Open Bug 1669453 Opened 5 years ago Updated 1 year ago

history.replace/pushState should throw SECURITY_ERR, not NS_ERROR_FAILURE with cross-origin urls

Categories

(Core :: DOM: Navigation, defect, P3)

defect

Tracking

()

People

(Reporter: smaug, Unassigned)

Details

(Keywords: good-first-bug)

Attachments

(1 file, 2 obsolete files)

the-history-interface/001.html
and
the-history-interface/002.html
seem to test this

Olli, do these test failures affect both Fission and non-Fission?

Severity: -- → S4
Fission Milestone: --- → ?
Flags: needinfo?(bugs)
Priority: -- → P3

Yes. This isn't a Fission bug.

Flags: needinfo?(bugs)

(In reply to Olli Pettay [:smaug] from comment #2)

This isn't a Fission bug.

In that case, clearing the Fission Milestone flag and leaving Priority/Severity unchanged at P3/S4.

Fission Milestone: ? → ---
Assignee: nobody → dvedvick
Status: NEW → ASSIGNED

Hello, I've submitted a patch for this change. Hopefully it fits the bill!

Attachment #9370736 - Attachment is obsolete: true
Attachment #9370163 - Attachment is obsolete: true
Pushed by opettay@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/1313a6a0c641 Get user passwords after validating same-origin. r=smaug

Backed out for causing wpt failures in history_pushstate_url_rewriting.html

Flags: needinfo?(dvedvick)
Backout by ncsoregi@mozilla.com: https://hg.mozilla.org/mozilla-central/rev/3e561c391676 Backed out changeset 1313a6a0c641 for causing wpt failures in history_pushstate_url_rewriting.html CLOSED TREE

I believe that it's correct for these tests to now pass due to these changes. I've updated the change to remove these tests from the expected failures.

Flags: needinfo?(dvedvick)

This good-first-bug hasn't had any activity for 2 months, it is automatically unassigned.
For more information, please visit BugBot documentation.

Assignee: dvedvick → nobody
Status: ASSIGNED → NEW
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: