Commit 1c043f2a authored by Arthur Edelstein's avatar Arthur Edelstein Committed by Matthew Finkel
Browse files

Bug 26353: Prevent speculative connect that violated FPI. 

Connections were observed in the catch-all circuit when
the user entered an https or http URL in the URL bar, or
typed a search term.
parent 4c3d5898

toolkit/components/remotebrowserutils/RemoteWebNavigation.jsm

+4 −0
Original line number Diff line number Diff line
@@ -93,6 +93,9 @@ class RemoteWebNavigation { 
      }



      uri = Services.uriFixup.getFixupURIInfo(aURI, fixupFlags).preferredURI;

/*******************************************************************************

   TOR BROWSER: Disable the following speculative connect until

   we can make it properly obey first-party isolation.



      // We know the url is going to be loaded, let's start requesting network

      // connection before the content process asks.
@@ -116,6 +119,7 @@ class RemoteWebNavigation { 
        }

        Services.io.speculativeConnect(uri, principal, null);

      }

*******************************************************************************/

    } catch (ex) {

      // Can't setup speculative connection for this uri string for some

      // reason (such as failing to parse the URI), just ignore it.