Closed Bug 1896691 Opened 1 year ago Closed 7 months ago

Detect https upgrade/downgrade redirect loops of JS and HTML meta redirects during downgrade, not upgrade.

Categories

(Core :: DOM: Security, task, P4)

Product:
Core
Component:
DOM: Security
Type:
task

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: manuel, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog2])

This allows us to differentiate the first upgrade from the second one without relying on triggeringPrincipal. Simplifying the UpgradeDowngrade loop detection check. Follow up on Bug 1747230.

Likely done in DocumentLoadListener::OpenDocument. Pernosco session recording paths the redirects take: https://pernos.co/debug/0W0zGcI9dasXSFSs8XTF5g/index.html

Severity: -- → N/A
Whiteboard: [domsecurity-backlog2]
See Also: → 1949091
Priority: -- → P4
Status: NEW → RESOLVED
Closed: 7 months ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.