Bug 1424474 part 3. Make sure that we only pass non-system subject principals to setters/methods that later use that principal for loading security checks. r=kmag

MozReview-Commit-ID: IjUEG5xwn5
2017-12-20 17:43:18 -05:00
parent 9b1ed08230
commit ca91e3b7b4
31 changed files with 48 additions and 51 deletions
--- a/dom/html/HTMLScriptElement.cpp
+++ b/dom/html/HTMLScriptElement.cpp
@@ -147,7 +147,7 @@ HTMLScriptElement::GetInnerHTML(nsAString& aInnerHTML)

 void
 HTMLScriptElement::SetInnerHTML(const nsAString& aInnerHTML,
-                                nsIPrincipal& aScriptedPrincipal,
+                                nsIPrincipal* aScriptedPrincipal,
                                ErrorResult& aError)
 {
  aError = nsContentUtils::SetNodeTextContent(this, aInnerHTML, true);