Closed Bug 180743 Opened 22 years ago Closed 12 years ago

check XUL iframe, script, image and string bundles that they should not be able to load chrome and local (file) RDF, or use your credentials to load remote RDF.

Categories

(Core :: XUL, defect)

Product:
Core
Component:
XUL
Platform:
x86
Windows 2000
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INCOMPLETE
Milestone:
mozilla1.4beta

People

(Reporter: bsharma, Unassigned)

Details

(Whiteboard: [sg:audit]) 

This bug is reported as the issue in the module review and jrgm asked me to make
a bug out of it.

jrgm wil provide the test case.
Target Milestone: --- → mozilla1.4alpha
Whiteboard: [sg:investigation]
Target Milestone: mozilla1.4alpha → mozilla1.4beta
Reassigning to caillon as he's working on related issues.
Assignee: jrgm → caillon
Assignee: caillon → hyatt
Component: XP Toolkit/Widgets: XUL → XUL
QA Contact: shrir → xptoolkit.widgets
Assignee: hyatt → nobody
Without remote XUL this is completely irrelevant, if there was a problem to start with. Leaving hidden until 3.6 EOL just in case.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → INCOMPLETE
Whiteboard: [sg:investigation] → [sg:audit]
Group: core-security
You need to log in before you can comment on or make changes to this bug.