873300 - Loading about:home in a sandboxed iframe can cause a security error

Status: NEW

(Firefox :: General, defect)

Description

[Jesse Ruderman]

Attachment: testcase

JavaScript error: chrome://browser/content/abouthome/aboutHome.js, line 202: SecurityError: The operation is insecure.

Maybe about:home JS should try-catch anything that relies on having an origin?

Comment 1

[Jesse Ruderman]

Not sure if bug 789348 will help or just shift the error to another line.

Comment 2

[Marco Bonardo [:mak]]

well, let's add a dependency for now...

Is the blocked bug something I should be able to read, or unimportant?

Comment 3

[Jesse Ruderman]

The blocked bug is a fuzzer metabug.

Comment 4

[:Gavin Sharp [email: [e-mail]]]

What operation is insecure?

In any case, we don't really need to support loading about:home in subframes (or websites causing it to load at all, really). We could probably just remove its URI_SAFE_FOR_UNTRUSTED_CONTENT.

Comment 5

[Jesse Ruderman]

> What operation is insecure?

Maybe that's just Firefox's error message when an <iframe sandbox> without allow-same-origin tries to do something that requires same-origin?

Comment 6

[Hallvord R. M. Steen [:hallvors]]

about:home seems to load fine inside the IFRAME in the attachment now.

The bigger question is: should it? I think we should disable this as a precaution..