Closed Bug 1541062 Opened 7 months ago Closed 6 months ago

Remove eval() from updates.js

Categories

(Core :: DOM: Security, task, P3)

task

Tracking

()

RESOLVED FIXED
mozilla68
Tracking Status
firefox68 --- wontfix
firefox69 --- fixed

People

(Reporter: jallmann, Assigned: jallmann)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog1])

Attachments

(1 file)

Removing eval() from system privileged code as part of Bug 1473549.

https://searchfox.org/mozilla-central/source/toolkit/mozapps/update/content/updates.js#302

This eval() in the updates-wizard code needs to go.

Remove eval() from updates.js
Refactor code to make mapping of pageids to js-objects obsolete
Remove now unnecessary object attributes from wizard pages in updates.xul

Type: defect → task
Status: NEW → ASSIGNED
Keywords: checkin-needed
Keywords: checkin-needed
Status: ASSIGNED → RESOLVED
Closed: 6 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla68
You need to log in before you can comment on or make changes to this bug.