383783 - [FIX]Make nsIScriptSecurityManager a little more useful from script

Status: RESOLVED FIXED

(Core :: Security: CAPS, defect)

Description

[Boris Zbarsky [:bzbarsky]]

Attachment: Fix

Proposed changes:

1)  Add a way to detect whether a given principal is the system principal.
2)  Add a way to create codebase principals.
3)  Allow calling getChannelPrincipal() from script.

Comment 1

[Steven Michaud [:smichaud] (Retired)]

Just so that you guys know -- this change will break
JavaScript-to-Java LiveConnect in the Java Embedding Plugin (though
only on the trunk, of course, and only on Mac OS X).  I hope to
release a new JEP in the next month or so that addresses this change
(along with a small number of other problems).  But there may be a gap
between when this change is landed and the new JEP gets landed on the
trunk.

Comment 2

[Boris Zbarsky [:bzbarsky]]

Steven, I assume the breakage in LiveConnect will come from the fact that some methods now became scriptable in the middle of the interface?

Comment 3

[Steven Michaud [:smichaud] (Retired)]

No, it's just because nsIScriptSecurityManager's uuid will change.

Comment 4

[Johnny Stenback (:jst)]

Comment on attachment 267746 [details] [diff] [review]
Fix

sr=jst. bz said in private email that this is just one of many changes to nsIScriptSecurityManager on the trunk since we branched for Firefox 2.0 (or 1.5, really), so that's really a non-issue as far as this bug goes.

Comment 5

[Daniel Veditz [:dveditz]]

Comment on attachment 267746 [details] [diff] [review]
Fix

r=dveditz

Comment 6

[Boris Zbarsky [:bzbarsky]]

Attachment: Including C++ changes

Was missing impl of isSystemPrincipal...

Comment 7

[Boris Zbarsky [:bzbarsky]]

Checked in.

Comment 8

[Steven Michaud [:smichaud] (Retired)]

I've just released a new version (0.9.6.3) of the Java Embedding
Plugin that works around the change in the nsIScriptSecurityManager
interface's UID (and which unbreaks JavaScript-to-Java LiveConnect on
the trunk).

For more information see bug 386918.