Open Bug 699277 Opened 12 years ago Updated 8 months ago

Revert changes to ssltunnel and convert test from bug 599295 to xpcshell

Categories

(Testing :: General, defect)

Product:
Testing
Component:
General
Type:
defect

Tracking

(Not tracked)

People

(Reporter: mayhemer, Unassigned)

References

(Depends on 1 open bug)

Details

(Keywords: sec-other, Whiteboard: [sg:nse] keep hidden until 599295 unhidden) 

Rather reporting as security bug.  Using httpd.js component since there is no for ssltunnel and it is actually related.

See https://bugzilla.mozilla.org/show_bug.cgi?id=599295#c17 and bellow.

The goal is to keep the ssltunnel a simple and singe-purpose utility.  The redirect change can be implemented in an xpcshell test easily.
This is not a security problem in shipping clients, right? Just hidden because the change is due to a security fix? If it's a risk in its own right please clear the '[sg:nse]' from the whiteboard.
Whiteboard: [sg:nse]
Whiteboard: [sg:nse] → [sg:nse] keep hidden until 599295 unhidden
(In reply to Daniel Veditz from comment #1)
> This is not a security problem in shipping clients, right? Just hidden
> because the change is due to a security fix?

Yes to both questions.  Thanks.
No time to work on this...
Assignee: honzab.moz → nobody
Group: core-security
Component: httpd.js → General
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.