mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-12-01 08:42:13 +00:00
Bug 814156 - Need additional security checks for the "permissions" permission. r=sicking
This commit is contained in:
parent
c8037d4898
commit
35bcf12712
@ -108,6 +108,11 @@ this.PermissionSettingsModule = {
|
||||
let result;
|
||||
switch (aMessage.name) {
|
||||
case "PermissionSettings:AddPermission":
|
||||
if (!aMessage.target.assertPermission("permissions")) {
|
||||
Cu.reportError("PermissionSettings message " + msg.name +
|
||||
" from a content process with no 'permissions' privileges.");
|
||||
return null;
|
||||
}
|
||||
this.addPermission(msg);
|
||||
break;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user