Bug 1456652 - SameSite cookie Reader view patch bypass

This commit is contained in:
Ascrod 2018-07-05 21:00:31 -04:00 committed by Roy Tam
commit 509ede2093

View file

@ -119,7 +119,18 @@ this.ReaderMode = {
}
}
win.document.location = originalURL;
let referrerURI, principal;
try {
referrerURI = Services.io.newURI(url);
principal = Services.scriptSecurityManager.createCodebasePrincipal(
referrerURI, win.document.nodePrincipal.originAttributes);
} catch (e) {
Cu.reportError(e);
return;
}
let flags = webNav.LOAD_FLAGS_DISALLOW_INHERIT_PRINCIPAL |
webNav.LOAD_FLAGS_DISALLOW_INHERIT_OWNER;
webNav.loadURI(originalURL, flags, referrerURI, null, null, principal);
},
/**