From b2c0fda7753ce19074e17bf6844c6d78026670ed Mon Sep 17 00:00:00 2001 From: Moonchild Date: Wed, 24 Feb 2021 10:13:37 +0000 Subject: [PATCH] [DOM] Don't reveal error details for CORS-cross-origin decoding errors. --- dom/html/HTMLMediaElement.cpp | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/dom/html/HTMLMediaElement.cpp b/dom/html/HTMLMediaElement.cpp index 0828208f6..1ff1fd7a4 100644 --- a/dom/html/HTMLMediaElement.cpp +++ b/dom/html/HTMLMediaElement.cpp @@ -4614,8 +4614,12 @@ void HTMLMediaElement::DecodeError(const MediaResult& aError) } } else if (mReadyState == nsIDOMHTMLMediaElement::HAVE_NOTHING) { NoSupportedMediaSourceError(aError.Description()); - } else { + } else if (IsCORSSameOrigin()) { Error(MEDIA_ERR_DECODE, aError.Description()); + } else { + nsAutoCString eMessage; + eMessage.AssignLiteral("Failed to decode media"); + Error(MEDIA_ERR_DECODE, eMessage); } }