wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-10-30 19:17:31 +09:00
Code Issues Projects Releases Packages Wiki Activity

Bug 1359204 - Do not query nested URI within CheckChannel in ContentSecurityManager

Browse source
This commit is contained in:
janekptacijarabaci 2018-04-30 23:53:22 +02:00 • committed by Roy Tam
commit 69c0760b8b
1 changed files with 0 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

7
dom/security/nsContentSecurityManager.cpp
View file

@ -12,7 +12,6 @@
#include "nsMixedContentBlocker.h" #include "nsMixedContentBlocker.h"
#include "nsCDefaultURIFixup.h" #include "nsCDefaultURIFixup.h"
#include "nsIURIFixup.h" #include "nsIURIFixup.h"
#include "nsINestedURI.h"
#include "mozilla/dom/Element.h" #include "mozilla/dom/Element.h"
#include "mozilla/dom/TabChild.h" #include "mozilla/dom/TabChild.h"
@ -657,12 +656,6 @@ nsContentSecurityManager::CheckChannel(nsIChannel* aChannel)
if (contentPolicyType == nsIContentPolicy::TYPE_DOCUMENT || if (contentPolicyType == nsIContentPolicy::TYPE_DOCUMENT ||
contentPolicyType == nsIContentPolicy::TYPE_SUBDOCUMENT) { contentPolicyType == nsIContentPolicy::TYPE_SUBDOCUMENT) {
// query the nested URI for security checks like in the case of view-source
nsCOMPtr<nsINestedURI> nestedURI = do_QueryInterface(uri);
if (nestedURI) {
nestedURI->GetInnerURI(getter_AddRefs(uri));
}
// TYPE_DOCUMENT and TYPE_SUBDOCUMENT loads might potentially // TYPE_DOCUMENT and TYPE_SUBDOCUMENT loads might potentially
// be wyciwyg:// channels. Let's fix up the URI so we can // be wyciwyg:// channels. Let's fix up the URI so we can
// perform proper security checks. // perform proper security checks.