Firefox · Networking
CVE-2025-13013
Logic Error in Networking
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
netwerk/protocol/http/HttpBaseChannel.cpp
Patch
diff --git a/netwerk/protocol/http/HttpBaseChannel.cpp b/netwerk/protocol/http/HttpBaseChannel.cpp
index 27a6a616dfc..4132452313b 100644
--- a/netwerk/protocol/http/HttpBaseChannel.cpp
+++ b/netwerk/protocol/http/HttpBaseChannel.cpp
@@ -2969,7 +2969,8 @@ nsresult ProcessXCTO(HttpBaseChannel* aChannel, nsIURI* aURI,
auto policyType = aLoadInfo->GetExternalContentPolicyType();
if (policyType == ExtContentPolicy::TYPE_DOCUMENT ||
- policyType == ExtContentPolicy::TYPE_SUBDOCUMENT) {
+ policyType == ExtContentPolicy::TYPE_SUBDOCUMENT ||
+ policyType == ExtContentPolicy::TYPE_OBJECT) {
// If the header XCTO nosniff is set for any browsing context, then
// we set the skipContentSniffing flag on the Loadinfo. Within
// GetMIMETypeFromContent we then bail early and do not do any sniffing.
Loading diff…
References
On This Page