Commit Graph

231 Commits

Author SHA1 Message Date
Otto Länd
c5be1b69e4 Bug 1940273: apply code formatting via Lando
# ignore-this-changeset
2025-02-05 18:10:43 +00:00
Tom Schuster
28bf5f5c82 Bug 1940273 - Enforce a baseline default-src policy for chrome: pages. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D235988
2025-02-05 15:41:12 +00:00
Tom Schuster
553e25ffcf Bug 1940273 - Assert that all loaded chrome: documents have some CSP. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D235302
2025-02-05 15:41:11 +00:00
Tom Schuster
48c5102a90 Bug 1895770 - Improve the verification of the CSP in about: pages. r=tjr,freddyb,search-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D234484
2025-01-27 08:29:25 +00:00
Florian Quèze
9609e47f62 Bug 1879329 - script generated replacement of the GleanMetrics.h includes, r=chutten,valentin,media-playback-reviewers,cookie-reviewers,anti-tracking-reviewers,profiler-reviewers,win-reviewers,rkraesig,emz,aabh,padenot.
Differential Revision: https://phabricator.services.mozilla.com/D234744
2025-01-21 11:21:45 +00:00
Tom Schuster
d08768471e Bug 1941322 - Improve the classification of userChromeJS files for telemetry. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D234021
2025-01-13 13:44:48 +00:00
Tom Schuster
45de9c96a1 Bug 1940941 - Detect more likely userChromeJS instances for telemetry. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D233833
2025-01-10 14:31:28 +00:00
Tooru Fujisawa
23708bdf1b Bug 1934072 - Remove outdated allowlist for about:sync addon. r=tschuster
Differential Revision: https://phabricator.services.mozilla.com/D230581
2024-12-02 08:42:01 +00:00
Adi
20c01e8bd9 Backed out changeset 816825f333b7 (bug 1909110) for causing bc failures @ browser_bug575561.js. CLOSED TREE 2024-10-29 16:27:31 +02:00
Tom Schuster
89f6452c39 Bug 1909110 - Apply CSP to media that would be loaded as a MediaDocument. r=necko-reviewers,nika,freddyb
Differential Revision: https://phabricator.services.mozilla.com/D221326
2024-10-29 13:05:25 +00:00
serge-sans-paille
262f78c07f Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
Namely std::size, std::end and std::size. This drops C support for
MOZ_ARRAY_LENGTH but it wasn't used anyway.

Differential Revision: https://phabricator.services.mozilla.com/D224611
2024-10-28 08:21:19 +00:00
Alexandru Marc
a5eb905bf4 Backed out changeset d92f391b3b0c (bug 1922838) for backing out bug 1915351 2024-10-25 16:42:33 +03:00
serge-sans-paille
07101ac24d Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
Namely std::size, std::end and std::size. This drops C support for
MOZ_ARRAY_LENGTH but it wasn't used anyway.

Differential Revision: https://phabricator.services.mozilla.com/D224611
2024-10-24 09:06:01 +00:00
Alexandru Marc
004e704b22 Backed out changeset 448597bce69d (bug 1922838) for causing build bustages. CLOSED TREE 2024-10-24 11:37:49 +03:00
serge-sans-paille
2c916d4973 Bug 1922838 - Replace ArrayLength, ArrayEnd and MOZ_ARRAY_LENGTH by standard alternative r=glandium,necko-reviewers,jgilbert,application-update-reviewers,media-playback-reviewers,credential-management-reviewers,anti-tracking-reviewers,places-reviewers,profiler-reviewers,win-reviewers,dom-storage-reviewers,bytesized,janv,dimi,daisuke,karlt,gstoll,canaltinova,timhuang
Namely std::size, std::end and std::size. This drops C support for
MOZ_ARRAY_LENGTH but it wasn't used anyway.

Differential Revision: https://phabricator.services.mozilla.com/D224611
2024-10-24 07:38:30 +00:00
Simon Friedberger
413c6ce68e Bug 1780575 - Stop sending autoadmin.global_config.url to content process r=tjr
Differential Revision: https://phabricator.services.mozilla.com/D225933
2024-10-21 16:35:07 +00:00
Chris H-C
2e43bfd712 Bug 1920562 - Remove C++ Telemetry::SetEventRecordingEnabled r=florian,necko-reviewers,valentin
We leave the network.trr.confirmation_telemetry_enabled pref intact because
removing it causes failures in test_prefs_tracker.js

Differential Revision: https://phabricator.services.mozilla.com/D223832
2024-10-08 20:14:41 +00:00
Sandor Molnar
92076e16a7 Backed out 5 changesets (bug 1920562) for causing xpc assertion failures. CLOSED TREE
Backed out changeset 8f085ab589a8 (bug 1920562)
Backed out changeset 4405387ae770 (bug 1920562)
Backed out changeset a68fd13a33ae (bug 1920562)
Backed out changeset cd3672fc08ed (bug 1920562)
Backed out changeset 62ab18879eea (bug 1920562)
2024-10-08 00:16:13 +03:00
Chris H-C
a1dab7d33b Bug 1920562 - Remove C++ Telemetry::SetEventRecordingEnabled r=florian,necko-reviewers,valentin
Differential Revision: https://phabricator.services.mozilla.com/D223832
2024-10-07 17:29:56 +00:00
Chris H-C
8e478095f7 Bug 1918226 - Use Glean APIs for security.javascriptLoad#parentProcess r=tjr
Differential Revision: https://phabricator.services.mozilla.com/D221492
2024-09-20 18:43:01 +00:00
Chris H-C
91ffb29ded Bug 1918226 - Use Glean APIs for security.evalUsage* events r=tjr
Differential Revision: https://phabricator.services.mozilla.com/D221491
2024-09-20 18:42:59 +00:00
Florian Quèze
60d4ca3d45 Bug 1913624 - Remove expired telemetry histogram MIXED_CONTENT_DOWNLOADS, r=TravisLong.
Depends on D219472

Differential Revision: https://phabricator.services.mozilla.com/D219473
2024-08-20 20:56:50 +00:00
Emilio Cobos Álvarez
2023ae8f38 Bug 1910698 - Fix a base-toolchains-clang build warning.
MANUAL PUSH: bustage fix CLOSED TREE
2024-08-02 01:32:44 +02:00
Emilio Cobos Álvarez
77c40caac6 Bug 1910698 - Remove nsIScriptError.sourceLine. r=smaug,devtools-reviewers,webdriver-reviewers,necko-reviewers,nchevobbe,kershaw,jdescottes,credential-management-reviewers,dimi
Afaict the source lines are not exposed anywhere in the UI.

Differential Revision: https://phabricator.services.mozilla.com/D218115
2024-08-01 17:12:48 +00:00
Emilio Cobos Álvarez
a44b49af0b Bug 1910698 - Add a struct to represent JS caller location and more general warning source location. r=smaug,necko-reviewers,anti-tracking-reviewers,dom-storage-reviewers,pbz,kershaw,janv
Use it liberally across the tree. This could be cleaned up even more in the future.

Differential Revision: https://phabricator.services.mozilla.com/D218114
2024-08-01 17:12:48 +00:00
Tom Schuster
feaa0c77a1 Bug 1904004 - Use OriginAttributes::IsPrivateBrowsing instead of open coding PBM checks. r=timhuang,cookie-reviewers,anti-tracking-reviewers,profiler-reviewers,necko-reviewers,kershaw,dom-storage-reviewers,janv,canaltinova,dom-worker-reviewers,asuth
Differential Revision: https://phabricator.services.mozilla.com/D214532
2024-06-24 11:06:18 +00:00
Otto Länd
4717dfca8f Bug 1894958: apply code formatting via Lando
# ignore-this-changeset
2024-06-05 02:07:47 +00:00
Tom Ritter
f93a3cdd76 Bug 1894958: Let's name this page more accurately r=timhuang
The purpose of this page is to improve the fingerprinting protections
in Firefox.

Differential Revision: https://phabricator.services.mozilla.com/D209599
2024-06-05 02:04:40 +00:00
Cosmin Sabou
3c630af9e8 Backed out 7 changesets (bug 1894958) for causing bc failures on browser_usercharacteristics_gamepads. CLOSED TREE
Backed out changeset 2d6a773b1cfe (bug 1894958)
Backed out changeset 64fa5abd15b1 (bug 1894958)
Backed out changeset 73017dc41a54 (bug 1894958)
Backed out changeset 99498fc1e89c (bug 1894958)
Backed out changeset 4ef86875b1c2 (bug 1894958)
Backed out changeset 31e1c5284927 (bug 1894958)
Backed out changeset 29545556fe0b (bug 1894958)
2024-06-05 01:20:05 +03:00
Otto Länd
ef60353df7 Bug 1894958: apply code formatting via Lando
# ignore-this-changeset
2024-06-04 21:27:07 +00:00
Tom Ritter
062bb3031b Bug 1894958: Let's name this page more accurately r=timhuang
The purpose of this page is to improve the fingerprinting protections
in Firefox.

Differential Revision: https://phabricator.services.mozilla.com/D209599
2024-06-04 21:24:00 +00:00
Sandor Molnar
11a9a222e0 Backed out 7 changesets (bug 1894958) for causing bc failures @ browser_usercharacteristics.js CLOSED TREE
Backed out changeset f0b3873afbbf (bug 1894958)
Backed out changeset 0163ab00de90 (bug 1894958)
Backed out changeset dc5209d0115f (bug 1894958)
Backed out changeset c7c58e406791 (bug 1894958)
Backed out changeset 1ff86ac5480e (bug 1894958)
Backed out changeset 862f163cf35c (bug 1894958)
Backed out changeset 4ad50fcd042b (bug 1894958)
2024-06-05 00:07:37 +03:00
Otto Länd
c61cfd1135 Bug 1894958: apply code formatting via Lando
# ignore-this-changeset
2024-06-04 20:05:36 +00:00
Tom Ritter
e2fdb0958d Bug 1894958: Let's name this page more accurately r=timhuang
The purpose of this page is to improve the fingerprinting protections
in Firefox.

Differential Revision: https://phabricator.services.mozilla.com/D209599
2024-06-04 20:02:26 +00:00
Iulian Moraru
c64a50cbfb Backed out changeset 98ca2e132b06 (bug 1895935) for causing multiple failures. CLOSED TREE 2024-05-20 19:38:29 +03:00
Tom Ritter
f05896bcab Bug 1895935: Enable eval telemetry on mobile, crash in debug builds, but do not block in any channel r=freddyb,geckoview-reviewers,tthibaud
Differential Revision: https://phabricator.services.mozilla.com/D209939
2024-05-20 15:09:25 +00:00
Sebastian Hengst
ec02da26f3 Backed out changeset 20b5e4b2f448 (bug 1877195) for breaking HTTP downloads (bug 1892069) 2024-04-18 17:20:00 +02:00
Emilio Cobos Álvarez
de09ab0dd6 Bug 1887719 - More consistently use UTF8String/nsCString for URLs. r=necko-reviewers,webidl,anti-tracking-reviewers,places-reviewers,jari,kershaw,janv,smaug,hsivonen
Sorry for the massive patch but I found it hard to split without
introducing a bunch of copies around...

This mostly makes necko and DOM agree on which strings to use, which
should result on less copies and conversions.

Differential Revision: https://phabricator.services.mozilla.com/D205601
2024-04-04 11:49:57 +00:00
Tom Ritter
da696aca73 Bug 1882422: Use a local testing page to return complex data and make use of it in C++-land r=peterv
- Create a local page we will access via an about: URL
- In that page, demonstrate how to do some stuff, then fire a custom event
  indicating its stuff is done _and_ return complex data in that event.
  console.log() didn't seem to be visible in the HiddenWindow, so I also
  piped out debug strings for development purposes, so they can be
  console.logged in the Service, where we can see them.
- Instead of listening for DOMContentLoaded/pageshow, instead listen for
  the new CustomEvent.
- In UserCharacteristicsPageService, receive the data from the page and
  populate the appropriate Glean metrics
- Refactor the calling of nsUserCharacteristics::PopulateData() and
  SubmitPing().  Now we call PopulateDataAndEventuallySubmit() which will
  eventually call SubmitPing after our promise is resolved.
- To make it a little cleaner (so ContentPageStuff() isn't calling
  SubmitPing()) we return the promise out of ContentPageStuff() that
  PopulateDataAndEventuallySubmit() will await and then call SubmitPing()
  when that promise resolves

Differential Revision: https://phabricator.services.mozilla.com/D203055
2024-04-03 23:43:17 +00:00
Christoph Kerschbaumer
2bc2cff698 Bug 1877195: Expand mixed-content download protection to all http downloads, r=freddyb,Gijs,anti-tracking-reviewers,pbz
Differential Revision: https://phabricator.services.mozilla.com/D200267
2024-03-04 15:18:23 +00:00
Cosmin Sabou
f9ff487c03 Backed out changeset a89ec49d7645 (bug 1877195) for causing wpt failures on iframe_sandbox_window_open_download_allow_downloads. CLOSED TREE 2024-03-04 16:24:27 +02:00
Christoph Kerschbaumer
967443a323 Bug 1877195: Expand mixed-content download protection to all http downloads, r=freddyb,Gijs,anti-tracking-reviewers,pbz
Differential Revision: https://phabricator.services.mozilla.com/D200267
2024-03-04 10:03:18 +00:00
Iulian Moraru
1deb674078 Backed out changeset 81bb704a27a1 (bug 1877195) for causing wpt failures on iframe_sandbox_navigation_download_allow_downloads.sub.tentative.html. CLOSED TREE 2024-03-01 18:46:45 +02:00
Christoph Kerschbaumer
b001dbde19 Bug 1877195: Expand mixed-content download protection to all http downloads, r=freddyb,Gijs,anti-tracking-reviewers,pbz
Differential Revision: https://phabricator.services.mozilla.com/D200267
2024-03-01 13:04:39 +00:00
Bojidar Marinov
a02f6a1df5 Bug 1839845 - Add about:settings as alias of about:preferences. r=Gijs,settings-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D202594
2024-02-29 10:09:58 +00:00
Nick Alexander
db10a9fa60 Bug 1878784 - Allow about:asrouter to use script-src. r=ckerschb,mconley
There are three exceptions made for `about:newtab`; this updates the
first exception.  It does not appear that the `about:asrouter` CSP
includes a web scheme, so the second exception in the file is not
needed; nor does it appear that `about:asrouter` require
`unsafe-inline`, so the third exception in the file is not needed.

Differential Revision: https://phabricator.services.mozilla.com/D200733
2024-02-06 14:04:27 +00:00
Tooru Fujisawa
3db460c264 Bug 1878457 - Part 1: ESMify performance-new modules. r=julienw,profiler-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D200558
2024-02-05 23:23:32 +00:00
Tom Schuster
940baabb7a Bug 1397308 - Implement CSP 'Is element nonceable?' check. r=emilio,hsivonen,freddyb
Differential Revision: https://phabricator.services.mozilla.com/D198150
2024-01-26 14:56:32 +00:00
Tom Schuster
694c3e8534 Bug 1872839 - Remove aMimeTypeGuess parameter from nsIContentPolicy. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D197794
2024-01-08 15:47:42 +00:00
Tooru Fujisawa
54afb846fb Bug 1864168 - Part 2: Use 1-origin column number in nsJSUtils::GetCallingLocation. r=smaug,anti-tracking-reviewers,devtools-reviewers,ochameau,pbz
nsJSUtils::GetCallingLocation is used mostly for console message and logging,
except for the following:
  * profiler label in TimeoutHandler
  * CC log for TimeoutHandler
  * events in nsIConsoleAPIStorage
  * JSON used by mozilla::dom::SendReports

Differential Revision: https://phabricator.services.mozilla.com/D193370
2023-11-22 12:31:31 +00:00