379803 - Give content policies information about user initiated action

Status: UNCONFIRMED

(Core :: DOM: Security, defect, P5)

Description

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

It would be great if contentpolicy implementations got information on if the load was initiated by a user or not. One use for this is to block external protocol handlers for page loads if the load was not initiated by the user.

We should be able to reuse the popup blocking code for this.

Comment 1

[Boris Zbarsky [:bzbarsky]]

We'd need to expose the current popup blocking state on some service, then (which I think we should do).  Some of the content policy checks are done from JS, which can't get at the popup blocking state.

That would incidentally allow embeddors access to the popup blocking state too, which I think is a good idea.

Comment 2

[Christian :Biesinger (don't email me, ping me on IRC)]

Necko doesn't do content policy stuff.

Comment 3

[Ethan Tseng [:ethan]]

Chris,
Do we still need to fix this bug?  Should we close it?

Comment 4

[Christoph Kerschbaumer [:ckerschb}]

(In reply to Ethan Tseng [:ethan] - 57 Regression Engineering Support from comment #3)
> Chris,
> Do we still need to fix this bug?  Should we close it?

In theory that still sounds interesting to me, but I guess it has to go in the backlog.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Clear a needinfo that is pending on an inactive user.

Inactive users most likely will not respond; if the missing information is essential and cannot be collected another way, the bug maybe should be closed as INCOMPLETE.

For more information, please visit BugBot documentation.