Bug 1547057 - HTMLIFrameElement must always set the default origin fo…

…r FeaturePolicy, r=ckerschb Differential Revision: https://phabricator.services.mozilla.com/D29002 --HG-- extra : moz-landing-system : lando
trman · Apr 29, 2019 · 0e59341 · 0e59341
1 parent 408ff64
commit 0e59341
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/dom/html/HTMLIFrameElement.cpp b/dom/html/HTMLIFrameElement.cpp
@@ -55,6 +55,10 @@ HTMLIFrameElement::HTMLIFrameElement(
     : nsGenericHTMLFrameElement(std::move(aNodeInfo), aFromParser) {
   // We always need a featurePolicy, even if not exposed.
   mFeaturePolicy = new FeaturePolicy(this);
+
+  nsCOMPtr<nsIPrincipal> origin = GetFeaturePolicyDefaultOrigin();
+  MOZ_ASSERT(origin);
+  mFeaturePolicy->SetDefaultOrigin(origin);
 }
 
 HTMLIFrameElement::~HTMLIFrameElement() {}

diff --git a/dom/html/crashtests/1547057.html b/dom/html/crashtests/1547057.html
@@ -0,0 +1,11 @@
+<html>
+<head>
+    <script>
+      function start() {
+        const iframe = document.createElement('iframe')
+        iframe.policy.allowedFeatures()
+      }
+      window.addEventListener('load', start)
+    </script>
+</head>
+</html>
diff --git a/dom/html/crashtests/crashtests.list b/dom/html/crashtests/crashtests.list
@@ -88,3 +88,4 @@ load 1386905.html
 asserts(0-4) load 1401726.html
 load 1412173.html
 load 1440523.html
+load 1547057.html