1319881 - Remove UsingNeckoIPCSecurity

Status: RESOLVED FIXED

(Core :: Networking, defect, P3)

Description

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

Currently UsingNeckoIPCSecurity is false or not used on all our tier-1 platforms. This flag makes check that, for example, a content process that's only used for private browsing doesn't access your non-private browsing cookies.

Since the flag is disabled, the code that checks it is pretty much dead (GetValidatedOriginAttributes for example). I think we probably want to be able to enable UsingNeckoIPCSecurity at some point. However, we've seen that it causes crashes even when it's only partially enabled (bug 1317611 and bug 1289001). So if we want to turn it on we'll have to resolve those.

I think we'll need to turn this flag on if we're serious about sandboxing content processes. But it's going to take a bit of investment to make it work.

Comment 1

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258

Comment 2

[Sylvestre Ledru [:Sylvestre]]

Moving to p3 because no activity for at least 1 year(s).
See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information

Comment 3

[sagudev]

As stated in https://phabricator.services.mozilla.com/D71468#inline-419975 this will be follow-up bug for https://bugzilla.mozilla.org/show_bug.cgi?id=1322254 as UsingNeckoIPCSecurity has now constant value.

Comment 4

[sagudev]

Attachment: Bug 1319881 - Remove UsingNeckoIPCSecurity r=valentin

Comment 5

[sagudev]

Attachment: Bug 1319881 - Remove UsingNeckoIPCSecurity r=valentin

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/62baa75c6241
Remove UsingNeckoIPCSecurity r=valentin,necko-reviewers

Comment 7

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/62baa75c6241