483170 - Bogus security error when attaching a bindings with userContent.css

Status: RESOLVED FIXED

(Core :: XBL, defect, P2)

Description

[Dão Gottwald [:dao]]

useContent.css:
a[target="_blank"], a[target="_new"] {
  -moz-binding: url(userBindings.xml#no_blank);
}

The warning on any page that uses target=_blank:
Security Error: Content at https://bugzilla.mozilla.org/show_bug.cgi?id=470250 may not load or link to file:///path/to/Firefox/Profiles/qg976eyf.trunk/chrome/userContent.css.

Bug 481558 comment 44 et seq.:
> userContent.css should probably be considered a UA stylesheet, too. Apparently
> it's not currently:
> http://forums.mozillazine.org/viewtopic.php?p=5981365#p5981365

> It is.  That's an unfortunate side-effect of using CheckLoadURI here: it always
> warns.  That sucks.  :(

> I was worried about that, but didn't see any error-reporting code on a quick
> scan. Apparently I missed it :(

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Fixed by patch in bug 483170

Comment 3

[Boris Zbarsky [:bzbarsky]]

Jonas meant bug 416942

Comment 4

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

That should be bug 416942

Comment 5

[Daniel Veditz [:dveditz]]

Sorry about the bugspam. Was thinking we didn't need to "block" since the fix is elsewhere and I could save the bogus "fixed" keywords here, but we really do want QA to verify that this regression doesn't happen, so back on the blocking list.