CSP regression: BugzillaJS inline treeherder results are broken

NEW
Unassigned

Status

()

bugzilla.mozilla.org
User Interface: Modal
10 months ago
10 months ago

People

(Reporter: mrbkap, Unassigned)

Tracking

Production

Details

(Reporter)

Description

10 months ago
One feature provided by the BugzillaJS extension [1] is to add inline treeherder results in bugs. This is done by inserting an iframe in comments with links to treeherder with a specially crafted URL [2] that gives a summary of the results. With the new CSP, the iframe doesn't load.

For some reason I don't get an error in my JS console about this -- I wonder if that's because the iframe is added dynamically.

Would it be possible to get an exception to the CSP or to find a better way to implement this?

Thanks.

[1] https://addons.mozilla.org/en-US/firefox/addon/bugzillajs/
[2] https://treeherder.mozilla.org/embed/resultset-status/<tree>/<rev>
(Reporter)

Updated

10 months ago
Severity: major → normal
a better way to implement this would be a patch that adds it to the bug modal view. I will look at the code in a little bit and update this bug with my recommendation.
You need to log in before you can comment on or make changes to this bug.