Skip to content

Commit

Permalink
Bug 1383799 - Cancel WebAuthn operations on tab-switch r=ttaubert
Browse files Browse the repository at this point in the history
WebAuthn operations that are in-flight with authenticators must be cancelled
when switching tabs.

There's an Issue [1] opened with the WebAuthn spec for this already, but the
language is _not_ in spec. Still, it's necessary for security, spec or not.

This also matches how Chromium handles U2F operations during a tab switch.

[1] w3c/webauthn#316

MozReview-Commit-ID: 6Qh9oC4pqys

UltraBlame original commit: f7a53ff2f8cb312eb6a65b127207e04d2bd1c79c
  • Loading branch information
marco-c committed Oct 1, 2019
1 parent c9b0a46 commit af4999c
Show file tree
Hide file tree
Showing 2 changed files with 388 additions and 4 deletions.
Loading

0 comments on commit af4999c

Please sign in to comment.