Closed Bug 2042339 Opened 1 month ago Closed 2 days ago

[LNA] Enable LNA Restrictions for Websockets

Categories

(Core :: DOM: Networking, enhancement, P2)

enhancement

Tracking

()

RESOLVED FIXED
154 Branch
Tracking Status
relnote-firefox --- 154+
firefox153 - wontfix
firefox154 + fixed

People

(Reporter: smayya, Assigned: smayya)

References

(Blocks 1 open bug)

Details

(Whiteboard: [necko-triaged])

Attachments

(1 file)

We need to enable LNA restrictions for websockets.
We just to flip the pref network.lna.websocket.enabled

[Tracking Requested - why for this release]: Ship LNA restrictions for websockets in Firefox.

Release Note Request (optional, but appreciated)
[Why is this notable]:
[Affects Firefox for Android]: yes
[Suggested wording]:
Firefox's Local Network Access protections now extend to WebSocket connections. Websites that try to open a WebSocket to a device on your local network will ask for your permission first
[Links (documentation, blog post, etc)]:

Severity: -- → N/A
relnote-firefox: --- → ?
Priority: -- → P2
Whiteboard: [necko-triaged]
Type: task → enhancement

The bug is marked as tracked for firefox153 (nightly). However, the bug still isn't assigned.

:ghess, could you please find an assignee for this tracked bug? If you disagree with the tracking decision, please talk with the release managers.

For more information, please visit BugBot documentation.

Flags: needinfo?(ghess)
Assignee: nobody → smayya
Flags: needinfo?(ghess)

[Tracking Requested - why for this release]: Moving this to 154 as we did not land the required change in nightly and we need this to ride through one full nightly cycle.

Flags: needinfo?(pascalc)

Flip network.lna.websocket.enabled to true so WebSocket connections
follow the normal Local Network Access rules instead of being skipped
in nsHttpTransaction::AllowedToConnectToIpAddressSpace.

Worker WebSocket enforcement relies on the channel LoadInfo carrying a
ClientInfo (Bug 1967266); with that in place the previously disabled
worker WebSocket WPT subtests pass, so re-enable them for dedicated,
shared and service workers. The WebTransport subtests stay disabled
(Bug 2042527).

Status: NEW → RESOLVED
Closed: 2 days ago
Resolution: --- → FIXED
Target Milestone: --- → 154 Branch

Added to the Fx154 nightly release notes, please allow 30 minutes for the site to update. This will carry over to the final Fx154 release notes.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: