Closed
Bug 1473247
Opened 6 years ago
Closed 6 years ago
Making the firstPartyDomain honors IP addresses
Categories
(Core :: DOM: Security, enhancement, P1)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
mozilla63
Tracking | Status | |
---|---|---|
firefox63 | --- | fixed |
People
(Reporter: timhuang, Assigned: timhuang)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-active])
Attachments
(2 files)
The firstPartyDomain won't be set if the first party is an IP address when the first party isolation is enabled. It is because of the TLD service doesn't treat IP addresses as a valid base domain. We should fix this since an IP address should be considered as a valid first party domain.
Comment 1•6 years ago
|
||
Are other origin attributes honored with IP addresses? eg containers, PB mode?
Assignee | ||
Comment 2•6 years ago
|
||
Yes, they are. The firstPartyDomain is the only one exception right now.
Assignee | ||
Updated•6 years ago
|
Status: NEW → ASSIGNED
Assignee | ||
Comment 3•6 years ago
|
||
Right now, the firstPartyDomain won't be set when using IP addresses as first party domains. It is because of that the TLD service won't accept IP addresses as valid hosts. The patch fixes this problem by detecting that if the host is a IP address. If it is, we will still set the firstPartyDoamin with the IP address.
Assignee | ||
Comment 4•6 years ago
|
||
Comment 5•6 years ago
|
||
Comment on attachment 8990106 [details] Bug 1473247 - Part 1: Fixing the issue that the IP addresses won't be set for first party domains. r=baku, arthuredelstein Andrea Marchesini [:baku] has approved the revision. https://phabricator.services.mozilla.com/D1977
Attachment #8990106 -
Flags: review+
Comment 6•6 years ago
|
||
Comment on attachment 8990107 [details] Bug 1473247 - Part 2: Add a test case for making sure that IP addresses can work properly for the firstPartyDomain. r=baku, arthuredelstein Andrea Marchesini [:baku] has approved the revision. https://phabricator.services.mozilla.com/D1978
Attachment #8990107 -
Flags: review+
Assignee | ||
Comment 7•6 years ago
|
||
Hi Arthur, Would you be able to review this? Or do you encounter any problem with registering a Phabricator account? If so, please let me know, I can find someone to help.
Flags: needinfo?(arthuredelstein)
Comment 8•6 years ago
|
||
Comment on attachment 8990106 [details] Bug 1473247 - Part 1: Fixing the issue that the IP addresses won't be set for first party domains. r=baku, arthuredelstein Arthur Edelstein (Tor Browser dev) [:arthuredelstein] has approved the revision. https://phabricator.services.mozilla.com/D1977
Attachment #8990106 -
Flags: review+
Comment 9•6 years ago
|
||
Comment on attachment 8990107 [details] Bug 1473247 - Part 2: Add a test case for making sure that IP addresses can work properly for the firstPartyDomain. r=baku, arthuredelstein Arthur Edelstein (Tor Browser dev) [:arthuredelstein] has approved the revision. https://phabricator.services.mozilla.com/D1978
Attachment #8990107 -
Flags: review+
Comment 10•6 years ago
|
||
Thanks and sorry for the delay!
Updated•6 years ago
|
Flags: needinfo?(arthuredelstein)
Assignee | ||
Comment 11•6 years ago
|
||
Try looks good. https://treeherder.mozilla.org/#/jobs?repo=try&revision=f03f95724d5315a32daa9d5b578f55b0599872e3
Comment 12•6 years ago
|
||
Pushed by tihuang@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/03e45d7472a0 Part 1: Fixing the issue that the IP addresses won't be set for first party domains. r=arthuredelstein,baku
Comment 13•6 years ago
|
||
Pushed by tihuang@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/01f390f36d95 Part 2: Add a test case for making sure that IP addresses can work properly for the firstPartyDomain. r=arthuredelstein,baku
Comment 14•6 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/03e45d7472a0 https://hg.mozilla.org/mozilla-central/rev/01f390f36d95
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
status-firefox63:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla63
You need to log in
before you can comment on or make changes to this bug.
Description
•