Re-Enable Mozilla Content Process Isolation
Categories
(Core :: DOM: Content Processes, defect, P2)
Tracking
()
People
(Reporter: tjr, Assigned: tjr)
References
(Regressed 1 open bug)
Details
(Keywords: csectype-priv-escalation, sec-other, Whiteboard: [post-critsmash-triage])
Attachments
(2 files)
This bug's blockers are the things we need to fix to re-enable this.
Assignee | ||
Updated•5 years ago
|
Updated•5 years ago
|
Updated•5 years ago
|
Comment 1•5 years ago
|
||
The priority flag is not set for this bug.
:jimm, could you have a look please?
For more information, please visit auto_nag documentation.
Assignee | ||
Updated•5 years ago
|
Comment 2•5 years ago
|
||
Noting for context, re-enablement will be done by switching the browser.tabs.remote.separatePrivilegedMozillaWebContentProcess
pref from false
to true
, and once can do this locally for testing purposes.
Comment 3•5 years ago
|
||
Relman may want to keep an eye on this for Nightly 71.
Comment 4•5 years ago
•
|
||
(In reply to Ryan Kelly [:rfkelly] from comment #2)
Noting for context, re-enablement will be done by switching the
browser.tabs.remote.separatePrivilegedMozillaWebContentProcess
pref fromfalse
totrue
, and once can do this locally for testing purposes.
Does it mean that qa can do the AMO installs and Fxa testing on Nightly 71 by switching the mentioned pref on true or we must wait until we see it on true in about:config ( this is what I understand by being automatically enabled
) ?
Also, should we wait until https://bugzilla.mozilla.org/show_bug.cgi?id=1556655 is fixed first ?
There is a PI filed for AMO installs and Fxa https://jira.mozilla.com/browse/PI-147 where Firefox Release Train is 70 and testing was requested only on beta (beta70). Manual qa was not requested for Nightly but only for Beta. I can update the PI with the correct testing environments if I get the correct information.
So please let us know.
Thanks!
Assignee | ||
Comment 5•5 years ago
•
|
||
(In reply to Ioana Rusiczki from comment #4)
(In reply to Ryan Kelly [:rfkelly] from comment #2)
Noting for context, re-enablement will be done by switching the
browser.tabs.remote.separatePrivilegedMozillaWebContentProcess
pref fromfalse
totrue
, and once can do this locally for testing purposes.Does it mean that qa can do the AMO installs and Fxa testing on Nightly 71 by switching the mentioned pref on true or we must wait until we see it on true in about:config ( this is what I understand by being
automatically enabled
) ?
You can switch it now and test.
Also, should we wait until https://bugzilla.mozilla.org/show_bug.cgi?id=1556655 is fixed first ?
No, I will land a fix for this separately and verify it myself. The underlying problem causing this (relating to process switching during downloads) was concerning to me; but I could not cause it outside of this specific scenario (e.g. by doing Save Link As or anything else), so if it is a problem hopefully it will show up during your testing.
There is a PI filed for AMO installs and Fxa https://jira.mozilla.com/browse/PI-147 where Firefox Release Train is 70 and testing was requested only on beta (beta70). Manual qa was not requested for Nightly but only for Beta. I can update the PI with the correct testing environments if I get the correct information.
Yes, this should only be tested on 71
Updated•5 years ago
|
Assignee | ||
Comment 6•5 years ago
|
||
And Nightly only, this isn't riding trains yet.
Comment 7•5 years ago
|
||
https://hg.mozilla.org/integration/autoland/rev/c6cdd18f14022f0f808da0142b2180b3bef9b266
https://hg.mozilla.org/mozilla-central/rev/c6cdd18f1402
Not setting "Release-Track Client Security Bug" due to
And Nightly only, this isn't riding trains yet.
Updated•5 years ago
|
Updated•5 years ago
|
Comment 8•5 years ago
|
||
I tested on FF71 the attached test cases - AMO installs and fxA
I did not find regressions caused by enabling browser.tabs.remote.separatePrivilegedMozillaWebContentProcess (already on true on FF71).
AMO installs:
There would be some edge cases which are already known since they're reproducible on FF69 (in the relation between the detail pages on AMO and add-on Manager). I will discuss those with the AMO team.
FxA:
I noticed two issues and logged them but none of these are a regression caused by this issue. The fxA UI is going through some changes right now.
https://bugzilla.mozilla.org/show_bug.cgi?id=1585299
https://bugzilla.mozilla.org/show_bug.cgi?id=1585315
Updated•5 years ago
|
Updated•5 years ago
|
Updated•5 years ago
|
Comment 9•5 years ago
|
||
@Tom Ritter <tom@mozilla.com>
The only issue tracking these changes was this one which is verified on Nightly 71.
Also https://bugzilla.mozilla.org/show_bug.cgi?id=1539595 was closed on FF69 milestone. I believe it is no longer up to date.
A next step is the beta testing meaning I should send a preliminary status report on Nov 15, 2019.
The pref browser.tabs.remote.separatePrivilegedMozillaWebContentProcess
is set on false on FF71.0b6.
Can qa start testing it by switching the pref on true? And will you open another bugzilla issue so the beta testing can be tracked too?
I believe this modification is going to land in FF71 - release? Or does it have another schedule?
Assignee | ||
Comment 10•5 years ago
|
||
(In reply to Ioana Rusiczki from comment #9)
@Tom Ritter <tom@mozilla.com>
The only issue tracking these changes was this one which is verified on Nightly 71.
Also https://bugzilla.mozilla.org/show_bug.cgi?id=1539595 was closed on FF69 milestone. I believe it is no longer up to date.A next step is the beta testing meaning I should send a preliminary status report on Nov 15, 2019.
The prefbrowser.tabs.remote.separatePrivilegedMozillaWebContentProcess
is set on false on FF71.0b6.
Can qa start testing it by switching the pref on true? And will you open another bugzilla issue so the beta testing can be tracked too?I believe this modification is going to land in FF71 - release? Or does it have another schedule?
We are holding this feature on Nightly for now. It will interact with other things that (I think) are Nightly only, so I do not think it is worth the time to test on Beta right now.
Updated•4 years ago
|
Description
•