From 640d8beb0404cba170c6bb078e49941b3e879f3c Mon Sep 17 00:00:00 2001 From: Georg Koppen Date: Wed, 29 May 2019 12:29:19 +0000 Subject: [PATCH] Bug 30541: Disable WebGL readPixel() for web content --- dom/canvas/WebGLContextGL.cpp | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/dom/canvas/WebGLContextGL.cpp b/dom/canvas/WebGLContextGL.cpp index 793d541ce71f0..38f63234ea942 100644 --- a/dom/canvas/WebGLContextGL.cpp +++ b/dom/canvas/WebGLContextGL.cpp @@ -1190,6 +1190,14 @@ bool WebGLContext::ReadPixels_SharedPrecheck(CallerType aCallerType, return false; } + // Security check passed, but don't let content readPixel calls through for + // now, if Resist Fingerprinting Mode is enabled. + if (nsContentUtils::ResistFingerprinting(aCallerType)) { + GenerateWarning("readPixels: Not allowed in Resist Fingerprinting Mode"); + out_error.Throw(NS_ERROR_DOM_NOT_SUPPORTED_ERR); + return false; + } + return true; } -- GitLab