Closed
Bug 1513680
Opened 7 years ago
Closed 5 years ago
Restrict ContentSearch messages to the Activity Stream Process
Categories
(Firefox :: Search, enhancement, P3)
Firefox
Search
Tracking
()
People
(Reporter: tjr, Assigned: standard8)
References
(Depends on 1 open bug, Blocks 1 open bug)
Details
Attachments
(2 files)
In browser/modules/ContentSearch.jsm, the Content Process can send a bunch of types of messages (all under the ContentSearch banner) and receive replies. May of these leak cross-origin data.
These messages are only needed for the (new) Activity Stream Process, so we should restrict them to there.
Updated•7 years ago
|
Priority: -- → P3
| Assignee | ||
Comment 2•5 years ago
|
||
I think I have a patch for this.
Assignee: nobody → standard8
Status: NEW → ASSIGNED
| Assignee | ||
Comment 3•5 years ago
|
||
| Assignee | ||
Comment 4•5 years ago
|
||
Depends on D102226
| Assignee | ||
Comment 5•5 years ago
|
||
Depends on D102227
Pushed by mbanner@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/15316a4ffa13
Remove remaining references to ContentSearch.jsm. r=daleharvey
https://hg.mozilla.org/integration/autoland/rev/e27a6bdbce13
Restrict ContentSearch messages to the privilegedabout process. r=daleharvey
Comment 7•5 years ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/15316a4ffa13
https://hg.mozilla.org/mozilla-central/rev/e27a6bdbce13
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
status-firefox86:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 86 Branch
| Assignee | ||
Updated•5 years ago
|
Iteration: --- → 86.3 - Jan 11 - Jan 24
Points: --- → 3
You need to log in
before you can comment on or make changes to this bug.
Description
•