Open Bug 1495887 Opened 6 years ago Updated 2 years ago

PDNSRequest can be constructed with a fraudulent Origin Attributes

Categories

(Core :: Networking: DNS, enhancement, P3)

Product:
Core
Component:
Networking: DNS
Type:
enhancement

Tracking

()

Project Flags:
Fission Milestone Future

People

(Reporter: tjr, Unassigned)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

(Whiteboard: [necko-triaged]) 

In PNecko, the PDNSRequest actor can be constructed with fraudulent origin attributes by a rogue content process. The origin attributes should be checked to ensure it is a valid value based on the Content Process the message is received from.

The impact of this is decidedly low: a rogue content process can cause DNS responses to be cached for other origins, the private browsing mode, or other containers.
Whiteboard: [necko-triaged]

This bug is not a Fission MVP blocker.

Fission Milestone: --- → Future
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.