1760417 - Some abnormal URLs in other applications cause firefox open unexpected new inoperative window

Status: RESOLVED FIXED

(Core :: Security: CAPS, defect)

Description

[Toshihiro Yamada]

STR:

1. Copy and paste URL shown below to some applications that treats string starts with http:// as URL.
   https://.twitter.com/M5fv44m/status/1504475608884998154
2. Open URL form other applications.

Expected Results:
Open URLs as error.

Actual Results:
Unexpectedly, open new window and some of components like menu, bookmark toolbar etc. doesn't work.

I confirmed it at nightly and probably happens at releases by a person reported it to me.

Comment 1

[Toshihiro Yamada]

Attachment: bugwindow.png

Screenshot of unexpectedly opened window.

Its UI is completely different from the UI in my settings.

Comment 2

[Mark Striemer [:mstriemer]]

I see this through Windows Terminal, pasting the URL in there and opening with Ctrl+Click.

Also if I context menu>Open in New Window that link then the window can't be closed but the close tab button works

Comment 3

[Bernard Igiri]

In Mac you can reproduce this with open -a /Applications/Firefox.app "https://.twitter.com/M5fv44m/status/1504475608884998154"

Comment 4

[Mike Conley (:mconley) (:⚙️)]

I looked at this briefly. The problem is that during startup, when we're computing which content process to load the first tab into via E10SUtils' validatedWebRemoteType, we try to parse the siteOrigin out from the URI, and an exception gets thrown in the STR. That exception, because it's occurring so early within the browser startup sequence, causes a whole series of things to break.

I think I have a solution to make us more resilient here.

Comment 5

[Mike Conley (:mconley) (:⚙️)]

Attachment: Bug 1760417 - Make ContentPrincipal more reliable for URIs in the form of scheme://.origin.tld. r?nika!,ckerschb!

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/4c091571c918
Make ContentPrincipal more reliable for URIs in the form of scheme://.origin.tld. r=nika,ckerschb

Comment 7

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/4c091571c918