Closed Bug 1579179 Opened 3 years ago Closed 3 years ago

Inconsistent handling of the loadinfo GetSkipContentSniffing flag

Categories

(Core :: DOM: Security, defect, P1)

defect

Tracking

()

RESOLVED FIXED
mozilla71
Tracking Status
firefox71 --- fixed

People

(Reporter: bzbarsky, Assigned: sstreich)

References

Details

(Whiteboard: [domsecurity-active])

Attachments

(1 file)

Some places pay attention to that flag for all channels, but some do it only for HTTP channels (because they QI the request to nsIHttpChannel, not nsIChannel). We should probably consistently do this for all channels.

Basti, can you take a look please?

Flags: needinfo?(sstreich)
Assignee: nobody → sstreich
Flags: needinfo?(sstreich)
Status: NEW → ASSIGNED
Priority: -- → P1
Whiteboard: [domsecurity-active]
Keywords: checkin-needed

Pushed by ncsoregi@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/196b0b3db456
Use nsIChannel for noSniff checks r=ckerschb

Keywords: checkin-needed
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla71
You need to log in before you can comment on or make changes to this bug.