Commit 0ce9d54d authored by John Schanck's avatar John Schanck
Browse files

Bug 1822703 - Remove Google's cross-origin AppID exceptions. r=dveditz 

Differential Revision: https://phabricator.services.mozilla.com/D172737
parent 6d551197

dom/webauthn/WebAuthnUtil.cpp

+0 −13
Original line number Diff line number Diff line
@@ -16,12 +16,6 @@ 


namespace mozilla::dom {



// Bug #1436078 - Permit Google Accounts. Remove in Bug #1436085 in Jan 2023.

constexpr auto kGoogleAccountsAppId1 =

    u"https://www.gstatic.com/securitykey/origins.json"_ns;

constexpr auto kGoogleAccountsAppId2 =

    u"https://www.gstatic.com/securitykey/a/google.com/origins.json"_ns;



const uint8_t FLAG_TUP = 0x01;  // Test of User Presence required

const uint8_t FLAG_AT = 0x40;   // Authenticator Data is provided
@@ -101,13 +95,6 @@ bool EvaluateAppID(nsPIDOMWindowInner* aParent, const nsString& aOrigin, 
    return true;

  }



  // Bug #1436078 - Permit Google Accounts. Remove in Bug #1436085 in Jan 2023.

  if (lowestFacetHost.EqualsLiteral("google.com") &&

      (aAppId.Equals(kGoogleAccountsAppId1) ||

       aAppId.Equals(kGoogleAccountsAppId2))) {

    return true;

  }



  return false;

}