Closed
Bug 1607673
Opened 4 years ago
Closed 4 years ago
follow-up: Do not only assert but really disallow loading http(s) scripts into system privileged contexts
Categories
(Core :: DOM: Security, task, P3)
Core
DOM: Security
Tracking
()
RESOLVED
DUPLICATE
of bug 1543579
People
(Reporter: ckerschb, Assigned: freddy)
References
Details
(Whiteboard: [domsecurity-active])
No description provided.
|
Reporter | |
Updated•4 years ago
|
Type: defect → task
|
|
Reporter | |
Updated•4 years ago
|
Whiteboard: [domsecurity-active]
|
Assignee | |
Updated•4 years ago
|
Assignee: ckerschb → fbraun
|
|
Assignee | |
Updated•4 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE
|
|
Assignee | |
Comment 2•4 years ago
|
||
Bug 1613609 will turn the deny-list approach (consisting of of HTTP/HTTPS/FTP) into a default allow-list
You need to log in
before you can comment on or make changes to this bug.
Description
•