.
Assignee: rpotts → norris
I don't see where the networking library can do anything about this. It has to
be dealt with at a higher level. Maybe the docshell.
Status: NEW → RESOLVED
Closed: 25 years ago
Resolution: --- → INVALID
I think we can now allow XUL download. XUL files that don't come from chrome:
URIs don't have any special privileges.
Verified invalid.
No longer blocks: 11457, 12633
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.