Closed Bug 1775102 Opened 2 years ago Closed 2 years ago

Disable security.block_fileuri_script_with_wrong_mime outside of early beta

Categories

(Core :: DOM: Security, task, P1)

Firefox 102
task

Tracking

()

RESOLVED FIXED
103 Branch
Tracking Status
firefox-esr102 102+ fixed
firefox101 --- unaffected
firefox102 + fixed
firefox103 --- fixed

People

(Reporter: tschuster, Assigned: tschuster)

Details

Attachments

(1 file)

Based on the telemetry for Beta (45% wrong MIME after June 16) and Nightly (42%) we can not ship this pref without expecting a lot of breakage. We want to disable security.block_fileuri_script_with_wrong_mime outside of early beta.

[Tracking Requested - why for this release]: Potentially breakage with content served via file://

Assignee: nobody → tschuster
Severity: -- → S2
Priority: -- → P1

Comment on attachment 9282067 [details]
Bug 1775102 - Disable security.block_fileuri_script_with_wrong_mime outside of early beta or earlier. r?freddyb

Beta/Release Uplift Approval Request

  • User impact if declined: Potentially broken content accessed via file://
  • Is this code covered by automated tests?: Yes
  • Has the fix been verified in Nightly?: Yes
  • Needs manual test from QE?: No
  • If yes, steps to reproduce:
  • List of other uplifts needed: None
  • Risk to taking this patch: Low
  • Why is the change risky/not risky? (and alternatives if risky): Pure pref change reverting to previous longstanding behavior.
  • String changes made/needed: none
  • Is Android affected?: No
Attachment #9282067 - Flags: approval-mozilla-release?

Comment on attachment 9282067 [details]
Bug 1775102 - Disable security.block_fileuri_script_with_wrong_mime outside of early beta or earlier. r?freddyb

Thanks for catching this bug and not letting this slip to release, let's take it in 102 and 102esr!

Attachment #9282067 - Flags: approval-mozilla-release?
Attachment #9282067 - Flags: approval-mozilla-release+
Attachment #9282067 - Flags: approval-mozilla-esr102+
Pushed by tschuster@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/e08c3654f938
Disable security.block_fileuri_script_with_wrong_mime outside of early beta or earlier. r=ckerschb
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 103 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: