1900648 - XSLT error messages can leak browser UI language

Status: RESOLVED FIXED

(Core :: XSLT, defect)

Description

[Giorgio Maone [:ma1]]

This is https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42288 in Tor Browser.

Actual browser UI locale can be inferred by examining the error message for a failed XSLT.

POC: https://people.torproject.org/~ma1/pbugs/42288/poc/

Comment 1

[Manuel Bucher [:manuel]]

Attachment: Bug 1900648 - Allow language spoofing in status messages r=#platform-i18n-reviewers

Originally Tor 42288: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42288

Comment 2

[Pier Angelo Vendrame]

I'm taking this Bug (I've already talked about it with Manuel).

Comment 3

[Pier Angelo Vendrame]

Attachment: Bug 1900648 - Allow language spoofing in XSLT status messages. r?#platform-i18n-reviewers,#geckoview-reviewers,m_kato

Comment 4

[Pier Angelo Vendrame]

Attachment: Bug 1900648 - Part 2: Remove nsStringBundleService::FormatStatusMessage. r?#xpcom-reviewers

Depends on D245695

Comment 5

[Phabricator Automation]

Comment on attachment 9479317 [details]
Bug 1900648 - Part 2: Remove nsStringBundleService::FormatStatusMessage. r?#xpcom-reviewers

Revision D245696 was moved to bug 1959147. Setting attachment 9479317 [details] to obsolete.

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b576f6dedd29
Allow language spoofing in XSLT status messages. r=platform-i18n-reviewers,dom-core,farre,nordzilla

Comment 7

[Serban Stanca [:SerbanS]]

https://hg.mozilla.org/mozilla-central/rev/b576f6dedd29