Firefox · Core
CVE-2025-5263
Cross Origin in Core
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
devtools/server/actors/object/previewers.js
Patch
diff --git a/devtools/server/actors/object/previewers.js b/devtools/server/actors/object/previewers.js
index 3fd4ec0122e..1c5052fe0f8 100644
--- a/devtools/server/actors/object/previewers.js
+++ b/devtools/server/actors/object/previewers.js
@@ -1034,10 +1034,13 @@ previewers.Object = [
const { obj } = objectActor;
- // The name and/or message could be getters, and even if it's unsafe, we do want
- // to show it to the user (See Bug 1710694).
- const name = DevToolsUtils.getProperty(obj, "name", true);
- const msg = DevToolsUtils.getProperty(obj, "message", true);
+ // The name and/or message could be getters, and even if it's unsafe,
+ // we do want to show it to the user, unless the error is muted
+ // (See Bug 1710694).
+ const invokeUnsafeGetters = !obj.isMutedError;
+
+ const name = DevToolsUtils.getProperty(obj, "name", invokeUnsafeGetters);
+ const msg = DevToolsUtils.getProperty(obj, "message", invokeUnsafeGetters);
const stack = DevToolsUtils.getProperty(obj, "stack");
const fileName = DevToolsUtils.getProperty(obj, "fileName");
const lineNumber = DevToolsUtils.getProperty(obj, "lineNumber");
Loading diff…
References
On This Page