Closed Bug 1499768 Opened 2 years ago Closed 2 years ago

camera, microphone and speaker feature policy should have 'self' as default allowlist

Categories

(Core :: DOM: Security, enhancement)

enhancement
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla64
Tracking Status
firefox64 --- fixed

People

(Reporter: baku, Assigned: baku)

References

Details

(Whiteboard: [domsecurity-backlog1] [domsecurity-active])

Attachments

(1 file)

Currently we use 'all', but by spec it should be 'self'.

See: https://github.com/WICG/feature-policy/blob/master/features.md
Status: NEW → ASSIGNED
Whiteboard: [domsecurity-backlog1] [domsecurity-active]
Attached patch self_media.patchSplinter Review
Attachment #9017931 - Flags: review?(jib)
Comment on attachment 9017931 [details] [diff] [review]
self_media.patch

Review of attachment 9017931 [details] [diff] [review]:
-----------------------------------------------------------------

Lgtm.
Attachment #9017931 - Flags: review?(jib) → review+
Pushed by amarchesini@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/5b56f7a89ad4
camera, microphone and speaker feature policies should have 'self' as default allowlist, r=jib
https://hg.mozilla.org/mozilla-central/rev/5b56f7a89ad4
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla64
Depends on: 1503694
You need to log in before you can comment on or make changes to this bug.