306398 - Security capabilities strongly tied to JS

Status: RESOLVED WORKSFORME

(Core :: Security: CAPS, defect)

Description

[Boris Zbarsky [:bzbarsky]]

Capabilities cannot be enabled on a per-principal basis for non-system
principals.  That is, for a non-system principal, we can only enable a
capability for a (principal, JSStackFrame) pair, not for the principal itself.

Quite apart from the JS dependency this introduces into the security manager
(and which may not be a huge issue if all our untrusted script will always be
JS), this means that it's impossible to request a capability, or to usefully
check for it, outside the context of executing JS.  That prevents a sensible fix
for bug 306397.  See also discussion in bug 299518.

Comment 1

[Daniel Veditz [:dveditz]]

capabilities are gone