Closed Bug 1533595 Opened 6 years ago Closed 6 years ago

Check XUL about page's CSP

Categories

(Core :: DOM: Security, enhancement, P3)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1567910

People

(Reporter: bdahl, Unassigned)

References

Details

(Whiteboard: [domsecurity-backlog1])

Over in bug 1527977, I'll be changing XUL document to call Document::Endload (it didn't previously) which has an assertion for about pages and CSP. The asserition currently fails with many XUL documents. For now in that patch, I've added an early return for XULDocuments, but I imagine we want to enable that assertion for XUL too.

EndLoad Changes:
https://phabricator.services.mozilla.com/D21236#inline-130736

(In reply to Brendan Dahl [:bdahl] from comment #0)

Over in bug 1527977, I'll be changing XUL document to call Document::Endload (it didn't previously) which has an assertion for about pages and CSP. The asserition currently fails with many XUL documents. For now in that patch, I've added an early return for XULDocuments, but I imagine we want to enable that assertion for XUL too.

EndLoad Changes:
https://phabricator.services.mozilla.com/D21236#inline-130736

ni? myself to take a look - I am OOO at the moment - thanks for filing the bug.

Flags: needinfo?(ckerschb)

Thanks Brendan, that makes sense for now. Once we get close to fixing Bug 1492063, we will take out that early return.

Blocks: 1492063
Flags: needinfo?(ckerschb)
Priority: -- → P3
Whiteboard: [domsecurity-backlog1]

I am fixing problem over within Bug 1567910.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.