Closed Bug 874318 Opened 8 years ago Closed 8 years ago
XOWs shouldn't allow CALL
It doesn't come up in the web platform, and probably doesn't matter, but I still don't think there's any reason why we should be allowing it. Let's see if anything breaks.
Optimistically flagging for review. Feel free to cancel if the try push is orange and I haven't cancelled it yet myself.
Attachment #752003 - Flags: review?(mrbkap)
Comment on attachment 752003 [details] [diff] [review] Don't allow CALL on XOWs. v1 Sure. I'd always sort of thought of this as a purely object-caps model (if you get your hands on a function, you have that capability) but calling a DOM constructor cross origin is probably never a good idea.
Attachment #752003 - Flags: review?(mrbkap) → review+
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla24
You need to log in before you can comment on or make changes to this bug.