Since landing bug 1465911 [1], CPOWs [2] are only functional on our testing infrastructure. In normal builds that we ship to users CPOWs can be created, but no operations like property lookup can be performed on them.
CPOWs continue to exist, because a lot of tests still depend on them. We can't disable CPOW creation in user builds, because the context menu passes them from the child to the parent and back like a token. This is a significant IPC attack surface reduction. [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1465911 [2] https://developer.mozilla.org/en-US/Firefox/Multiprocess_Firefox/Cross_Process_Object_Wrappers _______________________________________________ dev-platform mailing list [email protected] https://lists.mozilla.org/listinfo/dev-platform
