1764339 - Disable window.content on release

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, task)

Description

[Emilio Cobos Álvarez (:emilio)]

We did it for nightly and early-beta in bug 1632143. Let's try to ship that since we got no regressions from it?

Comment 1

[Kagami Rosylight [:saschanaz] (they/them)]

Should we just reuse bug1400140? 🤔

Comment 2

[Emilio Cobos Álvarez (:emilio)]

Attachment: Bug 1764339 - Turn dom.window.content.untrusted.enabled off on release. r=smaug!,saschanaz!

We did it for early-beta in bug 1632143, for nightly even earlier. No
regressions in two years, sounds like flipping is warranted.

Comment 3

[Emilio Cobos Álvarez (:emilio)]

I was planning to use that to remove the pref and actually making it just [ChromeOnly], but I don't mind doing it the other way around.

Comment 4

[Kagami Rosylight [:saschanaz] (they/them)]

Ah cool, that makes sense.

Comment 5

[Hsin-Yi Tsai (she/her) [:hsinyi]]

bz sent an intent-to-unship in 2017 https://groups.google.com/g/mozilla.dev.platform/c/Tmbs-wFwHzo
I think it's worth we resend it again.

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b0c2f65e5b73
Turn dom.window.content.untrusted.enabled off on release. r=smaug,saschanaz

Comment 7

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/33623 for changes under testing/web-platform/tests

Comment 8

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/b0c2f65e5b73

Comment 9

[Web Platform Test Sync Bot (Matrix: #interop:mozilla.org)]

Upstream PR merged by moz-wptsync-bot