Bug 1233497 - Disallow unsafe CPOWs in browser code. r=mrbkap.

--HG--
extra : commitid : 2sUjSTv5XJT
extra : rebase_source : cb6a85709fd61385d95d17896f1e376f1f871478

browser/app/profile/firefox.js

@@ -1589,6 +1589,9 @@ pref("browser.defaultbrowser.notificationbar", false);
 // the hang monitor.
 pref("dom.ipc.cpow.timeout", 500);
 
+// Causes access on unsafe CPOWs from browser code to throw by default.
+pref("dom.ipc.cpows.forbid-unsafe-from-browser", true);
+
 // Enable e10s hang monitoring (slow script checking and plugin hang
 // detection).
 pref("dom.ipc.processHangMonitor", true);