Closed Bug 1513680 Opened 6 years ago Closed 4 years ago

Restrict ContentSearch messages to the Activity Stream Process

Categories

(Firefox :: Search, enhancement, P3)

enhancement
Points:
3

Tracking

()

RESOLVED FIXED
86 Branch
Iteration:
86.3 - Jan 11 - Jan 24
Fission Milestone Future
Tracking Status
firefox86 --- fixed

People

(Reporter: tjr, Assigned: standard8)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

Attachments

(2 files)

In browser/modules/ContentSearch.jsm, the Content Process can send a bunch of types of messages (all under the ContentSearch banner) and receive replies. May of these leak cross-origin data. These messages are only needed for the (new) Activity Stream Process, so we should restrict them to there.
Priority: -- → P3

This bug is not a Fission MVP blocker.

Fission Milestone: --- → Future

I think I have a patch for this.

Assignee: nobody → standard8
Status: NEW → ASSIGNED
Depends on: 1687359
Pushed by mbanner@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/15316a4ffa13 Remove remaining references to ContentSearch.jsm. r=daleharvey https://hg.mozilla.org/integration/autoland/rev/e27a6bdbce13 Restrict ContentSearch messages to the privilegedabout process. r=daleharvey
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 86 Branch
Iteration: --- → 86.3 - Jan 11 - Jan 24
Points: --- → 3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: