c30c1f1176
Landing fix for bug 402983. Make security checks on file:// URIs symmetric. Patch by dveditz@cruzio.com, r=jonas@sicking.cc,bzbarsky@mit.edu. jst@mozilla.org
2008-03-20 21:39:08 -07:00
1d8a0829d7
Bug 394485: Prevent loading blocklisted urls loaded from <object> tags. r=jonas, sr=biesi, blocking1.9=stuart
2008-03-12 14:52:47 -07:00
fae6ba617c
Bug 413938: Add an nsIWebNavigation flag to let clients bypass malware/phishing detection. r=bz, sr=biesi, a1.9=damons
2008-01-29 15:49:20 -08:00
98049b69e0
Allow certain restricted loads in unload events. Bug 409888, r+sr=jst
2008-01-25 12:31:44 -08:00
ea3fbbec06
Bug 403565. Give each contentviewer it's own device context. r+sr=bzbarsky
2008-01-20 18:05:38 -08:00
70e080b7c8
Fixing bug 392532. Infinite recursion crash when getting scroll chrome flags off of a window at the wrong point in time. r+sr=bzbarsky@mit.edu, a=vladimir@pobox.com
2007-11-11 21:48:24 -08:00
b8a9b11125
Bug 399233 - "Phishing UI hidden by content, inconsistent with malware" [p=johnath r=tony r=biesi ui-r=beltzner a=blocking-firefox3+ for M9]
2007-10-29 11:29:14 -07:00
5ce94b26aa
block document loads for URIs tagged as malware by the url-classifier service. b=384941, r=bzbarsky, r=tony, sr=biesi, ui-r=johnath, a=bzbarsky
2007-08-31 16:18:46 -07:00
8c5748fd0d
Add comment for bug 388579
2007-08-23 18:50:14 -07:00
e6ca8bff0f
Don't allow loads to start in a docshell that's firing the unload event. Alsodon't allow document.open of the document in that docshell. Bug 371360,r=biesi, sr=jst
2007-06-14 11:18:05 -07:00
2705fab00f
Move nsIDocShellTreeItem::childOffset to nsDocShell and remove all uses except internally by nsDocShell (it should be removed eventually). b=376562 r=Olli.Pettay sr=bzbarsky
2007-05-17 20:49:14 -07:00
98cc8977cb
Make nsIDocShellTreeItem inherit from nsIDocShellTreeNode. Bug 377303,r=bsmedberg, sr=biesi
2007-05-06 14:06:28 -07:00
9cf77295e2
Don't make embedding of a content viewer in a child frame force a layout flushon the parent. The child doesn't really care that much about up-to-date layoutinfo at this point; if its size changes it will deal. Bug 379485, r+sr=jst
2007-05-02 13:34:41 -07:00
Olli.Pettay@helsinki.fi
36c9145473
Bug 363067, Add nsPIDOMEventTarget and kill nsIChromeEventHandler, r=jst, sr=sicking
2007-02-15 23:04:33 +00:00
sharparrow1@yahoo.com
376b32f2e8
Bug 370185: clean up view header includes (trivial). rs=bzbarsky.
2007-02-12 19:17:33 +00:00
bzbarsky@mit.edu
0d8e296fb6
Make the redirect check get principals the same way we get them elsewhere.
...
Clean up some code to use the new security manager method. Bug 354693,
r=dveditz, sr=sicking
2006-11-22 18:27:54 +00:00
bzbarsky@mit.edu
6dcca033dc
Improve wording of the postdata dialog. Bug 112848, patch by Magnus Melin
...
<mkmelin+mozilla@iki.fi >, r=darin, sr=bzbarsky
2006-11-07 03:28:50 +00:00
bzbarsky@mit.edu
1401e54c2e
Remove special-casing of about:blank for security purposes; give about:blank
...
pages the principal of whoever is responsible for loading them, when possible.
Bug 332182, r=mrbkap, sr=jst
2006-08-15 17:31:16 +00:00
bzbarsky@mit.edu
7a0b7d586c
Back out the additional patch for bug 305181 to fix bug 346259. r+sr=bryner
2006-07-31 04:04:16 +00:00
marria@gmail.com
675538f475
Bug 241972 (new window opened by window.open('xxx.exe') or target="_blank" isn't closed automatically when a download begins). Fix stores state on the channel indicating whether a window was opened specifically for the download. The external helper app service then closes the window if there is no refresh header and if the window was opened specifically for the download. r=cbiesinger, sr=darin
2006-07-04 20:48:33 +00:00
bzbarsky@mit.edu
6d9dcaa998
Make the documentURI of a document and the currentURI of a docshell immutable objects.
...
Bug 336699, r=darin, sr=jst
2006-05-31 17:57:14 +00:00
jst@mozilla.jstenback.com
f297efc1af
Fixing bug 335540. Implement whatwg webapps storage. Patch by neil@mozilla.com and jst@mozilla.com, r/sr=neil/vlad/jst.
2006-05-19 05:57:36 +00:00
darin@meer.net
0700b87ece
landing patch for bug 326273 "Implement nsIThreadManager" (Mac portions by Mark Mentovai) with reviews from bienvenu, bsmedberg, bzbarsky, josh, roc, and ssieb
2006-05-10 17:30:15 +00:00
bzbarsky@mit.edu
ddb5e4346d
Add an interface for nested URIs (like jar:, view-source:, etc) to implement
...
and use it in various places. Create null principals if asked for a codebase
principal for a codebase that doesn't have an inherent security context (eg
data: or javascript:). Bug 334407, r=biesi,dveditz, sr=darin
2006-05-02 18:54:19 +00:00
roc+@cs.cmu.edu
6831bb6020
Bug 331522. By default, do not allow keyword searches when navigating to URLs; modify browser UI code to enable keyword searches only on selected URL input mechanisms (e.g., typed into the URL bar). r+sr=darin,r=mconnor
2006-04-03 23:17:51 +00:00
bzbarsky@mit.edu
55a92bbc89
Additional tweak to make session history a little safer. Bug 305181, r=bryner, sr=darin
2006-02-23 05:30:25 +00:00
bryner@brianryner.com
5fbad83631
Move the load type constants into nsDocShellLoadTypes.h, for easier reuse outside of docshell. Bug 326706, r+sr=bzbarsky.
2006-02-11 00:17:36 +00:00
bzbarsky@mit.edu
06c870db0e
Move the "force into tab" code out of Gecko and allow embeddors to do the same
...
sort of thing. Bug 323810, r=bsmedberg, sr=jst
2006-02-07 20:46:39 +00:00
brettw@gmail.com
0a1efd3fb7
Bug 326107 r=darin, sr=bzbarsky, branch-1.8.1=darin:
...
Send referrer to GlobalHistory even when it isn't being sent over the network
2006-02-07 02:02:56 +00:00
brettw@gmail.com
dc66702692
Bug 317843 r=darin, sr=bzbarsky: Better redirect tracking for global history.
2006-02-06 20:52:18 +00:00
bryner@brianryner.com
744c4462e5
Add a global limit to the number of cached content viewers that scales with the amount of physical memory. Patch by Marria Nazif <marria@gmail.com>. Bug 292965, r=biesi, sr=me.
2005-09-23 18:16:40 +00:00
cbiesinger@web.de
c8eb0529a3
observe the "browser.xul.error_pages.enabled" pref so that it takes effect
...
immediately
bug 282050 patch by Vidar Braut Haarr <vhaarr+bmo@gmail.com > r=biesi sr=jst
2005-09-22 20:38:56 +00:00
bryner@brianryner.com
b9d5a8d626
Backing out 292965 until Tp regression is understood.
2005-09-14 07:28:05 +00:00
bryner@brianryner.com
50db1f9456
Add a global limit to the number of cached content viewers that scales with the amount of physical memory. Patch by Marria Nazif <marria@gmail.com>. Bug 292965, r=biesi, sr=me.
2005-09-14 03:38:40 +00:00
bryner@brianryner.com
27d3f22080
If we created a transient about:blank content viewer, make sure we're locating the root view sibling for that viewer and not the viewer it's replacing. Bug 300533, r=cbiesinger.
2005-08-24 17:27:41 +00:00
mrbkap@gmail.com
eb6fe44d1c
bug 305236: Don't store the current document in the bfcache if we're going to reuse the current inner window for another page. In this case, the current document never was making it into session history anyway. r=bryner sr=jst
2005-08-23 00:24:57 +00:00
darin@meer.net
a25f38f889
fixes bug 301358 "HTTP 'refresh' doesn't load page with bfcache enabled" r=biesi sr=bryner a=bsmedberg
2005-08-11 20:14:00 +00:00
bryner@brianryner.com
c30b337f96
When navigating a subframe, make sure that all docshells have navigated to the correct cloned session history entry. Bug 301397, r=darin, a=bsmedberg
2005-08-03 22:32:10 +00:00
bryner@brianryner.com
51c4a46a3b
When restoring a presentation, move everything except adding the request to the loadgroup into the async plevent callback. This fixes the problem with restoring window properties when history.back() is used (with untrusted JS on the stack). Bug 301516, r=darin, a=asa
2005-08-02 18:35:07 +00:00
cbiesinger@web.de
df4351d75c
Bug 286811 don't add ("xul") error pages to global history
...
r=bz sr=darin a=bsmedberg
2005-07-27 12:38:38 +00:00
bryner@brianryner.com
5c2c1b2bd6
Fix stuck designMode when using fastback by making sure the DOM window still contains the old document when the STATE_START notification is sent. Bug 300411, r+sr=darin, a=asa.
2005-07-14 16:24:32 +00:00
dveditz@cruzio.com
d4c665cec3
bug 298255: prevent browser screwiness caused by lazy extension authors loading their chrome extension in a content window instead of adding the -chrome commandline option. r=mconnor, sr=jst, a=chofmann
2005-07-07 09:45:47 +00:00
bryner@brianryner.com
5c73708143
Fix pending-loads check for fastback so that we detect loads initiated either before or after Stop() is called. Fix assert on reload. Fix problem where the wrong load type was being checked in CanSavePresentation(). Fix problem where we cached a content viewer on the current history entry when it was equal to the new history entry. Bugs 292954 and 292950. r+sr=darin, a=asa.
2005-06-24 20:53:43 +00:00
bryner@brianryner.com
9d9b2e7a47
Add support for caching content viewers in session history to speed up back/forward (bug 274784). This initial landing has the feature disabled by default; set browser.sessionhistory.max_viewers to the maximum number of pages to cache to enable the feature. r=bzbarsky, sr/a=brendan.
2005-05-04 20:22:32 +00:00
bzbarsky@mit.edu
851dba3251
Move processing of various headers from the content sink into the document so
...
it'll happen for all of our document types. Bug 288921, r+sr=jst
2005-04-05 03:28:54 +00:00
bzbarsky@mit.edu
b7e4c92230
Don't fire onLocationChange for initial loads in subframes; reverts old
...
behavior. Bug 285738, patch by William A. Gianopoulos
<wgianopoulos@yahoo.com >, r=jst, sr=bzbarsky
2005-03-30 04:22:00 +00:00
jst@mozilla.jstenback.com
8a1494191f
Fixing bug 284993. Make sure the new content viewer is properly initialized before fireing location changed notifications. r=bzbarsky@mit.edu, sr=darin@meer.net
2005-03-09 14:31:02 +00:00
bzbarsky@mit.edu
b4fc1cf29b
Docshell doesn't need to hold a pointer to the scriptcontext; the window does
...
it. Bug 282807, r+sr=jst
2005-02-20 17:02:02 +00:00
bzbarsky@mit.edu
ab29d7c72d
Make sure that we have an mParentContentListener at all times in docshell. Bug
...
282644, r=biesi, sr=jst
2005-02-18 18:20:42 +00:00
cbiesinger@web.de
8282fdc8f1
157004 don't fire onLocationChange for error pages, and don't change the
...
docshell's currentURI either. be sure to add the failed URL to session history.
r=bz sr=darin
2005-01-31 11:26:31 +00:00
