905379 - Audit about:healthreport for chrome privileges and iframe docshell

Status: RESOLVED INCOMPLETE

(Firefox Health Report Graveyard :: Client: Android, defect)

Description

[Nick Alexander :nalexander [he/him]]

gavin commented about chrome privileges in Bug 904612.

We need the chrome privileges set in

http://mxr.mozilla.org/mozilla-central/source/mobile/android/components/AboutRedirector.js#78

in

http://mxr.mozilla.org/mozilla-central/source/mobile/android/chrome/content/aboutHealthReport.js

to send messages to Java (for things like reading and setting Android shared preferences).

Presumably we're exposing a chrome docshell to the remote content

http://mxr.mozilla.org/mozilla-central/source/mobile/android/chrome
/content/aboutHealthReport.xhtml

as well.  I think we should set 'mozframetype="content"' for the iframe here like you're suggesting in Bug 904612.  gavin, can you verify, and suggest anything else that needs to happen?

Comment 1

[:Gavin Sharp [email: [e-mail]]]

Looks like that is a bug that exists (though I don't have an easy way to verify), and that fix should be sufficient.

Comment 2

[:Gavin Sharp [email: [e-mail]]]

Looks like I may have been wrong - see bug 856527 comment 5. I don't quite understand why, though.

Comment 3

[Firefox Bug Husbandry Bot]

Per https://bugzilla.mozilla.org/show_bug.cgi?id=1497137, this component is deprecated. Resolving this bug as incomplete, per :sdaswani.