Open Bug 1494457 Opened 6 years ago Updated 2 years ago

PBackgroundLocalStorageCache, PBackgroundSDBConnection, PCacheStorage can be constructed with fraudulent principal, origin, private browsing id

Categories

(Core :: Storage: localStorage & sessionStorage, enhancement, P3)

Product:
Core
Component:
Storage: localStorage & sessionStorage
Type:
enhancement

Tracking

()

Project Flags:
Fission Milestone Future

People

(Reporter: tjr, Unassigned)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

In PBackground.ipdl, the following methods accept a principal, origin, and/or privatebrowsingId and uses it to construct actors which contains those values as members.

- PBackgroundSDBConnection
- PBackgroundLocalStorageCache
- PCacheStorage

A Rogue Content Process could supply fraudulent values to these Actor Constructor and operate on another origin's data. The supplied principal/etc should be checked to ensure that the supplied data is valid for this content process.
See Also: → 1494458
Priority: -- → P3

This bug is not a Fission MVP blocker.

Fission Milestone: --- → Future
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.