Gijs Kruitbosch
153cb32c6a
Bug 1356193 - rename securityFlags local variable for code clarity reasons, r=ckerschb
...
MozReview-Commit-ID: DmU4ORvXHNY
2017-04-13 11:36:18 +01:00
Ehsan Akhgari
3677a91998
Bug 1316683 - Part 5: Avoid going into SpiderMonkey for retrieving origin attributes; r=baku
...
Our caller is C++ code, and the implementations are all also written in C++,
so there is no reason to go through SpiderMonkey here. This patch also makes
nsILoadContext builtinclass to ensure that the implementation is always native.
2017-04-12 11:32:19 -04:00
Frederik Braun
635d978f3b
Bug 1349517 - Don't set CSP on NullPrincipal if it already has one. r=ckerschb
...
MozReview-Commit-ID: EKqDr7RxjWE
2017-03-23 13:21:13 +01:00
Gijs Kruitbosch
39a68a5d8e
Bug 1352513 - re-add the hidden window exception behind a pref, r=bholley
...
MozReview-Commit-ID: 3q1CZ5QCuus
2017-04-03 11:47:22 +01:00
Gijs Kruitbosch
215e4a28e8
Bug 1145470 - remove hiddenWindow specialcasing from CheckLoadURI code, r=bholley
...
All the consumers relying on this have disappeared, so we can (finally!) get
rid of this ugly bit of special-casing.
MozReview-Commit-ID: HSeeG21O0p4
2017-03-30 11:16:17 +01:00
Sebastian Hengst
0d2a67d216
Backed out changeset ef22dba0dac5 (bug 1316683) for various test failures, e.g. xpcshell netwerk/test/unit/test_bug826063.js and browser-chrome browser/components/downloads/test/browser/browser_iframe_gone_mid_download.js. r=backout on a CLOSED TREE
2017-03-22 20:28:39 +01:00
Ehsan Akhgari
debca5c728
Bug 1316683 - Avoid going into SpiderMonkey for retrieving origin attributes; r=baku
...
Our caller is C++ code, and the implementations are all also written in C++,
so there is no reason to go through SpiderMonkey here. This patch also makes
nsILoadContext builtinclass to ensure that the implementation is always native.
2017-03-22 14:13:31 -04:00
Sebastian Hengst
8967ddbcb0
Backed out changeset 7e47807067a6 (bug 1316683) for Windows bustage. r=backout
2017-03-22 15:15:27 +01:00
Ehsan Akhgari
ad90c59aa6
Bug 1316683 - Avoid going into SpiderMonkey for retrieving origin attributes; r=baku
...
Our caller is C++ code, and the implementations are all also written in C++,
so there is no reason to go through SpiderMonkey here. This patch also makes
nsILoadContext builtinclass to ensure that the implementation is always native.
2017-03-22 10:03:26 -04:00
Andrea Marchesini
a04ab116f5
Bug 1343933 - Renaming Principal classes - part 4 - ContentPrincipal, r=qdot
2017-03-22 11:39:31 +01:00
Andrea Marchesini
0f1949cb1d
Bug 1343933 - Renaming Principal classes - part 3 - SystemPrincipal, r=qdot
2017-03-22 11:39:08 +01:00
Andrea Marchesini
8f5f953fba
Bug 1343933 - Renaming Principal classes - part 2 - NullPrincipal, r=qdot
2017-03-22 11:38:40 +01:00
Frederik Braun
a38c858943
Bug 1073952: proper indentation for nsScriptSecurityManager::GetChannelResultPrincipal r=Tomcat
...
MozReview-Commit-ID: 84qywpARPwI
2017-01-30 14:13:13 +01:00
Frederik Braun
8cf7f95796
Bug 1073952: inherit CSP into iframe sandbox srcdoc r=ckerschb,Tomcat
...
MozReview-Commit-ID: 3fhWCGwgG4A
2017-01-30 14:09:37 +01:00
Andrea Marchesini
313424057b
Bug 1345168 - Get rid of OriginAttributes::Inherit, r=tjr
2017-03-08 07:41:51 +01:00
Carsten "Tomcat" Book
708777dd78
merge mozilla-inbound to mozilla-central a=merge
2017-03-07 15:13:31 +01:00
Ehsan Akhgari
9212df9651
Bug 1340710 - Part 6: Store BasePrincipal::{mOriginNoSuffix,mOriginSuffix} as a pair of atoms; r=bholley
...
This has the nice side effect of making nsIPrincipal::GetOrigin() a bit faster
by avoiding computing the origin each time.
2017-03-06 22:27:53 -05:00
David Major
b1e362f6f7
Bug 1344615: Remove nsXPCOMStrings.{h,cpp} r=bsmedberg
...
These are now dead code.
MozReview-Commit-ID: AClU0Qx3kmN
2017-03-06 17:52:54 +13:00
Kris Maglione
418e10ee90
Bug 1314361 - Part 4: Stop setting addonId origin attribute. r=billm
2016-11-04 18:22:45 -07:00
Olli Pettay
8f054dfb40
Bug 1339213 - Inline IsRestrictOpenerAccessForFPI, r=tihuang
2017-02-14 13:45:35 +02:00
Gijs Kruitbosch
e3d2686391
Bug 1335272 - fix about:cache internal links, r=bz
...
MozReview-Commit-ID: QzgsTTulJC
2017-02-02 15:10:11 +00:00
Boris Zbarsky
15a4aeade0
Bug 1335311. Remove the file:/resource: special case in CheckLoadURIFromScript. r=bholley
2017-02-01 15:29:45 -05:00
Ehsan Akhgari
ceee3ed00a
Bug 1335526 - Ensure that sandboxed channel's result principal is unique; r=bzbarsky
2017-02-01 13:47:26 -05:00
Sebastian Hengst
2ede20914a
Backed out changeset a273aee1be72 (bug 1335526) for bustage. r=backout
2017-02-01 17:41:29 +01:00
Ehsan Akhgari
a5b0e6d4a5
Bug 1335526 - Ensure that sandboxed channel's result principal is unique; r=bzbarsky
2017-02-01 11:24:49 -05:00
Andrea Marchesini
46a9207d60
Bug 1328653 - Merging all the various *OriginAttributes to just one, r=huseby
2017-01-12 17:38:48 +01:00
Jean-Luc Bonnafoux
f14cfb9886
Bug 1322146 - initialize mFlags variable in constructor. r=dveditz
2016-12-19 12:56:23 +01:00
Gijs Kruitbosch
5da6c860dc
Bug 1318664 - fix about pages linking to themselves with query parameters, r=bz
...
MozReview-Commit-ID: Dsqj0L4aIlv
2016-11-23 18:26:44 +00:00
Dragana Damjanovic
e4c246fda6
Bug 1317641 - Some loadinfo security flags should not apply in case of a redirect. r=bz
2016-11-23 17:54:58 -05:00
Ehsan Akhgari
3c90e541e0
Bug 1318210 - Remove nsIAppsService; r=baku
2016-11-17 10:41:36 -05:00
Ehsan Akhgari
245916c3cc
Bug 1318209 - Remove mozIApplication; r=baku
2016-11-17 10:12:43 -05:00
Gijs Kruitbosch
d1f846a970
Bug 1309310, r=bz
...
MozReview-Commit-ID: KLaMv6zfxR8
2016-11-09 18:25:11 +00:00
Christoph Kerschbaumer
304a72b87f
Bug 1308889 - Try to explicitly pass aTriggeringPrincipal and aPrincipalToInherit to DoURILoad(). r=bz
2016-11-08 07:23:12 +01:00
Dave Huseby
5431eeef89
Bug 1189086 - Eliminate nsIPrincipal::jarPrefix. r=dveditz
2016-10-24 13:52:00 +02:00
Tom Tromey
fad2c810d6
Bug 553032 - use MOZ_FORMAT_PRINTF in js; r=evilpie
...
MozReview-Commit-ID: DD3DJRkOxmC
2016-10-11 12:44:40 -06:00
Sebastian Hengst
ac4e31ada2
Backed out changeset 2bfd163f23f9 (bug 553032)
2016-10-19 18:29:36 +02:00
Tom Tromey
371584f1db
Bug 553032 - use MOZ_FORMAT_PRINTF in js; r=evilpie
...
MozReview-Commit-ID: DD3DJRkOxmC
2016-10-11 12:44:40 -06:00
Christoph Kerschbaumer
75f4b7cfca
Bug 1305012 - Downgrade a new channel's principal to NullPrincipal. r=smaug
2016-10-05 21:19:51 +02:00
Cameron McCormack
6cb613ea54
Bug 1300720 - Part 2: Lazily initialize nsScriptSecurityManager::mFileURIWhitelist. r=bholley
...
MozReview-Commit-ID: 8cqHUlOnsEH
2016-10-03 12:43:17 +08:00
Olli Pettay
8f6bc77921
Bug 1306300, null check nsILoadContext in GetLoadContextCodebasePrincipal, r=baku
2016-09-29 20:31:50 +03:00
Gijs Kruitbosch
671c563976
Bug 1290668 - unbreak view-source links between http and https pages, r=smaug
...
MozReview-Commit-ID: B4nXTkMC5LE
2016-09-27 13:31:53 +01:00
Tooru Fujisawa
e2afbe3471
Bug 1289050 - Part 2: Use ASCII or Latin1 variants of JS_ReportError in not-simple cases. r=jwalden
2016-08-15 19:20:01 +09:00
Ehsan Akhgari
0a2b381a4b
Bug 1297687 - Part 1: Remove nsIScriptSecurityManager.createExpandedPrincipal(); r=bholley
2016-09-22 13:27:33 -04:00
Christoph Kerschbaumer
33bcdc34ea
Bug 1297338 - Introduce concept of principalToInherit to docshell and scriptSecurityManager. r=bz
2016-09-20 08:36:25 +02:00
Yoshi Huang
c346f0771b
Bug 1260931 - Part 3: Propagate firstPartyDomain. r=smaug
2016-09-06 10:25:58 +08:00
Sebastian Hengst
0d9509f866
Backed out changeset b9afda2804fd (bug 1260931)
2016-09-05 21:15:29 +02:00
Yoshi Huang
f1abf881e7
Bug 1260931 - Part 3: Propagate firstPartyDomain. r=smaug
2016-09-06 01:50:30 +08:00
Wes Kocher
86da21f7ac
Backed out changeset 1e7eb0625d3e (bug 1297687) a=merge
2016-09-02 13:18:37 -07:00
Sebastian Hengst
cdc0721c8b
Backed out changeset 10da0eca7bbb (bug 1260931)
2016-09-02 15:33:51 +02:00
Sebastian Hengst
56d09d1e93
Backed out 5 changesets (bug 1260931)
...
Backed out changeset 86e1a437021b (bug 1260931)
Backed out changeset be65e87da9e3 (bug 1260931)
Backed out changeset 39cff1d988fd (bug 1260931)
Backed out changeset 2fa7c4d8a5bc (bug 1260931)
Backed out changeset 075d612841fb (bug 1260931)
2016-09-02 14:55:59 +02:00