Firefox · Toolkit
CVE-2026-118008
Logic Error in Toolkit
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
toolkit/components/pdfjs/content/PdfEmbedFallbackParent.sys.mjs
Patch
diff --git a/toolkit/components/pdfjs/content/PdfEmbedFallbackParent.sys.mjs b/toolkit/components/pdfjs/content/PdfEmbedFallbackParent.sys.mjs
index 2088c7f03a0..952d08d39b4 100644
--- a/toolkit/components/pdfjs/content/PdfEmbedFallbackParent.sys.mjs
+++ b/toolkit/components/pdfjs/content/PdfEmbedFallbackParent.sys.mjs
@@ -61,6 +61,7 @@ export class PdfEmbedFallbackParent extends JSWindowActorParent {
// The converter keeps the PDF URI as the fallback document's URI.
fallback.browsingContext.loadURI(fallback.documentURI, {
triggeringPrincipal: embedder.documentPrincipal,
+ triggeringRemoteType: embedder.remoteType,
referrerInfo: lazy.E10SUtils.deserializeReferrerInfo(data?.referrerInfo),
});
}
Loading diff…
References
On This Page