Open Bug 1521545 Opened 6 years ago Updated 2 years ago

Print warning when script is sandboxed

Categories

(Core :: DOM: Security, defect, P3)

Product:
Core
Component:
DOM: Security
Type:
defect

Tracking

()

People

(Reporter: annevk, Unassigned)

Details

(Whiteboard: [domsecurity-backlog2])

index.html:

<iframe srcdoc="<a href=popup.html target=test>Open a popup?</a>" sandbox="allow-popups"></iframe>

popup.html:

<script> document.write("Origin: " + self.origin + "<br>Name:" + self.name); </script>

I'd expect some kind of indication why the script in the popup failed to execute (it's sandboxed).

I feel like this should be in Core/Security (looks similar to Bug 752559).

Component: Console → Security
Product: DevTools → Core

Hi Jim, could you assign someone to help look into this issue?

Flags: needinfo?(jmathies)
Component: Security → DOM: Security
Flags: needinfo?(jmathies)

The priority flag is not set for this bug.
:ckerschb, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(ckerschb)
Flags: needinfo?(ckerschb)
Priority: -- → P3
Whiteboard: [domsecurity-backlog2]
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.