Bug 1424474 part 2. Make sure that we only pass non-system subject principals to setters/methods that later use that principal for loading security checks. r=kmag

2017-12-20 17:43:18 -05:00
parent 73d872bad1
commit 8ed3a61303
31 changed files with 48 additions and 51 deletions
--- a/dom/html/HTMLScriptElement.cpp
+++ b/dom/html/HTMLScriptElement.cpp
@@ -147,7 +147,7 @@ HTMLScriptElement::GetInnerHTML(nsAString& aInnerHTML)

 void
 HTMLScriptElement::SetInnerHTML(const nsAString& aInnerHTML,
-                                nsIPrincipal& aScriptedPrincipal,
+                                nsIPrincipal* aScriptedPrincipal,
                                ErrorResult& aError)
 {
  aError = nsContentUtils::SetNodeTextContent(this, aInnerHTML, true);