1779315 - Avoid tainting OffscreenCanvas if the principals match

Status: RESOLVED FIXED

(Core :: Graphics: Canvas2D, defect, P3)

Description

[Andrew Osmond [:aosmond] (he/him)]

Right now we more frequently taint the OffscreenCanvas than we need to since we don't bother checking the principal. We should do that for the main thread at least.

Comment 1

[Andrew Osmond [:aosmond] (he/him)]

Attachment: Bug 1779315 - Avoid tainting OffscreenCanvas if the principals match.

If we are on the main thread and have access to the principals, we
should perform the same check as we do for HTMLCanvasElement instead of
just tainting the canvas.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c5ac5edbc3bb
Avoid tainting OffscreenCanvas if the principals match. r=lsalzman

Comment 3

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/c5ac5edbc3bb

Comment 4

[Andrew Osmond [:aosmond] (he/him)]

Comment on attachment 9285217 [details]
Bug 1779315 - Avoid tainting OffscreenCanvas if the principals match.

ESR Uplift Approval Request

• If this is not a sec:{high,crit} bug, please state case for ESR consideration: Dependency for uplift in bug 1833876
• User impact if declined:
• Fix Landed on Version: 104.0a1
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): Good test coverage

Comment 5

[Dianna Smith [:diannaS]]

Comment on attachment 9285217 [details]
Bug 1779315 - Avoid tainting OffscreenCanvas if the principals match.

Approved for 102.14esr

Comment 6

[Pulsebot]

https://hg.mozilla.org/releases/mozilla-esr102/rev/03a36307e875