1319460 - [meta] Audit privileged users of createObjectURL

Status: NEW

(Firefox :: General, defect)

Description

[Mike Conley (:mconley) (:⚙️)]

It you are running in privileged scope and use createObjectURL on a Blob, the GC will not know when it can get rid of the Blob that you're referring to.

For normal web sites, that's not really a big deal because once the last window with the Blob URL domain goes away, then the URL is revoked automatically and the Blob is GC'd. However, in privileged scope, the "domain" is "null", and the last window will never go away (except on shutdown which is too late).

When you're done with a Blob URL, you need to explicitly revokeObjectURL with the URL. We should audit any privileged users of createObjectURL to make sure we're doing that.

Comment 1

[Mike Conley (:mconley) (:⚙️)]

See related bug 1317817.