428767 - Unbreak ourselves after bug 292789 removed message access to messageBody.css

Status: VERIFIED FIXED

(Thunderbird :: Security, defect)

Description

[Phil Ringnalda (:philor)]

Attachment: Fix v.1 [Checkin: Comment 7]

Mirror the fix made to the only-application-that-matters to keep the bug 292789 fix to prevent content from sniffing for extensions from breaking us - in the case I noticed so far, breaking us by preventing the load of messageBody.css for displayed messages.

Comment 2

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9pre) Gecko/2008041302 SeaMonkey/2.0a1pre] (nightly) (W2Ksp4)

Same regression with SM:
{{
Security Error: Content at imap://... may not load or link to chrome://messenger/skin/messageBody.css.
}}

Comment 3

[Serge Gautherie (:sgautherie)]

Attachment: (Bv1-SM) <jar.mn> [Checkin: Comment 9]

Port TB fix to SM.

Comment 4

[Daniel Veditz [:dveditz]]

Comment on attachment 315349 [details] [diff] [review]
Fix v.1
[Checkin: Comment 7]

r=dveditz -- very sorry I didn't catch this!

Comment 5

[Daniel Veditz [:dveditz]]

sr=dveditz, even, if you need it to check in (I imagine not for mozilla/mail, dunno about mozilla/mailnews)

Comment 6

[Magnus Melin [:mkmelin]]

Comment on attachment 315349 [details] [diff] [review]
Fix v.1
[Checkin: Comment 7]

sure, r=mkmelin

Comment 7

[Phil Ringnalda (:philor)]

mail/base/jar.mn 1.108

Comment 8

[Ian Neal]

Comment on attachment 315377 [details] [diff] [review]
(Bv1-SM) <jar.mn>
[Checkin: Comment 9]

r=me for that simple change

Comment 9

[:Gavin Sharp [email: [e-mail]]]

mozilla/mailnews/jar.mn 	1.126

Comment 10

[Serge Gautherie (:sgautherie)]

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9pre) Gecko/2008041401 SeaMonkey/2.0a1pre] (nightly) (W2Ksp4)

V.Fixed, with SM.
(Assuming as much with TB.)

Comment 11

[Serge Gautherie (:sgautherie)]

FTR, bug 428996 backed these out and solved the issue in an improved/narrowed way, per bug 292789 comment 110.