mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-08 10:44:56 +00:00
Bug 956382 - Consider document.domain when doing Location security checks. r=mrbkap
This commit is contained in:
parent
0e8b3267e2
commit
02b3bf5876
@ -908,7 +908,7 @@ nsLocation::CallerSubsumes()
|
|||||||
return false;
|
return false;
|
||||||
nsCOMPtr<nsIScriptObjectPrincipal> sop = do_QueryInterface(outer);
|
nsCOMPtr<nsIScriptObjectPrincipal> sop = do_QueryInterface(outer);
|
||||||
bool subsumes = false;
|
bool subsumes = false;
|
||||||
nsresult rv = nsContentUtils::GetSubjectPrincipal()->Subsumes(sop->GetPrincipal(), &subsumes);
|
nsresult rv = nsContentUtils::GetSubjectPrincipal()->SubsumesConsideringDomain(sop->GetPrincipal(), &subsumes);
|
||||||
NS_ENSURE_SUCCESS(rv, false);
|
NS_ENSURE_SUCCESS(rv, false);
|
||||||
return subsumes;
|
return subsumes;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user