Open Bug 1950058 Opened 2 days ago Updated 2 hours ago

Clear-Site-Data: "cache": Use principal with correct originAttributes

Categories

(Toolkit :: Data Sanitization, defect, P2)

defect

Tracking

()

People

(Reporter: manuel, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: priv-triaged)

Attachments

(1 file)

Currently we pass a principal that has unpartitioned originAttributes. This leads to clearing the wrong cache entries. Identify how to pass a principal with the correct originAttributes or modify the originAttributes in the clearOrigin cache function.

setting a severity since this is a defect

Severity: N/A → S3
Keywords: priv-triaged

Note from talking to Tim yesterday: The originAttributes seem correct. However, we also pass the origin to CacheStorageService::ClearOriginInternal and that is likely not honored correctly.

This patch contains basically three fixes and could be split up into
three commits if preferred.

Fix 1: The originAttributes coming from predictor code didn't adjust
OriginAttributes for networking state. Therefore, both unpartitioned and
partitioned cache entries were written. This was fixed on the caller
side. It might make sense to do this on the callee side.

Fix 2: The originAttributes coming from Clear-Site-Data: "cache" code
didn't adjust the OriginAttributes for clearing for networking state.

Fix 3: The partitionKey PopulateTopLevelInfoFromURI didn't include the
port in some cases.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: