Commit Graph

220 Commits

Author SHA1 Message Date
Mirko Brodesser
2255b306c3 Bug 1893996: part 1) Rename getViolatedDirectiveInformation's arguments. r=tschuster
Clearer.

Differential Revision: https://phabricator.services.mozilla.com/D208890
2024-05-06 09:10:30 +00:00
Mirko Brodesser
38c71c133c Bug 1890277: part 5) Rename nsCSPTrustedTypesDirectiveExpression to nsCSPTrustedTypesDirectivePolicyName. r=tschuster
See the following parts for why that's done.

Differential Revision: https://phabricator.services.mozilla.com/D208908
2024-05-06 08:21:06 +00:00
Mirko Brodesser
871f19fd7a Bug 1890277: part 4) Add CSPParser support for the trusted-types directive, guarded behind the Trusted Types pref. r=tschuster,webidl,smaug
Differential Revision: https://phabricator.services.mozilla.com/D207274
2024-04-26 07:38:21 +00:00
Aron Cseh
a7a22c6623 Backed out 2 changesets (bug 1890277) for causing mochitest failures on browser_misused_characters_in_strings.js CLOSED TREE
Backed out changeset 2a4787f8a69b (bug 1890277)
Backed out changeset 0f7758a42dbd (bug 1890277)
2024-04-25 18:03:40 +03:00
Mirko Brodesser
59c22b11ca Bug 1890277: part 4) Add CSPParser support for the trusted-types directive, guarded behind the Trusted Types pref. r=tschuster,webidl,smaug
Differential Revision: https://phabricator.services.mozilla.com/D207274
2024-04-25 13:59:56 +00:00
Mirko Brodesser
8fe5df1d25 Bug 1890277: part 2) Add require-trusted-types-for directive to CSP parser, guarded behind the Trusted Types pref. r=tschuster,webidl,smaug
Differential Revision: https://phabricator.services.mozilla.com/D206998
2024-04-18 07:51:14 +00:00
Tamas Szentpeteri
f37778dc72 Backed out 2 changesets (bug 1890277) for causing mochitest failures in csp.properties. CLOSED TREE
Backed out changeset 0434b6d79459 (bug 1890277)
Backed out changeset 2e4a028c156f (bug 1890277)
2024-04-17 18:19:33 +03:00
Mirko Brodesser
cb7397c2d4 Bug 1890277: part 2) Add require-trusted-types-for directive to CSP parser, guarded behind the Trusted Types pref. r=tschuster,webidl,smaug
Differential Revision: https://phabricator.services.mozilla.com/D206998
2024-04-17 12:24:18 +00:00
Tamas Szentpeteri
1d5d1ce880 Backed out 2 changesets (bug 1890277) for causing build bustages in nsCSPParser.cpp and mochitest failures in csp.properties. CLOSED TREE
Backed out changeset a2f1117a5422 (bug 1890277)
Backed out changeset 2ac938a72185 (bug 1890277)
2024-04-17 13:46:54 +03:00
Mirko Brodesser
1dcaab1ea0 Bug 1890277: part 2) Add require-trusted-types-for directive to CSP parser, guarded behind the Trusted Types pref. r=tschuster,webidl,smaug
Differential Revision: https://phabricator.services.mozilla.com/D206998
2024-04-17 09:39:54 +00:00
Tom Schuster
a5fd222c6c Bug 1848315 - CSP: Provide the whole violated directive as a string. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D186142
2024-03-11 14:26:46 +00:00
Iulian Moraru
ef2ce63aea Backed out 4 changesets (bug 1848315) for causing multiple failures. CLOSED TREE
Backed out changeset b921bb1aee11 (bug 1848315)
Backed out changeset 0872a066e6fd (bug 1848315)
Backed out changeset 028e9468f0a3 (bug 1848315)
Backed out changeset b57c4274e7ab (bug 1848315)
2024-03-01 14:16:44 +02:00
Tom Schuster
d167d11fe4 Bug 1848315 - CSP: Provide the whole violated directive as a string. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D186142
2024-03-01 10:59:10 +00:00
Sandor Molnar
30986017eb Backed out 4 changesets (bug 1848315) for causing browser_webconsole_csp_violation CLOSED TREE
Backed out changeset 7ef3e9f17105 (bug 1848315)
Backed out changeset 722163aa402f (bug 1848315)
Backed out changeset 2e823f3a6f99 (bug 1848315)
Backed out changeset 17f05d5f385d (bug 1848315)
2024-02-28 16:49:51 +02:00
Tom Schuster
7a07b29c52 Bug 1848315 - CSP: Provide the whole violated directive as a string. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D186142
2024-02-28 13:54:53 +00:00
Oliver Medhurst
9606978d1a Bug 1793560 - Remove navigate-to CSP directive r=tschuster
It has never shipped after being implemented years ago,
and was removed from spec in September 2022:
https://github.com/w3c/webappsec-csp/pull/564

Now skipping navigate-to WPT tests. Filed issue upstream for their future removal:
https://github.com/w3c/webappsec-csp/issues/608
Consensus seems to agree to remove, will do in follow up bug once landed.

Also removed our own tests.

Added a hack in StartDocumentLoad as just removing the navigate-to check call
breaks some inhertiance, see comment for more info.

Differential Revision: https://phabricator.services.mozilla.com/D181630
2024-01-03 16:43:12 +00:00
Tom Schuster
8c59b83f3a Bug 1867759 - Remove CSP feature rollout prefs. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D195227
2023-12-01 16:29:00 +00:00
Tom Schuster
62be92000c Bug 1313937 - CSP: Logging improvements. r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D182776
2023-07-24 13:38:25 +00:00
Tom Schuster
21f13ac592 Bug 1313937 - CSP: Remove aParserCreated. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D182564
2023-07-21 17:28:03 +00:00
Tom Schuster
00cd57b063 Bug 1313937 - CSP: Reimplement 'strict-dynamic'. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D182563
2023-07-21 17:28:03 +00:00
Tom Schuster
236bd26a07 Bug 1313937 - CSP: Handle nonce from requests more explictly and closer to the spec. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D182562
2023-07-21 17:28:03 +00:00
Stanca Serban
b42c5eaa6a Backed out 6 changesets (bug 1313937, bug 1843066, bug 1843002) for causing build bustages in ScriptLoadRequest.h. CLOSED TREE
Backed out changeset 84c2d1c04aa2 (bug 1313937)
Backed out changeset 7cab9a1ea25f (bug 1313937)
Backed out changeset affc7d1f130d (bug 1313937)
Backed out changeset e13aacfe7944 (bug 1843066)
Backed out changeset 21a9bee8f772 (bug 1843002)
Backed out changeset d381b6365111 (bug 1843002)
2023-07-21 17:41:04 +03:00
Tom Schuster
db71169935 Bug 1313937 - CSP: Remove aParserCreated. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D182564
2023-07-21 12:31:24 +00:00
Tom Schuster
f4142250ab Bug 1313937 - CSP: Reimplement 'strict-dynamic'. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D182563
2023-07-21 12:31:23 +00:00
Tom Schuster
4f565908ae Bug 1313937 - CSP: Handle nonce from requests more explictly and closer to the spec. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D182562
2023-07-21 12:31:23 +00:00
Cristina Horotan
1e6078536b Backed out changeset 117114b8eb32 (bug 1793560) for causing wpt failures at iframe-all-local-schemes-inherit-self.sub.html CLOSED TREE 2023-07-10 17:54:12 +03:00
CanadaHonk
9ba2065c76 Bug 1793560 - Remove navigate-to CSP directive r=tschuster
It has never shipped after being implemented years ago,
and was removed from spec in September 2022:
https://github.com/w3c/webappsec-csp/pull/564

Now skipping navigate-to WPT tests. Filed issue for their future removal:
https://github.com/w3c/webappsec-csp/issues/608

Also removed our own tests to ensure it is unimplemented.

Differential Revision: https://phabricator.services.mozilla.com/D181630
2023-07-10 12:18:18 +00:00
Tom Schuster
6a1d63fc5f Bug 1409200 - Implement CSP-3 support for hashes matching external resources with an integrity attribute. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D179824
2023-06-09 18:40:00 +00:00
Norisz Fay
bd48e8269c Backed out 3 changesets (bug 1409200) as requested by dev
Backed out changeset ea10214aa35f (bug 1409200)
Backed out changeset a66ea7d7f812 (bug 1409200)
Backed out changeset e8a83b1e7e08 (bug 1409200)
2023-06-09 15:11:48 +03:00
Tom Schuster
5780ef129b Bug 1409200 - Implement CSP-3 support for hashes matching external resources with an integrity attribute. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D179824
2023-06-09 07:52:50 +00:00
Malte Juergens
d41eea8a1a Bug 1809888: Rename "Content Security Policy:" console log prefix to "Content-Security-Policy:". r=freddyb,devtools-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D176947
2023-05-10 15:15:46 +00:00
Malte Juergens
93dc52a9d0 Bug 1636920: Call SetCapacity for a FallibleTArray in nsCSPDirective::toDomCSPStruct. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D176948
2023-05-04 07:12:25 +00:00
sunil mayya
8f6d13b1ce Bug 1816918 - pass ClientInfo via IPC while creating webtransport session. r=necko-reviewers,jesup
Differential Revision: https://phabricator.services.mozilla.com/D173115
2023-03-31 03:54:20 +00:00
Sandor Molnar
6545772c09 Backed out changeset 9fda7af76207 (bug 1816918) for causing build bustage in dom/webtransport/parent/WebTransportParent.cpp CLOSED TREE 2023-03-30 08:36:21 +03:00
sunil mayya
0ac0c747e6 Bug 1816918 - pass ClientInfo via IPC while creating webtransport session. r=necko-reviewers,jesup
Differential Revision: https://phabricator.services.mozilla.com/D173115
2023-03-30 04:46:54 +00:00
Norisz Fay
3e62c287df Backed out changeset 2ce4fba56cf7 (bug 1816918) for causing bustage on WebTransportParent.cpp 2023-03-28 21:48:35 +03:00
sunil mayya
cce4bd65ce Bug 1816918 - pass ClientInfo via IPC while creating webtransport session. r=necko-reviewers,jesup
Differential Revision: https://phabricator.services.mozilla.com/D173115
2023-03-28 16:53:23 +00:00
Sandor Molnar
60c3baebf6 Backed out changeset db2b968157d6 (bug 1816918) for causing xpc assertion failures in mozilla/Maybe.h CLOSED TREE 2023-03-28 05:30:53 +03:00
sunil mayya
36efea9373 Bug 1816918 - pass ClientInfo via IPC while creating webtransport session. r=necko-reviewers,jesup
Differential Revision: https://phabricator.services.mozilla.com/D173115
2023-03-28 01:39:23 +00:00
Iulian Moraru
dcb56e1ef3 Backed out changeset 57f13fcb6953 (bug 1816918) for causing build bustages on WebTransportParent.cpp. CLOSED TREE 2023-03-27 18:03:33 +03:00
sunil mayya
35ad75e196 Bug 1816918 - pass ClientInfo via IPC while creating webtransport session. r=necko-reviewers,jesup
Differential Revision: https://phabricator.services.mozilla.com/D173115
2023-03-27 12:35:44 +00:00
Csoregi Natalia
42fdac4667 Backed out changeset d0ed4d075e4d (bug 1804145) for causing Bug 1819096. a=backout 2023-02-27 21:36:44 +02:00
Yulia Startsev
cf3f5d50f2 Bug 1247687 - Implement csp for Module Workers; r=evilpie,asuth,rpl,ckerschb
Depends on D155691

Differential Revision: https://phabricator.services.mozilla.com/D156102
2023-01-18 13:46:33 +00:00
Norisz Fay
afd4d3408b Backed out 15 changesets (bug 1247687) as requested by dev CLOSED TREE
Backed out changeset 81d052cabf84 (bug 1247687)
Backed out changeset d698041e5174 (bug 1247687)
Backed out changeset 2adf67f910e8 (bug 1247687)
Backed out changeset 0bc871906e97 (bug 1247687)
Backed out changeset 1700d5b79273 (bug 1247687)
Backed out changeset 31888ffde37a (bug 1247687)
Backed out changeset 9153182c650d (bug 1247687)
Backed out changeset 45de9ffeec19 (bug 1247687)
Backed out changeset 59207e959b7c (bug 1247687)
Backed out changeset 49f18430c465 (bug 1247687)
Backed out changeset 0ae1fd421d4f (bug 1247687)
Backed out changeset 7770ec4717fd (bug 1247687)
Backed out changeset 68b476066248 (bug 1247687)
Backed out changeset c94a9dc60dff (bug 1247687)
Backed out changeset 0ab366c6eaaf (bug 1247687)
2022-12-21 10:48:15 +02:00
Yulia Startsev
765306663b Bug 1247687 - Implement csp for Module Workers; r=evilpie,asuth,rpl,ckerschb
Depends on D155691

Differential Revision: https://phabricator.services.mozilla.com/D156102
2022-12-20 20:56:15 +00:00
Csoregi Natalia
b7e7a05b44 Backed out 16 changesets (bug 1247687) for frequent string bundle related crashes with PDF viewer (bug 1806064). a=backout
Backed out changeset 721f612fd09f (bug 1247687)
Backed out changeset c6c5750cf713 (bug 1247687)
Backed out changeset 5d05ab0c7cde (bug 1247687)
Backed out changeset 2429599729cb (bug 1247687)
Backed out changeset 55f13fb4ee3f (bug 1247687)
Backed out changeset 354711cf113a (bug 1247687)
Backed out changeset 40b8abaf1c0b (bug 1247687)
Backed out changeset 0c9650a1ac48 (bug 1247687)
Backed out changeset e7b103c79b1a (bug 1247687)
Backed out changeset 4dbd510fb042 (bug 1247687)
Backed out changeset 9276c7e1ddd9 (bug 1247687)
Backed out changeset 6ee318df6641 (bug 1247687)
Backed out changeset 6c129bd72b61 (bug 1247687)
Backed out changeset 4b0a4fcc6894 (bug 1247687)
Backed out changeset 34680059b9f0 (bug 1247687)
Backed out changeset 85b827971a48 (bug 1247687)
2022-12-17 11:27:32 +02:00
Yulia Startsev
6ef295ac2e Bug 1247687 - Implement csp for Module Workers; r=evilpie,asuth,rpl,ckerschb
Depends on D155691

Differential Revision: https://phabricator.services.mozilla.com/D156102
2022-12-14 14:55:38 +00:00
Tom Schuster
709dfb807f Bug 1804145 - CSP: Don't serialize the generated scheme. r=freddyb,extension-reviewers,robwu
Differential Revision: https://phabricator.services.mozilla.com/D164046
2022-12-14 09:08:05 +00:00
Tom Schuster
22629e5d55 Bug 1804038 - CSP: Report a source sample to the console even without the report-sample keyword. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D163817
2022-12-14 09:05:17 +00:00
Tom Schuster
c2154afa05 Bug 1640128 - Support inline style/script hashes from default-src. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D162573
2022-11-23 08:29:12 +00:00