EventSource should use the same nsIContentPolicy type as XHR

RESOLVED FIXED

Status

()

RESOLVED FIXED
8 years ago
6 years ago

People

(Reporter: smaug, Assigned: smaug)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

Comment hidden (empty)
Or add some new type for eventsource
Blocks: 338583
Created attachment 542793 [details] [diff] [review]
patch

This is what was discussed during security review.
Assignee: nobody → Olli.Pettay
Attachment #542793 - Flags: review?(dveditz)
We could also just add a new type for eventsource.
I don't know which one is better.
EventSource works in many ways like multipart XHR.
Comment on attachment 542793 [details] [diff] [review]
patch

r=dveditz

What type is websockets using? Should probably be the same. "XHR" == "script initiated data connection"? Could even add

  const unsigned long TYPE_DATAREQUEST = 11;

to the IDL as an alias. Don't remove the existing one though: it's used by several add-ons.
Attachment #542793 - Flags: review?(dveditz) → review+
https://hg.mozilla.org/mozilla-central/rev/5c971924966e
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
Component: DOM: Other → DOM
Product: Core → Core
You need to log in before you can comment on or make changes to this bug.