Closed Bug 1337660 Opened 8 years ago Closed 7 years ago

about:healthreport loads remote content in the parent (unsandboxed) process

Categories

(Firefox Health Report Graveyard :: Client: Desktop, defect, P4)

Product:
Firefox Health Report Graveyard
Component:
Client: Desktop
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: pauljt, Unassigned)

References

Details

Running remote web content outside the content sandbox is dangerous. about:healthreport loads remote content from https://fhr.cdn.mozilla.net. Its low risk since it seems to be all from this one host, under out control, but ideally we would load all remote web content in a content process.
Priority: -- → P4
Summary: about:health report loads remote content in the parent (unsandboxed) process → about:healthreport loads remote content in the parent (unsandboxed) process
Hurray, about:healthreport got removed. :-) (bug 1352497)
Status: NEW → RESOLVED
Closed: 7 years ago
Depends on: 1352497
Resolution: --- → WORKSFORME
Product: Firefox Health Report → Firefox Health Report Graveyard
You need to log in before you can comment on or make changes to this bug.