Closed Bug 2045635 Opened 1 month ago Closed 1 month ago

Validate more fields around docshell load state

Categories

(Core :: IPC, enhancement)

enhancement

Tracking

()

RESOLVED FIXED
154 Branch
Tracking Status
firefox152 --- wontfix
firefox153 --- affected
firefox154 --- fixed

People

(Reporter: vhilla, Assigned: vhilla)

References

Details

Attachments

(2 files)

To follow-up on bug 2027207 validating principals, we can also add checks to load state.

Assignee: nobody → vhilla
Status: NEW → ASSIGNED
See Also: → 2027207
Pushed by abutkovits@mozilla.com: https://github.com/mozilla-firefox/firefox/commit/08c4c75efd4b https://hg.mozilla.org/integration/autoland/rev/65c5f5a151c2 Revert "Bug 2045635 - Validate more fields for nsDocShellLoadState. r=nika" for causing failures at browser_open_docgroup.js.

Looking at my try history, the tests passed previously which is confusing. What's failing is the check for mPartitionedPrincipalToInherit. I remember I had the same happen locally once but wasn't able to reproduce it consistently.

 0:03.55 GECKO(39037) [MozDbg] [./../../../docshell/base/nsDocShellLoadState.cpp:193] mPartitionedPrincipalToInherit = nsIPrincipal { http://example.com^partitionKey=%28http%2Cexample.com%29 } @ 0x7a379b707dc0
 0:03.56 GECKO(39037) [MozDbg] [./../../../docshell/base/nsDocShellLoadState.cpp:194] GetEffectiveTriggeringRemoteType() = "webIsolated=https://example.com"
 0:03.56 GECKO(39037) [MozDbg] [./../../../docshell/base/nsDocShellLoadState.cpp:195] mPrincipalToInherit = nsIPrincipal { moz-nullprincipal:{041f6b76-256e-4969-b90a-576a1c9307f7}?http://example.com } @ 0x7a379c5f6300

Note PPTI is http while remote type is https. That seems like a bug, I'll try to figure out how the principals get out of sync. It gets fixed when changing example.com to https. Reminds me of bug 2003449.

Flags: needinfo?(vhilla)
See Also: → 2047094
Status: ASSIGNED → RESOLVED
Closed: 1 month ago
Resolution: --- → FIXED
Target Milestone: --- → 154 Branch
Regressions: 2048851
Attachment #9609438 - Flags: approval-mozilla-beta?

firefox-beta Uplift Approval Request

  • User impact if declined/Reason for urgency: Add more principal validation in 153.
  • Code covered by automated testing?: yes
  • Fix verified in Nightly?: yes
  • Needs manual QE testing?: no
  • Steps to reproduce for manual QE testing:
  • Risk associated with taking this patch: medium
  • Explanation of risk level: This adds some checks around loading and more edge cases like bug 2048851 might show up. The change has been in Nightly for a month, edge cases would likely be low severity.
  • String changes made/needed?: No
  • Is Android affected?: yes
Attachment #9609438 - Flags: approval-mozilla-beta? → approval-mozilla-release?
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: