Open Bug 1583818 Opened 5 years ago Updated 1 year ago

nsIPermissionManager documentation should mention excluded principal origin attributes

Categories

(Core :: Permission Manager, task, P3)

task

Tracking

()

People

(Reporter: emz, Unassigned, Mentored)

Details

(Keywords: priv-triaged)

In the nsPermissionManager implementation, permissions keys created from principals have some of the origin attributes stripped. See: https://searchfox.org/mozilla-central/rev/45f30e1d19bde27bf07e47a0a5dd0962dd27ba18/extensions/permissions/nsPermissionManager.cpp#180,183
This has a high impact on the consumers and should be mentioned in the interface documentation.

Priority: -- → P3
Severity: normal → S3

The interface is here: https://searchfox.org/mozilla-central/source/netwerk/base/nsIPermissionManager.idl we can add a note that we key / modify permissions by principal, but that we currently strip userContextId which means all containers share the same permissions.

Mentor: pbz
Keywords: priv-triaged
You need to log in before you can comment on or make changes to this bug.