Closed Bug 1469891 Opened 7 years ago Closed 7 years ago

PDF viewer broken by blocking FTP subresources

Categories

(Core :: DOM: Security, defect, P3)

Product:
Core
Component:
DOM: Security
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla62
Tracking Flags:
Tracking Status
firefox-esr52 --- unaffected
firefox-esr60 --- unaffected
firefox60 --- unaffected
firefox61 --- fixed
firefox62 --- fixed

People

(Reporter: evilpies, Assigned: evilpies)

References

Details

(Keywords: regression, Whiteboard: [domsecurity-active])

I was looking at pdf.js and noticed that Chrome broke pdf viewing when they started blocking FTP subresources: https://github.com/mozilla/pdf.js/pull/9595. See: ftp://ftp.sagu.edu/ for some pdf files It occurred to me that we also broke this by only allowing a narrow set of exceptions. PdfStreamConverter.jsm probably runs with the system principal. I vote we just allow the system principal to bypass the restriction for now. This would also fix bug 1469536.
Fixed by 1469536.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Assignee: nobody → evilpies
status-firefox60: --- → unaffected
status-firefox61: --- → fixed
status-firefox62: --- → fixed
status-firefox-esr52: --- → unaffected
status-firefox-esr60: --- → unaffected
Target Milestone: --- → mozilla62
You need to log in before you can comment on or make changes to this bug.