Open Bug 1800536 Opened 2 years ago Updated 2 years ago

HTML previews in the netmonitor should not download external stylesheets

Categories

(DevTools :: Netmonitor, defect, P3)

defect

Tracking

(Not tracked)

People

(Reporter: jdescottes, Unassigned)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

Attached image image.png

STRs:

  • open devtools > network
  • open mozilla.org
  • inspect the document's request
  • click on the response tab

ER: The preview rendered in the network response tab should not initiate additional network requests for stylesheets, and possibly the content should not look like a fully functional page.

AR: The preview looks exactly like the actual page, but has javascript disabled

For reference, Chrome renders the preview without any style applied. The main use case for this preview tab is usually to read server side errors rendered as HTML, and those should be fine with no stylesheet applied.

The suggestion here is to use a principal which would have very limited privileges and would not be allowed to download resources (maybe null principal?)

Severity: -- → S3
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: