Closed Bug 959909 Opened 12 years ago Closed 9 years ago

Audit uses of nsXPConnect::WrapNative

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: mccr8, Assigned: mccr8)

Details

(Keywords: sec-audit)

This passes in "false" for allowWrappers, which seems like a bad idea. I'd guess that consumers of the nsIXPConnect interface are not particularly sophisticated, and probably don't need it, so I should try flipping it to true, and see if there are any particular uses that look bad.
Passing in true instead is all green in a L64 debug try run, so maybe that should just go along with the other WrapNative patch https://tbpl.mozilla.org/?tree=Try&rev=fe3720a14766
Group: core-security → dom-core-security
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
Group: dom-core-security
You need to log in before you can comment on or make changes to this bug.