310373 - Dragging & Dropping a link on the "New Window"/"New Tab" buttons can load priviliged xul

Status: RESOLVED FIXED

(Firefox :: Security, defect, P1)

Description

[Asaf Romano (gone)]

Dragging & Dropping a link on the "New Window"/"New Tab" buttons can load
priviliged xul.

STR:
 1. Add the "New Window" button to one of the toolbars.
 2. Load the attached testcase.
 3. d&d "chrome link" to the "New Window" button.

Comment 1

[Asaf Romano (gone)]

Attachment: testcase

Comment 2

[Asaf Romano (gone)]

Attachment: patch

Comment 3

[Mike Connor [:mconnor]]

Comment on attachment 197773 [details] [diff] [review]
patch

as discussed, this isn't really exploitable as-is, since it doesn't allow priv
escalation as far as I can see, but its certainly a consistency issue.

Comment 4

[Asaf Romano (gone)]

Checking in browser.js;
/cvsroot/mozilla/browser/base/content/browser.js,v  <--  browser.js
new revision: 1.518; previous revision: 1.517
done

Comment 5

[Asaf Romano (gone)]

1.8 branch:
Checking in browser.js;
/cvsroot/mozilla/browser/base/content/browser.js,v  <--  browser.js
new revision: 1.479.2.36; previous revision: 1.479.2.35
done