Commit Graph

205 Commits

Author SHA1 Message Date
Tom Ritter
0862794af3 Bug 1763943: Do not bust on the debugger filename in the Browser Console r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D145452
2022-05-04 15:01:22 +00:00
Tooru Fujisawa
aab905e211 Bug 1765167 - Part 4: Stop using Cu.import in dom/. r=mossop
Differential Revision: https://phabricator.services.mozilla.com/D144097
2022-05-03 06:32:30 +00:00
Tom Ritter
35eb5d9915 Bug 1766323: If the preference service is not initialized; don't say we checked hacks r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D145113
2022-04-29 19:01:22 +00:00
Barret Rennie
b31f8b8a22 Bug 1762493 - Remove Ajv r=ckerschb,ahal
Differential Revision: https://phabricator.services.mozilla.com/D142881
2022-04-20 15:23:28 +00:00
Jonathan Watt
c9f14e24cd Bug 1757657. Remove some about:printpreview cruft that was missed in 1702501. r=mstriemer
Differential Revision: https://phabricator.services.mozilla.com/D139993
2022-04-04 17:19:24 +00:00
Tom Ritter
d6b20f9947 Bug 1759887: Check both preference branches for values r=freddyb
This fixes a known problem where the default branch contains a
value for general.config.filename but the user branch
does not, resultnig in a Telemetry event for prefcalls.js to
be created.

However I don't think resolves all issues.

Differential Revision: https://phabricator.services.mozilla.com/D141677
2022-03-22 19:02:48 +00:00
Scott
52aad4c16a Bug 1746016 - Save to Pocket refresh home panel. r=gvn,fluent-reviewers,mconley,andreio,flod,ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D137708
2022-02-23 21:12:49 +00:00
Tom Ritter
f1cc7dbdd7 Bug 1755003: Disable JS Load Restrictions if two more admin prefs are set r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D138546
2022-02-14 14:33:15 +00:00
Tom Ritter
d4ee99c0ba Bug 1748870 - Do not leave a pending JS Exception on the stack r=mgaudet
In 1746231 the JS Exception stuff was moved from the
callback call site into the callback itself.
However, when it was moved, an exception could be
added even if we were going to permit the script
execution.  This is wrong.

Move the exception stuff back to the callback site
and use the result of the callback to determine if
we add anything to the stack or not

Differential Revision: https://phabricator.services.mozilla.com/D135250
2022-01-11 19:16:38 +00:00
Tom Ritter
25837b8df2 Bug 1742645: Enforce javascript filename restrictions in Debug and Nightly builds r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D131947
2022-01-10 18:58:00 +00:00
Tom Ritter
d98a72ab05 Bug 1746231: Permit any script from privileged extensions, not just allowlisted r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D133931
2021-12-21 20:40:33 +00:00
Tom Ritter
04e4d47fc4 Bug 1746231: Convert the script callback to take a JSContext instead of a system bool r=freddyb,iain
Differential Revision: https://phabricator.services.mozilla.com/D133930
2021-12-21 20:40:33 +00:00
Rob Wu
266cac53be Bug 1745566 - Support frame-ancestors for web-accessible extension resources r=necko-reviewers,freddyb,dragana
frame-ancestor support requires a CSP. While extensions can declare a
CSP for extension pages, the frame-ancestors directive was not enforced
because the implementation expected only HTTP channels.

This patch also adds support for channels from ExtensionProtocolHandler.

Differential Revision: https://phabricator.services.mozilla.com/D134143
2021-12-21 20:34:28 +00:00
Butkovits Atila
54519094f9 Backed out 2 changesets (bug 1746231) for causing SM bustages at BytecodeCompiler.cpp. CLOSED TREE
Backed out changeset 8c6e70fe2e4e (bug 1746231)
Backed out changeset f3524f0b660b (bug 1746231)
2021-12-21 19:32:06 +02:00
Tom Ritter
2cbbf90d3d Bug 1746231: Permit any script from privileged extensions, not just allowlisted r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D133931
2021-12-21 16:56:04 +00:00
Tom Ritter
76c920bd20 Bug 1746231: Convert the script callback to take a JSContext instead of a system bool r=freddyb,iain
Differential Revision: https://phabricator.services.mozilla.com/D133930
2021-12-21 16:56:04 +00:00
Tom Ritter
e8b67fd9dd Bug 1744118: Fix the JS Load and System Principal Telemetry r=ckerschb
If the string pref is not set, then pref lookup fails. If the lookup
fails, we interpret it as an error (rather than a missing pref) and
bail early.

This means that we never set sJSHacksChecked and no telemetry will be
sent because we permit everything.  (It also means we do a ton of pref
lookups all the time because every one of them fails.)

Differential Revision: https://phabricator.services.mozilla.com/D132727
2021-12-03 07:42:26 +00:00
Tom Ritter
119717772b Bug 1737295 - Improve exemption matching and handling of off-main-thread reports r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D129276
2021-10-22 18:38:13 +00:00
Andrei Oprea
52681e1e34 Bug 1730924 - Upgrade ajv.js from 4.1.1 to 6.12.6 r=k88hudson
Differential Revision: https://phabricator.services.mozilla.com/D127625
2021-10-12 19:41:05 +00:00
Alexandru Michis
b0d4c86fd7 Backed out changeset 837ba61b9975 (bug 1730924) for causing xpcshell failures in services/sync.
CLOSED TREE
2021-10-12 20:13:05 +03:00
Andrei Oprea
256aaa4763 Bug 1730924 - Upgrade ajv.js from 4.1.1 to 6.12.6 r=k88hudson
Differential Revision: https://phabricator.services.mozilla.com/D127625
2021-10-12 14:43:02 +00:00
Frederik Braun
d20125ef18 Bug 1731025 - systemprincipal telemetry for userChrome.css profiles (and avoid racing with pref checks) r=ckerschb,tjr
Differential Revision: https://phabricator.services.mozilla.com/D125804
2021-10-04 11:09:15 +00:00
Tom Ritter
f11a7d598b Bug 1729969: Exempt all Privileged Extensions from script filename validation r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D126133
2021-09-27 15:42:46 +00:00
Tom Ritter
b122b5987c Bug 1729969: Refactor how and when we collect about: and moz-extension data r=freddyb
Previously we would only include about: and moz-extension details
on Windows, because I erroneously thought that was the only place
we could sanitize them properly. But these types of URLs aren't
hard to sanitize, and really it's file:// URIs that are hard, and
those will stay windows only.

So now we collect about: and moz-extension: URIs on all platforms
and we additionally include whether the extension is privileged
or not.

We put them under new keys also.

Differential Revision: https://phabricator.services.mozilla.com/D126132
2021-09-27 15:42:46 +00:00
Tom Ritter
bb3cb3598f Bug 1729969: Refactor 'extension' Filetype Reporting r=freddyb
The regex will only match file:// URIs, so make that more
explicit in the documentation and code.

Depends on D125113

Differential Revision: https://phabricator.services.mozilla.com/D126131
2021-09-27 15:42:45 +00:00
Tom Ritter
cfc2e91989 Bug 1729969: Improve race checking and add an exemption for about:preferences r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D125113
2021-09-27 15:42:45 +00:00
criss
d0d5e6c8a7 Backed out changeset 60edafe5dcc3 (bug 1731025) for causing failures on ServoUtils.h:33 and browser_preferences_usage.js. CLOSED TREE 2021-09-20 14:19:48 +03:00
Frederik Braun
0c0f04dbcb Bug 1731025 - systemprincipal telemetry for userChrome.css profiles (and avoid racing with pref checks) r=ckerschb,tjr
Differential Revision: https://phabricator.services.mozilla.com/D125804
2021-09-20 08:58:55 +00:00
Tom Ritter
24d3d29b72 Bug 1727803: Create security exemptions for about:sync and about:downloads r=freddyb
This will also fix Bug 1727770

Differential Revision: https://phabricator.services.mozilla.com/D123790
2021-08-30 14:14:07 +00:00
Tom Ritter
44c38fe7e5 Bug 1727842: Do not crash if off the main thread. r=freddyb
Differential Revision: https://phabricator.services.mozilla.com/D123866
2021-08-30 14:13:35 +00:00
Tom Ritter
f67673cd5c Bug 1727914: Fix fuzzing build caused by paren error r=decoder
Differential Revision: https://phabricator.services.mozilla.com/D123856
2021-08-27 14:53:17 +00:00
Andi-Bogdan Postelnicu
52bd17d164 Bug 1725145 - fixes in dom for win in non unified env. r=emilio
Differential Revision: https://phabricator.services.mozilla.com/D123544
2021-08-25 10:46:15 +00:00
Tom Ritter
270d7b4eac Bug 1724220: Crash in fuzzing builds when we hit an unexpected potential hardening bypass r=decoder,freddyb
Differential Revision: https://phabricator.services.mozilla.com/D121875
2021-08-24 14:57:45 +00:00
Tom Ritter
d0bad1e4d0 Bug 1723204: Update tests to prevent crashes r=ckerschb,jdescottes,robwu
This is most commonly as a result of CU.evalInSandbox which
allows an arbitrary filename but when omitted will default
to the filename of the test, which is a filesystem path
and thus is disallowed.

Differential Revision: https://phabricator.services.mozilla.com/D122246
2021-08-24 14:57:44 +00:00
Tom Ritter
44e820519e Bug 1723204: Wire up a crash for Javascript Load Telemetry r=ckerschb,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D121417
2021-08-24 14:57:44 +00:00
Tom Ritter
f21f303070 WIP: Bug 1723204: Infrastructure for causing a crash at most N times r=KrisWright,ckerschb,freddyb
Differential Revision: https://phabricator.services.mozilla.com/D121416
2021-08-24 14:57:43 +00:00
Brindusan Cristian
e7884e8ff1 Backed out 4 changesets (bug 1724220, bug 1723204) for causing cpp non-unified bustages in TestSmartCrashTrimmer.cpp.
CLOSED TREE

Backed out changeset 0dab9553a2a8 (bug 1724220)
Backed out changeset df236c937895 (bug 1723204)
Backed out changeset 4a20d1832cf4 (bug 1723204)
Backed out changeset d7e4042af76c (bug 1723204)
2021-08-24 15:33:32 +03:00
Tom Ritter
6b5cc60dcb Bug 1724220: Crash in fuzzing builds when we hit an unexpected potential hardening bypass r=decoder,freddyb
Differential Revision: https://phabricator.services.mozilla.com/D121875
2021-08-24 11:20:45 +00:00
Tom Ritter
08be7d3ceb Bug 1723204: Update tests to prevent crashes r=ckerschb,jdescottes,robwu
This is most commonly as a result of CU.evalInSandbox which
allows an arbitrary filename but when omitted will default
to the filename of the test, which is a filesystem path
and thus is disallowed.

Differential Revision: https://phabricator.services.mozilla.com/D122246
2021-08-24 11:20:44 +00:00
Tom Ritter
0f40113970 Bug 1723204: Wire up a crash for Javascript Load Telemetry r=ckerschb,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D121417
2021-08-24 11:20:44 +00:00
Tom Ritter
e528e8c795 WIP: Bug 1723204: Infrastructure for causing a crash at most N times r=KrisWright,ckerschb,freddyb
Differential Revision: https://phabricator.services.mozilla.com/D121416
2021-08-24 11:20:44 +00:00
Frederik Braun
e899e65457 Bug 1723998 - Refactor jshacks detection and adapt for use in system principal telemetry r=ckerschb,tjr
Differential Revision: https://phabricator.services.mozilla.com/D121838
2021-08-10 12:41:02 +00:00
Alexandru Michis
654313d10b Backed out 2 changesets (bug 1723204) for causing xpcshell failures in ValidateScriptFilename
CLOSED TREE

Backed out changeset 83e5baac01a9 (bug 1723204)
Backed out changeset 2ee6c94f35b3 (bug 1723204)
2021-08-09 18:33:15 +03:00
Tom Ritter
43bdbb8bf9 Bug 1723204: Wire up a crash for Javascript Load Telemetry r=ckerschb,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D121417
2021-08-09 14:42:31 +00:00
Tom Ritter
e43d68aa1a Bug 1723204: Infrastructure for causing a crash at most N times r=KrisWright,ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D121416
2021-08-09 14:42:31 +00:00
Marian-Vasile Laza
aff1264ab8 Backed out changeset 24284cf9d4da (bug 1723998) for causing GTest failures. CLOSED TREE 2021-08-06 12:16:11 +03:00
Frederik Braun
5ba08bf5ec Bug 1723998 - Refactor jshacks detection and adapt for use in system principal telemetry r=tjr
Differential Revision: https://phabricator.services.mozilla.com/D121838
2021-08-06 08:12:47 +00:00
Tom Ritter
90c478820c Bug 1723294 - Supply a default value to a nightly-only pref lookup r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D121562
2021-08-03 14:15:24 +00:00
Tom Ritter
70cf3001bd Bug 1722775: Exempt Firefox Translation users from having their script security checked r=andrenatal
Differential Revision: https://phabricator.services.mozilla.com/D121207
2021-07-31 00:52:40 +00:00
Tooru Fujisawa
0986662ce6 Bug 1708448 - Move property and element functions into js/public/PropertyAndElement.h. r=nbp
Differential Revision: https://phabricator.services.mozilla.com/D119619
2021-07-13 11:52:42 +00:00