Open Bug 432441 Opened 16 years ago Updated 2 years ago

Can't use postMessage(msg, "chrome://foo") to send to a page at that location

Categories

(Core :: DOM: Core & HTML, defect, P5)

defect

Tracking

()

People

(Reporter: Waldo, Unassigned)

Details

chrome: URIs are immutable, and when we try to blow away the userPass part of the URI created from the provided origin, it fails and causes postMessage to silently fail.  You can send the message if you use "*" to do so, but it's not particularly safe to do so if navigation occurs to an untrusted page after the call happens (not likely since that navigation would require privileges or unlucky user interaction, but still not good).  Not sure what a good solution would be here that doesn't unnecessarily muddy up the path of execution for a particular use case...
Component: DOM: Mozilla Extensions → DOM
https://bugzilla.mozilla.org/show_bug.cgi?id=1472046

Move all DOM bugs that haven’t been updated in more than 3 years and has no one currently assigned to P5.

If you have questions, please contact :mdaly.
Priority: -- → P5
Component: DOM → DOM: Core & HTML
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.