Open Bug 2041464 Opened 1 month ago Updated 5 days ago

Expand ValidatePrincipal checks around document loading

Categories

(Core :: IPC, enhancement)

enhancement

Tracking

()

People

(Reporter: nika, Assigned: nika)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

Now that we've turned on ValidatePrincipal checks everywhere in bug 2027207, we can start to tighten the checks further, adding more validation for additional properties beyond the document principal.

This patch expands the principal validation checks around document loading in
the following ways:

  1. Check URLs which have a corresponding content principal in more cases.
  2. Check precursor principals when loading a null principal.
  3. Unified logic for deciding if system principal is allowed for a document load.
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: