fix bug 1409226: strip referer when opening link into private window draft
authorLuke Crouch <lcrouch@mozilla.com>
Wed, 18 Oct 2017 13:38:12 -0500
changeset 683442 3560e8bc3f6f19485c47d15b2ea385763c4b36a4
parent 681975 5eff9b2137200f7a274d7206720347d3d522ff9d
child 736657 6acc5267e6bac5390139f45c890dc1fc190c66bb
push id85386
push userbmo:lcrouch@mozilla.com
push dateThu, 19 Oct 2017 19:16:56 +0000
bugs1409226
milestone58.0a1
fix bug 1409226: strip referer when opening link into private window enforce aNoReferrer in openLink() when aIsPrivate MozReview-Commit-ID: JPgjf5PqYOf
browser/base/content/utilityOverlay.js
--- a/browser/base/content/utilityOverlay.js
+++ b/browser/base/content/utilityOverlay.js
@@ -232,16 +232,21 @@ function openLinkIn(url, where, params) 
   var aAllowPopups          = !!params.allowPopups;
   var aUserContextId        = params.userContextId;
   var aIndicateErrorPageLoad = params.indicateErrorPageLoad;
   var aPrincipal            = params.originPrincipal;
   var aTriggeringPrincipal  = params.triggeringPrincipal;
   var aForceAboutBlankViewerInCurrent =
       params.forceAboutBlankViewerInCurrent;
 
+  // Enforce aNoReferrer true when aIsPrivate is true
+  if (aIsPrivate) {
+    aNoReferrer = true;
+  }
+
   if (where == "save") {
     // TODO(1073187): propagate referrerPolicy.
 
     // ContentClick.jsm passes isContentWindowPrivate for saveURL instead of passing a CPOW initiatingDoc
     if ("isContentWindowPrivate" in params) {
       saveURL(url, null, null, true, true, aNoReferrer ? null : aReferrerURI, null, params.isContentWindowPrivate);
     } else {
       if (!aInitiatingDoc) {