summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authortrav90 <travawine@protonmail.ch>2016-05-12 22:00:02 -0500
committertrav90 <travawine@protonmail.ch>2016-05-12 22:00:02 -0500
commitff6d525cb3e61731eed554e84f9ad9b9be5a4ede (patch)
tree4f054657cfced27f5c71223897d67e8f6ce411ad
parent8acb937c47cc29aa2f32b2dd407c212af1cc9eff (diff)
downloadpalemoon-gre-ff6d525cb3e61731eed554e84f9ad9b9be5a4ede.tar.gz
Comment out undefined object in the XSS filter (fixes debug builds)
-rw-r--r--caps/src/nsScriptSecurityManager.cpp8
1 files changed, 5 insertions, 3 deletions
diff --git a/caps/src/nsScriptSecurityManager.cpp b/caps/src/nsScriptSecurityManager.cpp
index ebcb17057..8b8b75748 100644
--- a/caps/src/nsScriptSecurityManager.cpp
+++ b/caps/src/nsScriptSecurityManager.cpp
@@ -517,9 +517,11 @@ nsScriptSecurityManager::XSSFilterPermitsJSAction(JSContext *cx, JSString *str)
if (!subjectPrincipal) {
// See bug 553448 for discussion of this case.
- NS_ASSERTION(!JS_GetSecurityCallbacks(js::GetRuntime(cx))->findObjectPrincipals,
- "XSS: Should have been able to find subject principal."
- "Reluctantly allowing script.");
+ // findObjectPrincipals is not defined, and therefore breaks debug builds.
+ // Commenting out the below assertion as a workaround. See Issue #432.
+ //NS_ASSERTION(!JS_GetSecurityCallbacks(js::GetRuntime(cx))->findObjectPrincipals,
+ // "XSS: Should have been able to find subject principal."
+ // "Reluctantly allowing script.");
return true;
}