Open
Bug 1913782
Opened 2 years ago
Updated 8 days ago
Principal validation on nsIPrincipal-receiving IPC endpoints is prone to be missed
Categories
(Core :: DOM: Content Processes, task)
Core
DOM: Content Processes
Tracking
()
NEW
People
(Reporter: saschanaz, Unassigned)
References
(Depends on 1 open bug, Blocks 1 open bug)
Details
(Keywords: sec-want)
Especially outside of PContent, e.g. some in PBackground and/or when nsIPrincipal is passed by deserialization of something else.
|
||
Updated•2 years ago
|
Group: core-security → dom-core-security
|
||
Updated•2 years ago
|
Severity: -- → S3
|
|
||
Updated•8 months ago
|
Blocks: site-isolation-principal-vetting
|
|
||
Updated•1 month ago
|
Group: dom-core-security
|
|
||
Updated•1 month ago
|
Type: defect → task
|
|
||
Comment 1•1 month ago
|
||
I think this is still an issue. We have the LLMs looking into this, but that's not a very stable solution. Maybe we could have some kind of tainting mechanism in the IPDL layer that would require that all receivers of nsIPrincipal actively either validate or ignore validation?
You need to log in
before you can comment on or make changes to this bug.
Description
•