545668 - Find a way of setting allowDNSPrefetch to false on docshells where we are loading messages (and true when we're not)

Status: REOPENED

(MailNews Core :: Security, defect)

Description

[Mark Banner (:standard8)]

When we load a message into a browser element/docshell, we need to set allowDNSPrefetch to false to protect the users privacy.

Currently we always set it to false for the browser element with id="messagepane".

As we don't load messages into other browser elements, this is fine. However, we do want to be able to do this, for bug 545666 and others, so we should find a sensible, common place to do this (possibly around the content policy area).

Comment 1

[Geoff Lankow (:darktrojan)]

allowDNSPrefetch is a member of nsIDocShell now so we can set it whenever we want. Anyway, it's a bit pointless leaving this bug open after all of this time as we're not going to remember it's here when dealing with this stuff again.

Comment 2

[Mark Banner (:standard8)]

If this now can be set on the docshell, then we should be able to do this as part of the content policy, andavoid having to set it manually.