Transient / Initial documents sometimes have the wrong partitioned principal
Categories
(Core :: Privacy: Anti-Tracking, defect)
Tracking
()
People
(Reporter: vhilla, Unassigned)
References
Details
The partitioned principal is currently determined in Document::Reset through GetChannelResultPrincipals which uses StoragePrincipalHelper::ChooseOriginAttributes. A consequence of that last method is that an about:blank iframe might have a different partitioned principal than it's embedder.
But non-parser generated about:blank documents don't use Document::Reset and just inherit the partitioned principal. Before bug 543435, this happened in nsDocShell::EnsureDocumentViewer and now it's in nsFrameLoader::MaybeCreateDocShell. But 543435 probably made it worse by changing initial navigations to about:blank to keep the non-parser generated about:blank around.
This can be observed, for example (bug 2003449 comment 28), if <html><iframe></iframe></html> is loaded from a file:// URI.
|
Reporter | |
Updated•6 months ago
|
|
|
Reporter | |
Comment 1•5 months ago
|
||
Description
•