1206964 - Use channel->AsyncOpen2() in netwerk/base/nsNetUtil.cpp

Status: RESOLVED FIXED

(Core :: DOM: Security, defect)

Comment 1

[Christoph Kerschbaumer [:ckerschb}]

Attachment: bug_1206964_asyncopen2_nsnetutil.patch

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Comment on attachment 8682118 [details] [diff] [review]
bug_1206964_asyncopen2_nsnetutil.patch

Review of attachment 8682118 [details] [diff] [review]:
-----------------------------------------------------------------

::: dom/xul/XULDocument.cpp
@@ +3258,5 @@
> +    //                         false);
> +    // if (NS_FAILED(rv)) {
> +    //   *aBlock = false;
> +    //   return rv;
> +    // }

I'd say you can remove this if you change add a |isChromeDoc &&| condition to this line:

http://mxr.mozilla.org/mozilla-central/source/dom/xul/XULDocument.cpp#3269

If so we'll always go through the normal AsyncOpen2 call for non-chrome documents.

@@ +3286,5 @@
>                                  aScriptProto->mSrcURI,
>                                  this, // aObserver
>                                  this, // aRequestingContext
> +                                nsILoadInfo::SEC_REQUIRE_SAME_ORIGIN_DATA_INHERITS,
> +                                nsIContentPolicy::TYPE_OTHER, // should that be some other contentpolicyType??

Might as well change this to use TYPE_SCRIPT_INTERNAL. We'll probably never call nsIContentPolicy here anyway since this will generally be called with a system principal.

::: netwerk/base/nsNetUtil.cpp
@@ +582,5 @@
> +/**
> + * Helper class used only within NS_NewStreamLoaderInternal
> + * to proxy the context when calling AsyncOpen2()
> + */
> +class ContextProxy : public nsIStreamLoaderObserver

Don't do this in nsNetUtil.cpp. Are any callsites actually using the context argument? If so, make them do something like this instead.

Comment 3

[Christoph Kerschbaumer [:ckerschb}]

Attachment: bug_1206964_asyncopen2_nsnetutil.patch

Jonas, as discussed on IRC we can actually remove the 'aContext' argument completely.

Comment 4

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/c6eb37d7c93e

Comment 5

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/c6eb37d7c93e

Comment 6

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/releases/mozilla-b2g44_v2_5/rev/c6eb37d7c93e