Closed
Bug 1514203
Opened 5 years ago
Closed 5 years ago
Make registerProtocolHandler() safelist based rather than blocklist
Categories
(Core :: DOM: Core & HTML, enhancement, P3)
Core
DOM: Core & HTML
Tracking
()
RESOLVED
DUPLICATE
of bug 1476035
People
(Reporter: annevk, Unassigned)
References
()
Details
Reportedly our current implementation doesn't use the safelist from the HTML Standard.
|
||
Updated•5 years ago
|
Keywords: dev-doc-needed
|
||
Updated•5 years ago
|
Priority: -- → P3
|
||
Comment 1•5 years ago
|
||
:annevk could you add a link for "the safelist from the HTML Standard" to the Details / URL field? I'd like to better understand / track this. Thanks!
Flags: needinfo?(annevk)
|
Reporter | |
Comment 2•5 years ago
|
||
There's some discussion around this as well:
- https://github.com/whatwg/html/issues/3998 (folks proposing to make it blocklist-based, which I'm not really sold on personally)
- https://github.com/whatwg/html/issues/3935 (adding dweb protocols)
- https://github.com/whatwg/html/issues?q=is%3Aopen+registerprotocolhandler (various others)
Flags: needinfo?(annevk)
|
||
Comment 3•5 years ago
|
||
(In reply to Anne (:annevk) from comment #0)
Reportedly our current implementation doesn't use the safelist from the HTML
Standard.
I... I think we do? Cf. https://searchfox.org/mozilla-central/rev/5e3bffe964110b8d1885b4236b8abd5c94d8f609/dom/base/Navigator.cpp#828-833 .
Flags: needinfo?(annevk)
|
|
||
Comment 4•5 years ago
|
||
(Originally fixed in bug 1476035, fwiw)
|
|
Reporter | |
Comment 5•5 years ago
|
||
Thanks, that had escaped some people, including me.
Status: NEW → RESOLVED
Closed: 5 years ago
Flags: needinfo?(annevk)
Resolution: --- → DUPLICATE
|
|
||
Updated•5 years ago
|
Keywords: dev-doc-needed
|
Assignee | |
Updated•5 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•