Closed
Bug 1396017
Opened 7 years ago
Closed 7 years ago
window.title exposes tab.title without "tabs" permission
Categories
(WebExtensions :: General, enhancement)
Tracking
(firefox57 fixed)
RESOLVED
FIXED
mozilla57
Tracking | Status | |
---|---|---|
firefox57 | --- | fixed |
People
(Reporter: ke5trel, Assigned: kmag)
References
Details
Attachments
(1 file)
window.title gives the title preface, tab title and browser name all joined together. This is problematic since the "tabs" permission is normally required to read tab titles but window.title is giving access without permission. I'm not sure why the full window title needs to be made available anyway, since tab.title is already available and it would seem preferable to be able to read the title preface separately.
Assignee | ||
Updated•7 years ago
|
Assignee: nobody → kmaglione+bmo
Status: UNCONFIRMED → NEW
Ever confirmed: true
Comment hidden (mozreview-request) |
Any reason for not just simply providing window.titlePreface so it can be read separately and without permission issues?
Comment 3•7 years ago
|
||
mozreview-review |
Comment on attachment 8903739 [details] Bug 1396017: Redact window titles without the appropriate tabs permissions. https://reviewboard.mozilla.org/r/175502/#review180736
Attachment #8903739 -
Flags: review?(mixedpuppy) → review+
Assignee | ||
Comment 4•7 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/9b9159079eea2092d5914e8f263135a79e92cfe5 Bug 1396017: Redact window titles without the appropriate tabs permissions. r=mixedpuppy
Comment 5•7 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/9b9159079eea
Status: NEW → RESOLVED
Closed: 7 years ago
status-firefox57:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla57
Comment 6•7 years ago
|
||
Is manual testing required on this bug? If Yes, please provide some STR and the proper webextension(if required), if No set the “qe-verify-“ flag.
Flags: needinfo?(kmaglione+bmo)
Updated•7 years ago
|
Flags: needinfo?(kmaglione+bmo) → qe-verify-
Updated•6 years ago
|
Product: Toolkit → WebExtensions
You need to log in
before you can comment on or make changes to this bug.
Description
•