Bug 30541: Disable WebGL readPixel() for web content

9aeddd0b · Georg Koppen · Matthew Finkel · 51631259 · 9aeddd0b
Commit 9aeddd0b authored May 29, 2019 by Georg Koppen Committed by Matthew Finkel Feb 05, 2021
Hide whitespace changes
Inline Side-by-side

Showing with 8 additions and 0 deletions

dom/canvas/ClientWebGLContext.cpp dom/canvas/ClientWebGLContext.cpp +8 -0

No files found.
--- a/dom/canvas/ClientWebGLContext.cpp
+++ b/dom/canvas/ClientWebGLContext.cpp
@@ -4115,6 +4115,14 @@ bool ClientWebGLContext::ReadPixels_SharedPrecheck(
    return false;
  }

+  // Security check passed, but don't let content readPixel calls through for
+  // now, if Resist Fingerprinting Mode is enabled.
+  if (nsContentUtils::ResistFingerprinting(aCallerType)) {
+    JsWarning("readPixels: Not allowed in Resist Fingerprinting Mode");
+    out_error.Throw(NS_ERROR_DOM_NOT_SUPPORTED_ERR);
+    return false;
+  }
+
  return true;
 }