I have just landed changes on inbound that restrict WebIDL
QueryInterface [1] and the Components object [2] to system scopes.
There are two caveats:
1) The Components bit is not fully enforced by the security
infrastructure yet, but those patches are coming in the next day or so. [3].
2) "system" in this case includes things that do enablePrivilege. The
only consumer blocking this being removed is Talos...
-Boris
[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1448397
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=1448735 and
https://bugzilla.mozilla.org/show_bug.cgi?id=1448736
[3] https://bugzilla.mozilla.org/show_bug.cgi?id=1389585 and
https://bugzilla.mozilla.org/show_bug.cgi?id=1389581
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform
