EventSource should use the same nsIContentPolicy type as XHR

RESOLVED FIXED

Status

()

defect
RESOLVED FIXED
8 years ago
5 months ago

People

(Reporter: smaug, Assigned: smaug)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

No description provided.
Or add some new type for eventsource
Blocks: 338583
Posted patch patchSplinter Review
This is what was discussed during security review.
Assignee: nobody → Olli.Pettay
Attachment #542793 - Flags: review?(dveditz)
We could also just add a new type for eventsource.
I don't know which one is better.
EventSource works in many ways like multipart XHR.
Comment on attachment 542793 [details] [diff] [review]
patch

r=dveditz

What type is websockets using? Should probably be the same. "XHR" == "script initiated data connection"? Could even add

  const unsigned long TYPE_DATAREQUEST = 11;

to the IDL as an alias. Don't remove the existing one though: it's used by several add-ons.
Attachment #542793 - Flags: review?(dveditz) → review+
Posted patch updatedSplinter Review
https://hg.mozilla.org/mozilla-central/rev/5c971924966e
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Component: DOM: Other → DOM
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.