Closed Bug 424753 Opened 18 years ago Closed 8 years ago

Reallow data:-URLs in mozIJSSubScriptLoader

Categories

(Core :: XPConnect, defect)

defect
Not set
major

Tracking

()

RESOLVED INACTIVE

People

(Reporter: Manuel.Spam, Unassigned)

Details

(Keywords: regression)

User-Agent: Mozilla/5.0 (X11; U; Linux i686; de-AT; rv:1.8.1.12) Gecko/20080212 SeaMonkey/1.1.8 Build Identifier: In PrefBar, I have to call one line of code in the context of "hiddenDOMWindow". To call this one line, I just used a "data:"-URL. Thanks to the fix in https://bugzilla.mozilla.org/show_bug.cgi?id=418356 I have to add a new file to my PrefBar code, just to call this one line. If reallowing data:-URLs would open the hole, fixed in the above bug, again, then just mark this one WONTFIX. If data:-URLs aren't a security problem, then please reallow them. Reproducible: Always
Keywords: regression
Instead of insisting to use the mozIJSSubScriptLoader you could also just eval/evalInSandbox your one line in the context of the hidden window (on which you shouldn't rely anyway BTW as it might be going away anytime soon).
Assignee: general → nobody
Component: JavaScript Engine → XPConnect
QA Contact: general → xpconnect
Status: UNCONFIRMED → NEW
Ever confirmed: true
Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.