Propagate trust labels through all network loads

RESOLVED INCOMPLETE

Status

RESOLVED INCOMPLETE
12 years ago
2 years ago

People

(Reporter: bzbarsky, Assigned: chofmann)

Tracking

(Depends on: 1 bug)

Trunk
x86
Linux
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

12 years ago
This is a bug to track propagation of trust labels through networks loads.  That means setting the owner of channels as needed.  Unfortunately, we have APIs that don't really allow that (e.g. imagelib APIs).

Also, to do this we'll need to have a way to prevent execution of javascript: with the channel's trust label as needed (to solve content-filtering issues).

I'll file bugs on things as they come up.
(Reporter)

Comment 1

12 years ago
As a note, the "right" (thinking Mozilla 2 here) way to do this in my opinion is:

1)  NewURI() calls should require passing in an origin principal for the URI.
2)  NewChannel() calls should start off using the origin principal of the URI but
    allow the user to override with an origin hint.
3)  The channel should be able to override the hint with whatever principal it
    figures out for itself as needed.
(Reporter)

Updated

12 years ago
Depends on: 369239
(Reporter)

Updated

12 years ago
Depends on: 369242
(Reporter)

Updated

12 years ago
Depends on: 369244
(Reporter)

Updated

12 years ago
Depends on: 377092

Comment 2

2 years ago
Marking all tracking bugs which haven't been updated since 2014 as INCOMPLETE.
If this bug is still relevant, please reopen it and move it into a bugzilla component related to the work
being tracked. The Core: Tracking component will no longer be used.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → INCOMPLETE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.