1698449 - Try to not create a resource: URI browser window using a SystemPrincipal

Status: RESOLVED FIXED

(Core :: DOM: Security, task, P2)

Comment 1

[Christoph Kerschbaumer [:ckerschb, back Sept 8th]]

Hey Zibi, within Bug 1670244 we want to ensure we never load a document with incorrect principal in the wrong type of webIsolated process. To comply with that rule we have to update certain callsites. One of those callistes is for example is the loading of resource://l10n-test/test.html within the test browser_resource_uri.js#39.

I assume you wanted to explicitly test that resource://l10n-test/test.html is loaded with a SystemPrincipal? If not, can we update that? Any suggestions?

Comment 2

[Zibi Braniecki [:zbraniecki][:gandalf]]

I assume you wanted to explicitly test that resource://l10n-test/test.html is loaded with a SystemPrincipal?

:mossop - is that accurate?

Comment 3

[Dave Townsend [:mossop]]

On the contrary I think we want the test page to be loaded in a non-system principal: https://searchfox.org/mozilla-central/source/dom/l10n/tests/mochitest/document_l10n/non-system-principal/test.html#9-10

Comment 4

[Christoph Kerschbaumer [:ckerschb, back Sept 8th]]

Attachment: Bug 1698449: Update test browser_resource_uri.js

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/7db5c3e9f7ba
Update test browser_resource_uri.js r=mossop

Comment 6

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/7db5c3e9f7ba