Closed
Bug 1956424
Opened 1 month ago
Closed 1 month ago
ReportSinkTypeMismatchViolations does not pass proper location for violations triggered by workers
Categories
(Core :: DOM: Security, defect)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
138 Branch
| Tracking | Status | |
|---|---|---|
| firefox138 | --- | fixed |
People
(Reporter: fredw, Assigned: fredw)
References
(Blocks 1 open bug)
Details
Attachments
(2 files)
It's using
https://searchfox.org/mozilla-central/rev/8c7e56f7bd827bd8c4016ee12a631604d691f597/dom/security/trusted-types/TrustedTypeUtils.cpp#120
https://searchfox.org/mozilla-central/rev/8c7e56f7bd827bd8c4016ee12a631604d691f597/dom/base/SourceLocation.cpp#41
but nsContentUtils::GetCurrentJSContext() is null for workers when called from the main thread:
We should make sure to pass the info from here:
https://searchfox.org/mozilla-central/rev/8c7e56f7bd827bd8c4016ee12a631604d691f597/dom/security/trusted-types/TrustedTypeUtils.cpp#523
This was initially noticed in https://phabricator.services.mozilla.com/D242741
|
Assignee | |
Comment 1•1 month ago
|
||
|
|
Assignee | |
Comment 2•1 month ago
|
||
|
||
Updated•1 month ago
|
Attachment #9474594 -
Attachment description: WIP: Bug 1956424 Add tests for location of sink mismatch violation in workers. → Bug 1956424 - Add tests for location of sink mismatch violation in workers. r=smaug
Pushed by fwang@igalia.com:
https://hg.mozilla.org/integration/autoland/rev/62e51640e814
Add tests for location of sink mismatch violation in workers. r=smaug
https://hg.mozilla.org/integration/autoland/rev/ee28635a867d
Pass JS location to ReportSinkTypeMismatchViolations for violations from workers. r=smaug
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/51641 for changes under testing/web-platform/tests
|
||
Comment 5•1 month ago
|
||
| bugherder | ||
https://hg.mozilla.org/mozilla-central/rev/62e51640e814
https://hg.mozilla.org/mozilla-central/rev/ee28635a867d
Status: NEW → RESOLVED
Closed: 1 month ago
status-firefox138:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 138 Branch
Upstream PR merged by moz-wptsync-bot
You need to log in
before you can comment on or make changes to this bug.
Description
•