Closed
Bug 994935
Opened 12 years ago
Closed 12 years ago
WebRTC IdP interface needs to securely identify origin
Categories
(Core :: WebRTC, defect)
Core
WebRTC
Tracking
()
RESOLVED
INVALID
People
(Reporter: mt, Assigned: mt)
References
Details
Attachments
(1 file)
|
1.22 KB,
patch
|
bholley
:
review+
|
Details | Diff | Splinter Review |
The recently added getWebIDLCallerPrincipal() utility function added in Bug 968335 provides JS-implemented APIs a more certain way of identifying the calling principal. This should be used to avoid issues related to this that might be caused by navigation, etc...
We should use this to get the origin in WebRTC: the IdP is relying on us providing an accurate value.
|
Assignee | |
Comment 1•12 years ago
|
||
One liner replacement for some ugly code.
Assignee: nobody → martin.thomson
Status: NEW → ASSIGNED
Attachment #8405023 -
Flags: review?(bobbyholley)
|
||
Updated•12 years ago
|
Attachment #8405023 -
Flags: review?(bobbyholley) → review+
|
|
Assignee | |
Updated•12 years ago
|
Keywords: checkin-needed
|
|
Assignee | |
Comment 3•12 years ago
|
||
Looks like this was already applied. My bad.
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•