1494447 - PBackgroundStorage.ipdl accepts origin data unchecked from content process

Status: NEW

(Core :: Storage: localStorage & sessionStorage, enhancement, P3)

Description

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

Most of the parent messages in PBackgroundStorage.ipdl construct an origin based on data supplied by the Content Process. A Rogue Content Process could use this to add, edit, delete, or possibly read data for other origins. 

Ideally, the Actor would be refactored to have the origin as a private member so the child does not need to supply it. (When doing so, care must be taken not to construct the actor with content-process-supplied-origin data however.)

If that is not possible, the origin supplied by the content process should be validated to ensure it is a valid value for that content process.

Comment 1

[Chris Peterson [:cpeterson]]

This bug is not a Fission MVP blocker.