1554622 - Disable right-click for manifest view

Status: RESOLVED WONTFIX

(DevTools :: Application Panel, defect, P3)

Description

[Ola Gasidlo [:ogasidlo] [:ola] OOO - please ping :ladybenko:]

To minimise the security risk, we should disable right-click for the manifest view page so no content can be injected. Chrome does the same thing out of the same reasons.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug is a task, but please change it back in case of error.

Comment 2

[Sylvestre Ledru [:Sylvestre]]

Why do you think it is a defect? Thanks

Comment 3

[Belén [:ladybenko]]

Hi :sylvestre, we discussed in our triage: this is a security issue once we implement https://bugzilla.mozilla.org/show_bug.cgi?id=1554620 (the bug this one depends on). If you'd rather us not to set it as a bug until that dependency is met, we can do that as well.

Comment 4

[Ola Gasidlo [:ogasidlo] [:ola] OOO - please ping :ladybenko:]

As our approach changed and we do not load the manifest by the panel, but it will be served by platform we do not need to take security measures and can close this bug.