Closed
Bug 1385943
Opened 8 years ago
Closed 8 years ago
window.isSecureContext returns incorrect result for DATA URIs
Categories
(Core :: DOM: Security, defect, P3)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: ericlaw1979, Unassigned)
Details
(Whiteboard: [domsecurity-backlog2])
Attachments
(1 file)
36.27 KB,
image/png
|
Details |
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0
Build ID: 20170628075643
Steps to reproduce:
window.isSecureContext from a DATA: frame on a HTTPS page
Actual results:
Returns true
Expected results:
Returns false, as in Edge and Chrome.
Reporter | ||
Comment 1•8 years ago
|
||
Component: Untriaged → Security
Comment 2•8 years ago
|
||
Probably a dupe of bug 1324406.
Updated•8 years ago
|
Priority: -- → P3
Whiteboard: [domsecurity-backlog2]
Comment 3•8 years ago
|
||
This does indeed appear to be fixed. Verified with https://bayden.com/test/data.htm and https://software.hixie.ch/utilities/js/live-dom-viewer/saved/5419.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•