Closed Bug 1525943 Opened 6 years ago Closed 1 year ago

We should show the identity block for web-controlled about:blank, and the identity popup should show the domain + permissions of the site controlling about:blank

Categories

(Firefox :: Site Identity, defect, P3)

defect

Tracking

()

RESOLVED FIXED
122 Branch
Tracking Status
firefox67 --- wontfix
firefox122 --- fixed

People

(Reporter: Gijs, Assigned: bvandersloot)

References

Details

Attachments

(3 files, 3 obsolete files)

STR:

  1. open a website of your choice, e.g. https://www.mozilla.org/
  2. open the web console
  3. run: document.body.onclick = () => { w = window.open("about:blank", "_blank"); }
  4. click somewhere in the document body
  5. observe URL bar in the newly opened tab

ER:
show identity block that lets you find out who opened about:blank

AR:
it doesn't.

I agree that this seems like an improvement. It might be nice to be able to convey the fact that this is an about:blank that's controlled by https://www.mozilla.org/ in the control center somehow.

Priority: -- → P3
Severity: normal → S3
Assignee: nobody → pbz
Status: NEW → ASSIGNED
Attachment #9323222 - Attachment description: WIP: Bug 1525943 - Update the identity section from principal.URI rather than gBrowser.currentURI. → Bug 1525943 - Update the identity section from principal.URI rather than gBrowser.currentURI.
Attachment #9323222 - Attachment description: Bug 1525943 - Update the identity section from principal.URI rather than gBrowser.currentURI. → Bug 1525943 - Update the identity section from the content principal URI rather than gBrowser.currentURI. r=Gijs!,nika!
Attachment #9323223 - Attachment description: WIP: Bug 1525943 - Show identity section for web controlled about:blank. → Bug 1525943 - Show identity section for web controlled about:blank. r=Gijs!
Attachment #9324742 - Attachment description: WIP: Bug 1525943 - Update PageInfo to get URI from content principal. → Bug 1525943 - Update PageInfo to get URI from content principal. r=Gijs!

I currently don't have time to work on this more. The WIP patches attached are not quite ready to be landed. The tricky part are the different UIs relying on the browser URI (identity panel, page info). Some need the full URI, some only the origin. Additionally some internal pages need special handling, such as the PDF viewer. I'm afraid this will need a bigger refactor.

Assignee: pbz → nobody
Status: ASSIGNED → NEW
See Also: → CVE-2024-0749
Attachment #9323223 - Attachment is obsolete: true
Attachment #9323222 - Attachment is obsolete: true
Attachment #9324742 - Attachment is obsolete: true
Assignee: nobody → bvandersloot
Status: NEW → ASSIGNED
Pushed by bvandersloot@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/ee1bbb0ae2ca Update the identity section from the content principal URI rather than gBrowser.currentURI. r=Gijs,nika https://hg.mozilla.org/integration/autoland/rev/756623a58d9f Show identity section for web controlled about:blank. r=Gijs https://hg.mozilla.org/integration/autoland/rev/c3e4663577c4 Add associated to the identity UI - r=pbz,Gijs,nika,flod
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
Target Milestone: --- → 122 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: