Commit 042b5bd8 authored by Arthur Edelstein's avatar Arthur Edelstein Committed by Richard Pospesel
Browse files

Bug 26353: Prevent speculative connect that violated FPI. 

Connections were observed in the catch-all circuit when
the user entered an https or http URL in the URL bar, or
typed a search term.
parent 821aa6c7

toolkit/components/remotebrowserutils/RemoteWebNavigation.jsm

+4 −0
Original line number Diff line number Diff line
@@ -95,6 +95,9 @@ class RemoteWebNavigation { 
      }



      uri = Services.uriFixup.getFixupURIInfo(aURI, fixupFlags).preferredURI;

/*******************************************************************************

   Disable the following speculative connect until

   we can make it properly obey first-party isolation.



      // We know the url is going to be loaded, let's start requesting network

      // connection before the content process asks.
@@ -118,6 +121,7 @@ class RemoteWebNavigation { 
        }

        Services.io.speculativeConnect(uri, principal, null);

      }

*******************************************************************************/

    } catch (ex) {

      // Can't setup speculative connection for this uri string for some

      // reason (such as failing to parse the URI), just ignore it.