[tbb-commits] [tor-browser] 18/70: Bug 30541: Disable WebGL readPixel() for web content

[gitolite role]

This is an automated email from the git hooks/post-receive script.

pierov pushed a commit to branch tor-browser-102.0.1-12.0-1
in repository tor-browser.

commit 54acdad7630bad7134374b6789bf6a5fc3aecf72
Author: Georg Koppen <gk at torproject.org>
AuthorDate: Wed May 29 12:29:19 2019 +0000

    Bug 30541: Disable WebGL readPixel() for web content
    
    Related Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1428034
---
 dom/canvas/ClientWebGLContext.cpp | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/dom/canvas/ClientWebGLContext.cpp b/dom/canvas/ClientWebGLContext.cpp
index 884b15ea1744f..8fe2d9316877b 100644
--- a/dom/canvas/ClientWebGLContext.cpp
+++ b/dom/canvas/ClientWebGLContext.cpp
@@ -4902,6 +4902,14 @@ bool ClientWebGLContext::ReadPixels_SharedPrecheck(
     return false;
   }
 
+  // Security check passed, but don't let content readPixel calls through for
+  // now, if Resist Fingerprinting Mode is enabled.
+  if (nsContentUtils::ResistFingerprinting(aCallerType)) {
+    JsWarning("readPixels: Not allowed in Resist Fingerprinting Mode");
+    out_error.Throw(NS_ERROR_DOM_NOT_SUPPORTED_ERR);
+    return false;
+  }
+
   return true;
 }
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.