Commit Graph

4 Commits

Author SHA1 Message Date
Tom Ritter
5660579449 Bug 1440195 For timestamps that are absolute, specify a null context pointer r=baku
Note that by not using the same context pointer for all timestamps within a single
'communication group' (that is, all things that can communication to each other
in JavaScript), it's possible to observe time going backwards.

Imagine comparing
  performance.timeOrigin + performance.now() < new File([], "").lastModified

In theory this should always be true. However, if performance.now() was jittered
up (using one context pointer, because it is a relative timestamp) and File was
jittered down (using a null context pointer, because it is an absolute timestamp)
then this may evaluate to False.

I think this is okay.

MozReview-Commit-ID: BfgbmGS8XdD
2018-02-28 15:37:26 -06:00
Andrea Marchesini
74bc0e9cfd Bug 1404845 - Renaming BlobImpl::GetInternalStream to BlobImpl::CreateInputStream, r=smaug 2017-10-02 13:53:12 +02:00
Jonathan Hao
fd3d68110a Bug 1217238 - Reduce time precision when privacy.resistFingerprinting is on. r=mystor
This patch is adapted from Tor bug 1517.

To offer some protection against timing attacks by JS content pages, in this
patch we round the various time-exposing APIs (such as Date and
Event.timeStamps) to the nearest 100 ms when the pref "privacy.resistFingerprinting" is on.

MozReview-Commit-ID: eGucM9nGTn
2017-06-06 11:45:14 +08:00
Andrea Marchesini
c048b4585c Bug 1339871 - Splitting dom/file/File.{h,cpp}, r=smaug 2017-02-16 18:26:38 +01:00