Open Bug 1402096 Opened 6 years ago Updated 5 months ago

frameAncestors gets an empty url for sandboxed frames

Categories

(WebExtensions :: Request Handling, enhancement, P3)

49 Branch
enhancement

Tracking

(Not tracked)

People

(Reporter: mixedpuppy, Unassigned)

References

Details

The principals (triggering/loading) for a sandboxed iframe are nullprincipals so we dont get a url for the iframe itself, though we have its ancestors.  Possible workaround or fix in bug 1305237 comment 50.
Shane, let me know if this should be a higher priority.
Priority: -- → P3
Sandboxed iframes are not a particularly common feature, but this might still matter to security add-ons.
Product: Toolkit → WebExtensions
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.