CSP regression: BugzillaJS inline treeherder results are broken

NEW
Unassigned

Status

()

2 years ago
a year ago

People

(Reporter: mrbkap, Unassigned)

Tracking

Production

Firefox Tracking Flags

(Not tracked)

Details

One feature provided by the BugzillaJS extension [1] is to add inline treeherder results in bugs. This is done by inserting an iframe in comments with links to treeherder with a specially crafted URL [2] that gives a summary of the results. With the new CSP, the iframe doesn't load.

For some reason I don't get an error in my JS console about this -- I wonder if that's because the iframe is added dynamically.

Would it be possible to get an exception to the CSP or to find a better way to implement this?

Thanks.

[1] https://addons.mozilla.org/en-US/firefox/addon/bugzillajs/
[2] https://treeherder.mozilla.org/embed/resultset-status/<tree>/<rev>
Severity: major → normal
a better way to implement this would be a patch that adds it to the bug modal view. I will look at the code in a little bit and update this bug with my recommendation.
Have we decided if we're adding Treeherder as an extension?
Flags: needinfo?(dylan)
That would be the best option. ashughes was able to get socorro lens in pretty easily so there is precedent.
Flags: needinfo?(dylan)
You need to log in before you can comment on or make changes to this bug.