I've been using an nsIContentPolicy implementation to restrict access to resources that use my protocol handler. Specifically, I only want to allow access for requests that come from content under certain circumstances.
To check whether the request comes from privileged code, I've been comparing aRequestPrincipal in the shouldLoad() method with the system principal. As far as I can tell, this has always worked. But now the comparison is failing, probably because I upgraded to Firefox 28. I looked, and for requests from chrome the request principal now seems to be null. For the requests from the browser URL bar it is the "null principal". Has something changed in Firefox 28 in this respect? What is the right way in the shouldLoad() method to check whether the request is coming from privileged code or content? _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
