Closed
Bug 1513680
Opened 6 years ago
Closed 4 years ago
Restrict ContentSearch messages to the Activity Stream Process
Categories
(Firefox :: Search, enhancement, P3)
Firefox
Search
Tracking
()
People
(Reporter: tjr, Assigned: standard8)
References
(Depends on 1 open bug, Blocks 1 open bug)
Details
Attachments
(2 files)
In browser/modules/ContentSearch.jsm, the Content Process can send a bunch of types of messages (all under the ContentSearch banner) and receive replies. May of these leak cross-origin data.
These messages are only needed for the (new) Activity Stream Process, so we should restrict them to there.
Updated•6 years ago
|
Priority: -- → P3
Assignee | ||
Comment 2•4 years ago
|
||
I think I have a patch for this.
Assignee: nobody → standard8
Status: NEW → ASSIGNED
Assignee | ||
Comment 3•4 years ago
|
||
Assignee | ||
Comment 4•4 years ago
|
||
Depends on D102226
Assignee | ||
Comment 5•4 years ago
|
||
Depends on D102227
Pushed by mbanner@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/15316a4ffa13
Remove remaining references to ContentSearch.jsm. r=daleharvey
https://hg.mozilla.org/integration/autoland/rev/e27a6bdbce13
Restrict ContentSearch messages to the privilegedabout process. r=daleharvey
Comment 7•4 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/15316a4ffa13
https://hg.mozilla.org/mozilla-central/rev/e27a6bdbce13
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
status-firefox86:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 86 Branch
Assignee | ||
Updated•4 years ago
|
Iteration: --- → 86.3 - Jan 11 - Jan 24
Points: --- → 3
You need to log in
before you can comment on or make changes to this bug.
Description
•