Re: Components and QueryInterface can no longer be used in non-system globals

2018-03-27 Thread Eric Shepherd (Sheppy)
Ironically, the timing is impressive here. I just this morning noticed that the tables of inheritance we have in JSON for APIs includes LegacyQueryInterface among the mixins implemented by a number of interfaces, and was already in the process of creating a PR to remove that since it should never

Re: Components and QueryInterface can no longer be used in non-system globals

2018-03-26 Thread Boris Zbarsky
On 3/26/18 1:55 PM, Boris Zbarsky wrote: I have just landed changes on inbound that restrict WebIDL QueryInterface [1] and the Components object [2] to system scopes. Oh, I meant to mention: in particular there is no longer a Components available in XBL bindings attached to

Components and QueryInterface can no longer be used in non-system globals

2018-03-26 Thread Boris Zbarsky
I have just landed changes on inbound that restrict WebIDL QueryInterface [1] and the Components object [2] to system scopes. There are two caveats: 1) The Components bit is not fully enforced by the security infrastructure yet, but those patches are coming in the next day or so. [3]. 2)