Open Bug 468572 Opened 16 years ago Updated 2 years ago

Expose a method to determine whether two channels (or a principal and a channel) are same-origin

Categories

(Core :: Security: CAPS, defect)

x86
macOS
defect

Tracking

()

REOPENED

People

(Reporter: bzbarsky, Assigned: dveditz)

Details

This came up in bug 460425. We should just have a CAPS API for this instead of everyone rolling his own approach. Jonas, does the above more or less sum up what you wanted as a followup?

We have nsIPrincipal:: isSameOrigin() which I think is what was wanted here and got introduced in Bug 1600051.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE

No, this isn't really fixed. The API from bug 1600051 still relies on getting a URI from the channel, somehow (URI? Original URI? Result principal URI? Something else?), and then comparing a principal to it. The API this bug was about was precisely to avoid having to do that, as I recall.

Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.