Firefox · Networking
CVE-2026-74974
Cross Origin in Networking
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
netwerk/protocol/http/InterceptedHttpChannel.cpp
Patch
diff --git a/netwerk/protocol/http/InterceptedHttpChannel.cpp b/netwerk/protocol/http/InterceptedHttpChannel.cpp
index 7af3a4d44fc..f094d87b789 100644
--- a/netwerk/protocol/http/InterceptedHttpChannel.cpp
+++ b/netwerk/protocol/http/InterceptedHttpChannel.cpp
@@ -915,6 +915,10 @@ InterceptedHttpChannel::StartSynthesizedResponse(
mResponseHead = std::move(mSynthesizedResponseHead);
+ if (mLoadInfo->GetTainting() == LoadTainting::Opaque) {
+ StoreAllRedirectsSameOriginIgnoringInternal(false);
+ }
+
if (ShouldRedirect()) {
rv = FollowSyntheticRedirect();
NS_ENSURE_SUCCESS(rv, rv);
Loading diff…
References
On This Page