1305331 - Audit chrome process for places which run remote web content

Status: RESOLVED FIXED

(Core :: Security, defect, P3)

Description

[Paul Theriault [:pauljt] (no longer reading bugmail)]

The sandbox security relies on a model where all untrusted web content runs in child processes. We need to identify places where remote web content is parsed/executed/rendered in the parent instead of the child.

Comment 1

[Ben Kelly [:bkelly, not reviewing]]

I think its theoretically possible for the ServiceWorkerManager to run a service worker script in the parent under some circumstances.  For example, about:serviceworkers update button probably does this.  At one point the about:debugging start button also ran the service worker in the parent process.

Our e10s refactor for service workers should remove the ability to do this in the future.

Comment 2

[Tom Ritter [:tjr]]

I think we can call this fixed with Bug 1560178

We investigated SW in Bug 1582512 and the instance we were seeing resolved itself (although we never bisected...)