Eval(), new Function() should never execute with system principal.It is being removed everywhere from our codebase as part of Bug 1473549. The affected code which should be rewritten, https://dxr.mozilla.org/mozilla-central/rev/c291143e24019097d087f9307e59b49facaf90cb/toolkit/content/widgets/autocomplete.xml#415
Component: Autocomplete → DOM: Security
Product: Toolkit → Core
Assignee: nobody → jallmann
Status: NEW → ASSIGNED
You need to log in before you can comment on or make changes to this bug.