1729969 - Exempt Bergamont better; and add about:preference

Status: RESOLVED FIXED

(Firefox :: Security, enhancement)

Description

[Tom Ritter [:tjr]]

After Nightly went to 94, the fixes landed in Bug 1727803, Bug 1727770, and Bug 1722775 hopefully would have given us clean telemetry, but alas.

There's submissions for about:preferences and bergamont. There's also (so far) 15 submissions from 9 people for 'bloburi', 'other', and 'other-on-worker'

Comment 1

[Tom Ritter [:tjr]]

Attachment: Bug 1729969: Improve race checking and add an exemption for about:preferences r?freddyb

Comment 2

[Tom Ritter [:tjr]]

Attachment: Bug 1729969: Refactor 'extension' Filetype Reporting r?freddyb

The regex will only match file:// URIs, so make that more
explicit in the documentation and code.

Depends on D125113

Comment 3

[Tom Ritter [:tjr]]

Attachment: Bug 1729969: Refactor how and when we collect about: and moz-extension data r?freddyb

Previously we would only include about: and moz-extension details
on Windows, because I erroneously thought that was the only place
we could sanitize them properly. But these types of URLs aren't
hard to sanitize, and really it's file:// URIs that are hard, and
those will stay windows only.

So now we collect about: and moz-extension: URIs on all platforms
and we additionally include whether the extension is privileged
or not.

We put them under new keys also.

Depends on D126131

Comment 4

[Tom Ritter [:tjr]]

Attachment: Bug 1729969: Exempt all Privileged Extensions from script filename validation r?freddyb

Depends on D126132

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/21631831f8eb
Improve race checking and add an exemption for about:preferences r=freddyb
https://hg.mozilla.org/integration/autoland/rev/ee881aff020e
Refactor 'extension' Filetype Reporting r=freddyb
https://hg.mozilla.org/integration/autoland/rev/09aafb2b017e
Refactor how and when we collect about: and moz-extension data r=freddyb
https://hg.mozilla.org/integration/autoland/rev/63cdac6cec7e
Exempt all Privileged Extensions from script filename validation r=freddyb

Comment 6

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/21631831f8eb
https://hg.mozilla.org/mozilla-central/rev/ee881aff020e
https://hg.mozilla.org/mozilla-central/rev/09aafb2b017e
https://hg.mozilla.org/mozilla-central/rev/63cdac6cec7e