1494327 - Allow Popups For This Site is not keyed by OriginAttributes

Status: RESOLVED FIXED

(Firefox :: Security, defect, P3)

Description

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

From a fresh profile I logged into gmail in two different containers. I allowed popups in one container for gmail, popped an email message out, and then tested in a second container and the popup was allowed without a prompt.

Comment 1

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

This should be fixed by Arthur's Permission patch, we'll just have to verify it

Comment 2

[Ethan Tseng [:ethan]]

(In reply to Tom Ritter [:tjr] from comment #1)
> This should be fixed by Arthur's Permission patch, we'll just have to verify
> it

Arthur, could you identify the bug number so we can track it?

Comment 3

[Arthur Edelstein [:arthur]]

1330467(In reply to Ethan Tseng [:ethan] from comment #2)
> (In reply to Tom Ritter [:tjr] from comment #1)
> > This should be fixed by Arthur's Permission patch, we'll just have to verify
> > it
> 
> Arthur, could you identify the bug number so we can track it?

Bug 1330467 :)

Comment 4

[Johann Hofmann [:johannh]]

Since popups is a permission we could just dupe it to bug 1330467, I'd leave that up to you.

Comment 5

[Ethan Tseng [:ethan]]

(In reply to Johann Hofmann [:johannh] from comment #4)
> Since popups is a permission we could just dupe it to bug 1330467, I'd leave
> that up to you.

Let's set it as resolve duplicate after we verify it. Thanks.

Comment 6

[Ethan Tseng [:ethan]]

Tom, can we close this bug as fixed by bug 1330467? Could you verify?

Comment 7

[Johann Hofmann [:johannh]]

It's not fixed yet since we still need to avoid stripping userContextId, so the real bug to track here is bug 1422056 :)