Chemspill for sec-high [M1410106]

[classilla]

We are vulnerable.
Preparing 45.13.1 (FPR 4 SPR 1)
Patched in 52.5.1

[classilla]

Also incorporating the vmx_strchr() fix from #440.

[classilla]

We need https://bugzilla.mozilla.org/show_bug.cgi?id=1269361 first.

[classilla]

(and all its deps, dammit)

[classilla]

We could just implement

+void
+OriginAttributes::SyncAttributesWithPrivateBrowsing(bool aInPrivateBrowsing)
+{
+  mPrivateBrowsingId = aInPrivateBrowsing ? 1 : 0;
+}

in caps/BasePrincipal and then the dom/base/nsFrameLoader.cpp piece, or whatever minimum is needed to get an accurate value back to the indexedDB.

[classilla]

(and docshell/base/LoadContext.cpp)

[classilla]

(and dom/ipc/Tab*)

[classilla]

We have a better solution now thanks to :asuth.