tor-browser

commit 5c18c056ee6ed0f8f589d20f11e0097e2fe75241
parent 6802a47598b33ce9ef3d296024c6cdedb5653ffe
Author: Kagami Sascha Rosylight <krosylight@proton.me>
Date:   Thu,  2 Oct 2025 22:28:34 +0000

Bug 1980904 - Deny notification requests for all cross origins r=asuth

Including same sites.

Differential Revision: https://phabricator.services.mozilla.com/D267012

Diffstat:
M
dom/notification/Notification.cpp
 | 
2
++

1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/dom/notification/Notification.cpp b/dom/notification/Notification.cpp
@@ -134,6 +134,8 @@ NotificationPermissionRequest::Run() {
                  PermissionCheckPurpose::PermissionRequest,
                  mWindow->GetExtantDoc())) {
     mPermission = NotificationPermission::Denied;
+  } else if (!mPrincipal->Subsumes(mTopLevelPrincipal)) {
+    mPermission = NotificationPermission::Denied;
   }
 
   // We can't call ShowPrompt() directly here since our logic for determining