Closed
Bug 916586
Opened 11 years ago
Closed 11 years ago
Don't expose window.getInterface to web content
Categories
(Core :: DOM: Core & HTML, defect)
Core
DOM: Core & HTML
Tracking
()
RESOLVED
FIXED
People
(Reporter: bruant.d, Unassigned)
References
Details
I can see it from Firefox 23 to 26. I'm not sure what it is. I can't find a standard for it (tried to look in the Window interface and WebIDL as they are the only specs that look relevant), Chrome doesn't seem to have it.
I assume it's internal infrastructure.
Comment 1•11 years ago
|
||
It's http://mxr.mozilla.org/mozilla-central/source/xpcom/base/nsIInterfaceRequestor.idl#33 and we have no way to hide it right now if chrome script pokes it. See also bug 866222.
Moving to WebIDL bindings will let us fix this.
Depends on: 789261
Reporter | ||
Comment 2•11 years ago
|
||
(In reply to Boris Zbarsky [:bz] from comment #1)
> Moving to WebIDL bindings will let us fix this.
That's what I thought too (I should have set the dependency, sorry). Just wanted to file it to make sure it's not forgetten.
Reporter | ||
Comment 4•11 years ago
|
||
(In reply to :Ehsan Akhgari (lagging on bugmail, needinfo? me!) from comment #3)
> David, do you mind retesting this please?
I don't see getInterface any longer. So it's been properly fixed by bug 789261. Thanks! :-)
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(bruant.d)
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•