Closed Bug 1552477 Opened 1 year ago Closed 1 year ago

follow-up: Disallow http(s) resources to be loaded into system privileged documents in non-debug builds

Categories

(Core :: DOM: Security, enhancement, P2)

enhancement

Tracking

()

RESOLVED FIXED
mozilla69
Tracking Status
firefox69 --- fixed

People

(Reporter: freddy, Assigned: freddy)

References

Details

(Whiteboard: [domsecurity-active])

Attachments

(1 file)

In bug 1513445, we disallowed remote documents to be loaded in the systemprincipal for debug builds only

This bug shall make it so, that all builds are prohibited from showing this behavior.
I'm expecting the initial change to be easy but cause some breakage here and there, so waiting until we're into a full new cycle before checking in.

Priority: -- → P2
Whiteboard: [domsecurity-active]
Attachment #9065998 - Attachment description: Bug 1552477 - Disallow System Principal to load remote documents for all builds r?ckerschb → Bug 1552477 - Disallow System Principal to load remote documents in nightly/early beta r?ckerschb
Keywords: checkin-needed

Pushed by csabou@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/f3dee38996fa
Disallow System Principal to load remote documents in nightly/early beta r=ckerschb

Keywords: checkin-needed
Pushed by csabou@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/0b0bb258f531
Add "=" to the skip-if syntax. r=bustage CLOSED TREE
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla69
You need to log in before you can comment on or make changes to this bug.