Open Bug 2089478 Opened 10 days ago

Add principal validation to BlobURLDataRequest

Categories

(Core :: DOM: Security, enhancement)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

People

(Reporter: tschuster, Unassigned)

References

(Blocks 1 open bug)

Details

We know this is missing principal validation (see bug 2014103), but we generally consider this safe because you need to know the blob UUID. I am just filing this bug to have something to reference in the [NoTaint] annotation being added in bug 2087980.

You need to log in before you can comment on or make changes to this bug.