wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

bug 878702 remove use of no-store header when deciding sharable state of a page, r=gavin

Browse Source
This commit is contained in:
Shane Caraveo 2013-06-21 15:22:30 -07:00
parent 5959a56181
commit f0b5780b9f
1 changed files with 0 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
browser/base/content/browser-social.js
View File

@ -671,43 +671,6 @@ SocialShare = {
if (!aURI || !(aURI.schemeIs('http') || aURI.schemeIs('https')))
return false;
// The share button and context menus are disabled if the current tab has
// defined no-store. However, a share from other content is still possible
// (eg. via mozSocial or future use of web activities). If the URI is not
// the current tab URI, we cannot validate the no-store header on the URI.
if (aURI != gBrowser.currentURI)
return true;
// we want to ensure this is a successful load and that the page is locally
// cacheable since that is a common mechanism for sensitive pages to avoid
// storing sensitive data in cache.
let channel = gBrowser.docShell.currentDocumentChannel;
let httpChannel;
try {
httpChannel = channel.QueryInterface(Ci.nsIHttpChannel);
} catch (e) {
/* Not an HTTP channel. */
Cu.reportError("cannot share without httpChannel");
return false;
}
// Continue only if we have a 2xx status code.
try {
if (!httpChannel.requestSucceeded)
return false;
} catch (e) {
// Can't get response information from the httpChannel
// because mResponseHead is not available.
return false;
}
// Cache-Control: no-store.
if (httpChannel.isNoStoreResponse()) {
Cu.reportError("cannot share cache-control: no-share");
return false;
}
return true;
},