mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-11-26 06:11:37 +00:00
Bug 827885 - Improve Necko security check messages. r=jdm
This commit is contained in:
parent
c61a8f2dd1
commit
1e54b96806
@ -370,8 +370,8 @@ NeckoParent::AllocPRemoteOpenFile(const URIParams& aURI,
|
|||||||
if (PL_strnstr(requestedPath.BeginReading(), "/../",
|
if (PL_strnstr(requestedPath.BeginReading(), "/../",
|
||||||
requestedPath.Length())) {
|
requestedPath.Length())) {
|
||||||
printf_stderr("NeckoParent::AllocPRemoteOpenFile: "
|
printf_stderr("NeckoParent::AllocPRemoteOpenFile: "
|
||||||
"FATAL error: requested file URI contains '/../' "
|
"FATAL error: requested file URI '%s' contains '/../' "
|
||||||
"KILLING CHILD PROCESS\n");
|
"KILLING CHILD PROCESS\n", requestedPath.get());
|
||||||
return nullptr;
|
return nullptr;
|
||||||
}
|
}
|
||||||
} else {
|
} else {
|
||||||
@ -391,8 +391,10 @@ NeckoParent::AllocPRemoteOpenFile(const URIParams& aURI,
|
|||||||
NS_LossyConvertUTF16toASCII(uuid).get());
|
NS_LossyConvertUTF16toASCII(uuid).get());
|
||||||
if (!requestedPath.Equals(mustMatch)) {
|
if (!requestedPath.Equals(mustMatch)) {
|
||||||
printf_stderr("NeckoParent::AllocPRemoteOpenFile: "
|
printf_stderr("NeckoParent::AllocPRemoteOpenFile: "
|
||||||
"FATAL error: requesting file other than application.zip: "
|
"FATAL error: app without webapps-manage permission is "
|
||||||
"KILLING CHILD PROCESS\n");
|
"requesting file '%s' but is only allowed to open its "
|
||||||
|
"own application.zip: KILLING CHILD PROCESS\n",
|
||||||
|
requestedPath.get());
|
||||||
return nullptr;
|
return nullptr;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user