webRequest.BlockingResponse has an old reference to a resolved bug

[nuiva]

MDN URL

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/webRequest/BlockingResponse

What specific section or headline is this issue about?

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/webRequest/BlockingResponse#redirecturl

What information was incorrect, unhelpful, or incomplete?

It is stated that:

Redirections to non-HTTP schemes such as data: are allowed, but they are not currently supported (Firefox bug 707624).

However, bug 707624 has already been fixed in Firefox 127 or earlier.

What did you expect to see?

I think something like this would be good:

Redirections to non-HTTP schemes such as data: are allowed. However, main_frame requests are specifically blocked from using data: URLs.

Do you have any supporting links, references, or citations?

• Reference on bug 707624 being fixed: https://bugzilla.mozilla.org/show_bug.cgi?id=707624#c13
• Reference on data: URLs being blocked on main_frame: https://blog.mozilla.org/security/2017/11/27/blocking-top-level-navigations-data-urls-firefox-59/

Do you have anything more you want to share?

Personally confirmed that the following extension redirects fetch("https://example.com/foobar") to data:text/plain,foo:

// manifest.json
{

  "description": "Altering HTTP responses",
  "manifest_version": 2,
  "name": "http-response-filter",
  "version": "1.0",
  "homepage_url": "https://github.com/mdn/webextensions-examples/tree/master/http-response",

  "permissions": [
    "webRequest", "webRequestBlocking", "https://example.com/*"
  ],

  "background": {
    "scripts": ["background.js"]
  },

  "browser_specific_settings": {
    "gecko": {
      "strict_min_version": "57.0a1"
    }
  }

}
// background.js
browser.webRequest.onBeforeRequest.addListener(
  _ => ({redirectUrl: "data:text/plain,foo"}),
  {urls: ["https://example.com/foo*"], types: ["xmlhttprequest"]},
  ["blocking"]
);

MDN metadata

Page report details

• Folder: en-us/mozilla/add-ons/webextensions/api/webrequest/blockingresponse
• MDN URL: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/webRequest/BlockingResponse
• GitHub URL: https://github.com/mdn/content/blob/main/files/en-us/mozilla/add-ons/webextensions/api/webrequest/blockingresponse/index.md
• Last commit: 43e3ff8
• Document last modified: 2024-01-22T01:22:45.000Z