Open
Bug 1494457
Opened 7 years ago
Updated 19 days ago
PBackgroundLocalStorageCache, PBackgroundSDBConnection, PCacheStorage can be constructed with fraudulent principal, origin, private browsing id
Categories
(Core :: Storage: localStorage & sessionStorage, enhancement, P3)
Core
Storage: localStorage & sessionStorage
Tracking
()
NEW
| Fission Milestone | Future |
People
(Reporter: tjr, Unassigned)
References
(Depends on 1 open bug, Blocks 2 open bugs)
Details
(Keywords: sec-want)
In PBackground.ipdl, the following methods accept a principal, origin, and/or privatebrowsingId and uses it to construct actors which contains those values as members.
- PBackgroundSDBConnection
- PBackgroundLocalStorageCache
- PCacheStorage
A Rogue Content Process could supply fraudulent values to these Actor Constructor and operate on another origin's data. The supplied principal/etc should be checked to ensure that the supplied data is valid for this content process.
|
||
Updated•7 years ago
|
Priority: -- → P3
|
||
Updated•3 years ago
|
Severity: normal → S3
|
||
Updated•2 months ago
|
See Also: → pbackground-principal
|
||
Updated•1 month ago
|
Blocks: site-isolation-principal-vetting
Keywords: sec-want
You need to log in
before you can comment on or make changes to this bug.
Description
•