1497195 - Apply Meta CSP to about:crashes

Status: RESOLVED FIXED

(Core :: DOM: Security, enhancement, P3)

Comment 1

[Christoph Kerschbaumer [:ckerschb]]

Attachment: bug_1497195_csp_about_crashes.patch

Comment 2

[:Gijs (he/him)]

(this can't land until bug 965637 lands, but x-ref'ing in bug 1469520 so we can update that if/when this lands)

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

There's a r+ patch which didn't land and no activity in this bug for 2 weeks.
:ckerschb, could you have a look please?

Comment 4

[Christoph Kerschbaumer [:ckerschb]]

Before we can apply CSP to system privileged about pages we have to fix Bug 965637, in which we move the CSP from the Principal into the Client. Please note that the Meta Bug 1492063 for applying CSP to system privileged about: pages is blocked by 965637. At the moment we are fixing the last remaining blockers and as soon as we have landed Bug 965637 I'll try to land all the dependencies of Bug 1492063 so we end up having all about: pages secured by a CSP.

Comment 5

[Christoph Kerschbaumer [:ckerschb]]

Attachment: Bug 1497195: Apply Meta CSP to about:crashes. r=gijs

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3e7bc2a561a5
Apply Meta CSP to about:crashes.

Comment 7

[Daniel Varga [:dvarga]]

https://hg.mozilla.org/mozilla-central/rev/3e7bc2a561a5

Comment 8

[Daniel Varga [:dvarga]]

https://hg.mozilla.org/mozilla-central/rev/3e7bc2a561a5

Comment 9

[Christoph Kerschbaumer [:ckerschb]]

Attachment: Bug 1497195: Apply Meta CSP to about:networking. r=gijs

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/80e58bbe2e88
Apply Meta CSP to about:networking.

Comment 11

[Christoph Kerschbaumer [:ckerschb]]

(In reply to Pulsebot from comment #10)

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/80e58bbe2e88
Apply Meta CSP to about:networking.

Ah boy - this patch has the wrong bug number, it should be Bug 1497201.

Aryx, anything we can do about that or do we have to back it out and land again with the right bug number?

Comment 12

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/80e58bbe2e88

Comment 13

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Backed out patch which landed with wrong bug number (and relanded it with bug 1497201): https://hg.mozilla.org/integration/autoland/rev/fa2384f76e274d7ce77039d0d2ff68905e03cf5c