387216 - Reconsider explicit same-origin checks in nsSchemaLoader and nsXFormsUtils

Status: RESOLVED WONTFIX

(Core Graveyard :: XForms, defect)

Description

[Boris Zbarsky [:bzbarsky]]

In particular, what behavior is wanted here with signed jars?  Should one be able to link from inside a signed jar to things from the same site?  To things with the same signed jar?  Should one be able to link from an unsigned part of a site to schema from a signed jar?

Perhaps the check should be performed post-load, on the principal of the result, not pre-load?

Comment 1

[Boris Zbarsky [:bzbarsky]]

nsXFormsUtils has a similar setup, but there it's possible that we're checking whether it's OK to _send_ data.  Perhaps we need a principal version of nsIScriptSecurityManager::CheckConnect or something?  One that would handle document.domain being set correctly, unlike CheckSameOriginPrincipal?

Comment 2

[Boris Zbarsky [:bzbarsky]]

This code has switched to CheckMayLoad(), looks like.  It's still not clear that this is the right thing for it to be doing, but ok.

Comment 3

[David Bolter [:davidb] (NeedInfo me for attention)]

RIP xforms