951405 - re-work certificate error page loading so that child processes never need nsISiteSecurityService (even remotely)

Status: RESOLVED DUPLICATE of bug 989875

(Core :: DOM: Navigation, defect)

Description

[Dana Keeler (she/her) [:keeler]]

See also bug 948574. It would be best if child processes never needed nsISiteSecurityService, even via remote (reducing attack surface). Currently the docshell uses nsISiteSecurityService when presenting a certificate error page. My plan was to push the use of nsISSS to inside the error page and have that page be loaded as a privileged page by the parent process. However, as far as I can tell, the child process' docshell just goes ahead and loads the error page directly, without checking to see if the parent should load it instead.

Comment 1

[Dana Keeler (she/her) [:keeler]]

Note for the future: if bug 948574 lands (remoting nsISiteSecurityService::IsSecureURI), back it out when this bug gets fixed.

Comment 2

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

This looks like a dupe of bug 989875, based on your comments in that bug.

Comment 3

[Dana Keeler (she/her) [:keeler]]

Yep.