Bug 1822703 - Remove Google's cross-origin AppID exceptions. r=dveditz

Differential Revision: https://phabricator.services.mozilla.com/D172737
dothq · Mar 21, 2023 · 0ce9d54 · 0ce9d54
1 parent 6d55119
commit 0ce9d54
Showing 1 changed file with 0 additions and 13 deletions.
diff --git a/dom/webauthn/WebAuthnUtil.cpp b/dom/webauthn/WebAuthnUtil.cpp
@@ -16,12 +16,6 @@
 
 namespace mozilla::dom {
 
-// Bug #1436078 - Permit Google Accounts. Remove in Bug #1436085 in Jan 2023.
-constexpr auto kGoogleAccountsAppId1 =
-    u"https://www.gstatic.com/securitykey/origins.json"_ns;
-constexpr auto kGoogleAccountsAppId2 =
-    u"https://www.gstatic.com/securitykey/a/google.com/origins.json"_ns;
-
 const uint8_t FLAG_TUP = 0x01;  // Test of User Presence required
 const uint8_t FLAG_AT = 0x40;   // Authenticator Data is provided
 
@@ -101,13 +95,6 @@ bool EvaluateAppID(nsPIDOMWindowInner* aParent, const nsString& aOrigin,
     return true;
   }
 
-  // Bug #1436078 - Permit Google Accounts. Remove in Bug #1436085 in Jan 2023.
-  if (lowestFacetHost.EqualsLiteral("google.com") &&
-      (aAppId.Equals(kGoogleAccountsAppId1) ||
-       aAppId.Equals(kGoogleAccountsAppId2))) {
-    return true;
-  }
-
   return false;
 }