Closed Bug 1590109 Opened 5 years ago Closed 5 years ago

Consider using the top-level origin as an additional key for the font cache

Categories

(Core :: Layout: Text and Fonts, defect, P3)

Product:
Core
Component:
Layout: Text and Fonts
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1560580

People

(Reporter: annevk, Unassigned)

Details

Without such isolation there's the potential for top-level A and A embedded inside top-level B to share a bit of information, which can be used to attack A or potentially allow A to track a user across sites.

Component: Graphics: Text → Layout: Text and Fonts
Summary: Consider using the top-level origin for the font cache → Consider using the top-level origin as an additional key for the font cache
Priority: -- → P3

Now that our general isolation strategy will be dFPI, let's dupe this into bug 1560580.

No longer blocks: 1590107
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.