1607483 - Disallow loading http(s) scripts into system privileged contexts

Status: RESOLVED FIXED

(Core :: DOM: Security, enhancement, P1)

Description

[Christoph Kerschbaumer [:ckerschb]]

We stopped loading remote documents/frames into system privileged contexts within Bug 1513445. I think we should enforce the same restrictions for scripts.

Comment 1

[Christoph Kerschbaumer [:ckerschb]]

Attachment: Bug 1607483: Disallow loading http(s) scripts into system privileged contexts. r=tjr

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3d924e2a2e54
Disallow loading http(s) scripts into system privileged contexts. r=tjr

Comment 3

[Narcis Beleuzu [:NarcisB]]

Backed out for assertion failures on nsContentSecurityManager.cpp

Backout link: https://hg.mozilla.org/integration/autoland/rev/ffe0bfc6e195cbcc2bf46aece0a53ba65b23e3b6
Log link: https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=284891245&repo=autoland&lineNumber=22087

Comment 4

[Christoph Kerschbaumer [:ckerschb]]

Backout link: https://hg.mozilla.org/integration/autoland/rev/ffe0bfc6e195cbcc2bf46aece0a53ba65b23e3b6
Log link: https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=284891245&repo=autoland&lineNumber=22087

Hah, seems we are loading remote scripts in system land - I'll take a look again - thanks!

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/caa23b535218
Disallow loading http(s) scripts into system privileged contexts. r=tjr

Comment 6

[Narcis Beleuzu [:NarcisB]]

Backed out for mochitest failures on test_input.html

Backout link: https://hg.mozilla.org/integration/autoland/rev/baba8b317e929f783d0675a90a448f77ef09274e
Log link: https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=285354421&repo=autoland&lineNumber=45229

Comment 7

[Christoph Kerschbaumer [:ckerschb]]

rrh - I'll take a look - thanks!

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/ba715e09512d
Disallow loading http(s) scripts into system privileged contexts. r=tjr

Comment 9

[Bogdan Tara[:bogdan_tara | bogdant]]

https://hg.mozilla.org/mozilla-central/rev/ba715e09512d