Open
Bug 2041464
Opened 1 month ago
Updated 5 days ago
Expand ValidatePrincipal checks around document loading
Categories
(Core :: IPC, enhancement)
Core
IPC
Tracking
()
NEW
People
(Reporter: nika, Assigned: nika)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
Now that we've turned on ValidatePrincipal checks everywhere in bug 2027207, we can start to tighten the checks further, adding more validation for additional properties beyond the document principal.
| Assignee | ||
Comment 1•1 month ago
|
||
This patch expands the principal validation checks around document loading in
the following ways:
- Check URLs which have a corresponding content principal in more cases.
- Check precursor principals when loading a null principal.
- Unified logic for deciding if system principal is allowed for a document load.
Updated•5 days ago
|
Blocks: site-isolation-principal-vetting
You need to log in
before you can comment on or make changes to this bug.
Description
•