Rip mozTCPSocket out of Tor Browser
In legacy/trac#18863 (moved) we disabled the usage of mozTCPSocket per preference. We might want to rip out that code as a defense in depth.
Activity
-
Newest first Oldest first
-
Show all activity Show comments only Show history only
- Georg Koppen mentioned in issue legacy/trac#21625 (moved)
mentioned in issue legacy/trac#21625 (moved)
- Trac moved from legacy/trac#18866 (moved)
moved from legacy/trac#18866 (moved)
- Trac removed 1 deleted label
removed 1 deleted label
a quick look on searchfox seems to indicate mozTCPSocket is now hard-coded to only be available for system principals, which a quick look in the debugger seems to confirm. That said, nothing in the codebase seems to actually reference the exposed symbol except for tests, so there's nothing stopping us from writing a patch and ripping it out.
Collapse replies Yes, this pref [
dom.mozTCPSocket.enabled
] was removed in 1286530. I confirmed that navigator.mozTCPSocket is only exposed in chrome contexts^ although that was 4 years ago
https://searchfox.org/mozilla-central/search?q=mozTCPSocket&path=&case=false®exp=false
- morgan added First Contribution Icebox labels
added First Contribution Icebox labels
- morgan added Roadmap::Future label
added Roadmap::Future label
- morgan added Linkability label
added Linkability label
- morgan added Sponsor 131 label
added Sponsor 131 label
- morgan added All Platforms label
added All Platforms label
- morgan added Apps::Priority::Low label
added Apps::Priority::Low label
- morgan added Apps::Type::Chore label
added Apps::Type::Chore label
- morgan added Apps::Impact::Low label
added Apps::Impact::Low label