Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixing bug 299450. Add protection for __proto__. r=bzbarsky@mit.edu, sr+a=brendan@mozilla.org

Browse Source 
git-svn-id: svn://10.0.0.236/trunk@175666 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
jst%mozilla.jstenback.com
2005-07-06 00:10:24 +00:00
parent 1b279c1d00
commit ae9379ea3e
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
mozilla/js/src/xpconnect/src/XPCNativeWrapper.cpp
View File

@@ -763,6 +763,18 @@ JS_STATIC_DLL_CALLBACK(JSBool)
XPC_NW_CheckAccess(JSContext *cx, JSObject *obj, jsval id,
JSAccessMode mode, jsval *vp)
{
// Prevent setting __proto__ on an XPCNativeWrapper
if ((mode & JSACC_WATCH) == JSACC_PROTO && (mode & JSACC_WRITE)) {
return ThrowException(NS_ERROR_XPC_SECURITY_MANAGER_VETO, cx);
}
// Forward to the checkObjectAccess hook in the JSContext, if any.
if (cx->runtime->checkObjectAccess &&
!cx->runtime->checkObjectAccess(cx, obj, id, mode, vp)) {
return JS_FALSE;
}
// Do our own thing...
XPC_NW_BYPASS_TEST(cx, obj, checkAccess, (cx, obj, id, mode, vp));
return JS_TRUE;