Commit 78a902b2 authored by Arthur Edelstein's avatar Arthur Edelstein Committed by Matthew Finkel
Browse files

Bug 26353: Prevent speculative connect that violated FPI. 

Connections were observed in the catch-all circuit when
the user entered an https or http URL in the URL bar, or
typed a search term.
parent b1fab128

toolkit/components/remotebrowserutils/RemoteWebNavigation.jsm

+4 −0
Original line number Diff line number Diff line
@@ -74,6 +74,9 @@ class RemoteWebNavigation { 
        fixupFlags |= Services.uriFixup.FIXUP_FLAG_PRIVATE_CONTEXT;

      }

      uri = Services.uriFixup.createFixupURI(aURI, fixupFlags);

/*******************************************************************************

   TOR BROWSER: Disable the following speculative connect until

   we can make it properly obey first-party isolation.



      // We know the url is going to be loaded, let's start requesting network

      // connection before the content process asks.
@@ -97,6 +100,7 @@ class RemoteWebNavigation { 
        }

        Services.io.speculativeConnect(uri, principal, null);

      }

*******************************************************************************/

    } catch (ex) {

      // Can't setup speculative connection for this uri string for some

      // reason (such as failing to parse the URI), just ignore it.