Medium firefox Cross Origin 🔧 Commit mapped

Overview

Medium
Severity
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionError handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks.
ComponentCore
Bug ClassCross Origin
Tracker1960745
Fix commit466e2a52971f (firefox) +7/-4
CISA KEVNot listed
Creditedterjanq
Disclosed2025-05-27

Files Changed

  • devtools/server/actors/object/previewers.js
diff --git a/devtools/server/actors/object/previewers.js b/devtools/server/actors/object/previewers.js
index 3fd4ec0122e..1c5052fe0f8 100644
--- a/devtools/server/actors/object/previewers.js
+++ b/devtools/server/actors/object/previewers.js
@@ -1034,10 +1034,13 @@ previewers.Object = [
 
     const { obj } = objectActor;
 
-    // The name and/or message could be getters, and even if it's unsafe, we do want
-    // to show it to the user (See Bug 1710694).
-    const name = DevToolsUtils.getProperty(obj, "name", true);
-    const msg = DevToolsUtils.getProperty(obj, "message", true);
+    // The name and/or message could be getters, and even if it's unsafe,
+    // we do want to show it to the user, unless the error is muted
+    // (See Bug 1710694).
+    const invokeUnsafeGetters = !obj.isMutedError;
+
+    const name = DevToolsUtils.getProperty(obj, "name", invokeUnsafeGetters);
+    const msg = DevToolsUtils.getProperty(obj, "message", invokeUnsafeGetters);
     const stack = DevToolsUtils.getProperty(obj, "stack");
     const fileName = DevToolsUtils.getProperty(obj, "fileName");
     const lineNumber = DevToolsUtils.getProperty(obj, "lineNumber");
Loading diff…