643005 - Whitelist method calls from post messages in the Panel

Status: RESOLVED FIXED

(Cloud Services :: Share: Firefox Client, defect)

Description

[Philipp von Weitershausen [:philikon]]

The addon should create a whitelist of messages it accepts instead of using a property name check on the sharePanel object, since that object has other private properties which should not be callable from the web app.

Comment 1

[Philipp von Weitershausen [:philikon]]

Attachment: Part 0 (v1): reorg

Physically move all the postMessage handlers next to each other and add some of James's wiki documentation as docstrings where docs were missing. Purely a mechanical change, no behaviour changes.

Next up: adding the whitelist.

Comment 2

[Philipp von Weitershausen [:philikon]]

Attachment: Part 1 (v1): Whitelist message topics

Comment 3

[Philipp von Weitershausen [:philikon]]

Part 0: https://hg.mozilla.org/users/pweitershausen_mozilla.com/fx-share/rev/cec7b307a2cb
Part 1: https://hg.mozilla.org/users/pweitershausen_mozilla.com/fx-share/rev/941bb5a103c7