Bug 814156 - Need additional security checks for the "permissions" permission. r=sicking

This commit is contained in:
Gregor Wagner 2012-12-06 21:05:53 -08:00
parent c8037d4898
commit 35bcf12712

View File

@ -108,6 +108,11 @@ this.PermissionSettingsModule = {
let result;
switch (aMessage.name) {
case "PermissionSettings:AddPermission":
if (!aMessage.target.assertPermission("permissions")) {
Cu.reportError("PermissionSettings message " + msg.name +
" from a content process with no 'permissions' privileges.");
return null;
}
this.addPermission(msg);
break;
}