[Pkg-mozext-commits] [requestpolicy] 159/280: update an old comment regarding Null Principal

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch master
in repository requestpolicy.

commit 09e5cea0a41986a2dfe4a6350034d4c50fbd2a5d
Author: Martin Kimmerle <dev at 256k.de>
Date:   Sun Jan 18 21:14:03 2015 +0100

    update an old comment regarding Null Principal
---
 src/content/lib/request.jsm | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/src/content/lib/request.jsm b/src/content/lib/request.jsm
index 5b8bb54..3b57f56 100644
--- a/src/content/lib/request.jsm
+++ b/src/content/lib/request.jsm
@@ -131,10 +131,14 @@ NormalRequest.prototype.detailsToString = function() {
   *         resources.
   */
 NormalRequest.prototype.isInternal = function() {
+  // TODO: investigate "moz-nullprincipal". The following comment has been
+  //       created by @jsamuel in 2008, commit 46a04bb. More information about
+  //       principals at https://developer.mozilla.org/en-US/docs/Mozilla/Gecko/Script_security
+  //
   // Note: Don't OK the origin scheme "moz-nullprincipal" without further
-  // understanding. It appears to be the source when test8.html is used. That
-  // is, javascript redirect to a "javascript:" url that creates the entire
-  // page's content which includes a form that it submits. Maybe
+  // understanding. It appears to be the source when the `js_1.html` test is
+  // used. That is, javascript redirect to a "javascript:" url that creates the
+  // entire page's content which includes a form that it submits. Maybe
   // "moz-nullprincipal" always shows up when using "document.location"?
 
   // Not cross-site requests.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-mozext/requestpolicy.git