Bug 1263823 - Allow cross origin redirects for livemarks. r=sicking
authorChristoph Kerschbaumer <ckerschb@christophkerschbaumer.com>
Thu, 14 Apr 2016 11:20:47 +0200
changeset 293381 382498551ec063d602ccd8619ceb4ea0e28c9ac1
parent 293380 e48a3e3ff57881952bc8bd107da53c04fde7ad5c
child 293382 15a13875356ffcad6d570b519ace27d771c5b4d5
push id75187
push userryanvm@gmail.com
push dateFri, 15 Apr 2016 12:29:34 +0000
treeherdermozilla-inbound@7887410b3392 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewerssicking
bugs1263823
milestone48.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1263823 - Allow cross origin redirects for livemarks. r=sicking
toolkit/components/places/nsLivemarkService.js
--- a/toolkit/components/places/nsLivemarkService.js
+++ b/toolkit/components/places/nsLivemarkService.js
@@ -530,17 +530,17 @@ Livemark.prototype = {
                       createInstance(Ci.nsILoadGroup);
       // Creating a CodeBasePrincipal and using it as the loadingPrincipal
       // is *not* desired and is only tolerated within this file.
       // TODO: Find the right OriginAttributes and pass something other
       // than {} to .createCodeBasePrincipal().
       let channel = NetUtil.newChannel({
         uri: this.feedURI,
         loadingPrincipal: Services.scriptSecurityManager.createCodebasePrincipal(this.feedURI, {}),
-        securityFlags: Ci.nsILoadInfo.SEC_REQUIRE_SAME_ORIGIN_DATA_IS_BLOCKED,
+        securityFlags: Ci.nsILoadInfo.SEC_ALLOW_CROSS_ORIGIN_DATA_IS_NULL,
         contentPolicyType: Ci.nsIContentPolicy.TYPE_INTERNAL_XMLHTTPREQUEST
       }).QueryInterface(Ci.nsIHttpChannel);
       channel.loadGroup = loadgroup;
       channel.loadFlags |= Ci.nsIRequest.LOAD_BACKGROUND |
                            Ci.nsIRequest.LOAD_BYPASS_CACHE;
       channel.requestMethod = "GET";
       channel.setRequestHeader("X-Moz", "livebookmarks", false);