Commit cb3aa9a8 authored by Arthur Edelstein's avatar Arthur Edelstein Committed by Matthew Finkel
Browse files

Bug 26353: Prevent speculative connect that violated FPI.

Connections were observed in the catch-all circuit when
the user entered an https or http URL in the URL bar, or
typed a search term.
parent 53b8f61d
...@@ -93,6 +93,9 @@ class RemoteWebNavigation { ...@@ -93,6 +93,9 @@ class RemoteWebNavigation {
} }
uri = Services.uriFixup.getFixupURIInfo(aURI, fixupFlags).preferredURI; uri = Services.uriFixup.getFixupURIInfo(aURI, fixupFlags).preferredURI;
/*******************************************************************************
TOR BROWSER: Disable the following speculative connect until
we can make it properly obey first-party isolation.
// We know the url is going to be loaded, let's start requesting network // We know the url is going to be loaded, let's start requesting network
// connection before the content process asks. // connection before the content process asks.
...@@ -116,6 +119,7 @@ class RemoteWebNavigation { ...@@ -116,6 +119,7 @@ class RemoteWebNavigation {
} }
Services.io.speculativeConnect(uri, principal, null); Services.io.speculativeConnect(uri, principal, null);
} }
*******************************************************************************/
} catch (ex) { } catch (ex) {
// Can't setup speculative connection for this uri string for some // Can't setup speculative connection for this uri string for some
// reason (such as failing to parse the URI), just ignore it. // reason (such as failing to parse the URI), just ignore it.
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment