1555036 - COOP: check browsing context's popup sandboxing flag

Status: RESOLVED FIXED

(Core :: DOM: Navigation, task, P2)

Description

[Valentin Gosu [:valentin] (he/him)]

I was just looking over the COOP implementation and I realised something is missing:
"If doc's browsing context's popup sandboxing flag set is not empty, then navigate doc's browsing context to a network error." [1]

[1] https://gist.github.com/annevk/6f2dd8c79c77123f39797f6bdac43f3e

Comment 1

[Valentin Gosu [:valentin] (he/him)]

Nika, I'm not exactly sure what the popup sandboxing flag is, or how to get it from the BC.
Can you point me in the right direction? Thanks!

Comment 2

[Nika Layzell [:nika] (ni? for response)]

I believe that the sandbox flags you're interested in are the ones defined here: https://searchfox.org/mozilla-central/rev/7556a400affa9eb99e522d2d17c40689fa23a729/dom/base/IframeSandboxKeywordList.h#22. Specifically, the "allow-popups" flag sets the SANDBOXED_AUXILIARY_NAVIGATION flag internally.

On a nsIDocShell I believe you can get the flags with nsIDocShell::GetSandboxFlags() (https://searchfox.org/mozilla-central/rev/7556a400affa9eb99e522d2d17c40689fa23a729/docshell/base/nsDocShell.cpp#5468), but I'm guessing you'll want them in the LoadInfo. I don't think the SANDBOXED_AUXILIARY_NAVIGATION bit is currently copied over, though I may be wrong, but it shouldn't be too hard to do. We also do it with some other sandbox flags here:https://searchfox.org/mozilla-central/rev/7556a400affa9eb99e522d2d17c40689fa23a729/docshell/base/nsDocShell.cpp#10405-10407

Comment 3

[Valentin Gosu [:valentin] (he/him)]

Attachment: Bug 1555036 - If there is a Cross-Origin-Opener-Policy mismatch and the SANDBOXED_AUXILIARY_NAVIGATION is set navigate to a network error r=mayhemer

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/311baee18a93
If there is a Cross-Origin-Opener-Policy mismatch and the SANDBOXED_AUXILIARY_NAVIGATION is set navigate to a network error r=mayhemer

Comment 5

[Andreea Pavel [:apavel]]

https://hg.mozilla.org/mozilla-central/rev/311baee18a93