fa252d7f676e7228bfa7d078d9100d296410e0cc: Bug 1042996 - Remove the special JSContext for Sandboxes. r=bobowen,r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 14:55:51 -0700 - rev 196453
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042996 - Remove the special JSContext for Sandboxes. r=bobowen,r=gabor
60d9d4dffca46844685aa1c80522d03e9522d2af: Bug 1042996 - Always set an explicit version in evalInSandbox. r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 14:55:51 -0700 - rev 196452
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042996 - Always set an explicit version in evalInSandbox. r=gabor If setVersion() is not invoked on compileOptions, it ends up with JSVERSION_UNKNOWN, which invokes findVersion() on the JSContext, which does a bunch of crazy hunting of previous scripted stack frames that we most certainly don't want for sandboxes, which are supposed to be controlled environments. Using a separate JSContext in evalInSandbox isolates us from these effects, so once we stop doing that we need to be more explicit here.
aca3cef28edfbffc67d7de26ec45dd7ff648015f: Bug 1043602 - Use TYPE_SUBDOCUMENT instead of TYPE_SCRIPT for contentPolicyCheck in ImportManager (r=gabor)
Christoph Kerschbaumer <mozilla@christophkerschbaumer.com> - Thu, 24 Jul 2014 13:44:49 -0700 - rev 196451
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1043602 - Use TYPE_SUBDOCUMENT instead of TYPE_SCRIPT for contentPolicyCheck in ImportManager (r=gabor)
e566ade6f17eb2555bec7d6d393f60bff1ffd328: Bug 1000131 (Part 2): Loop expired call url view styling, r=dmose.
Nicolas Perriault <nperriault@gmail.com> - Mon, 28 Jul 2014 12:51:42 -0700 - rev 196450
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1000131 (Part 2): Loop expired call url view styling, r=dmose.
ebeb5bb53552f1373442fb8f32c05c46937f7795: Bug 1042833 - Add 'none' architecture used in --disable-ion builds, r=jandem.
Brian Hackett <bhackett1024@gmail.com> - Mon, 28 Jul 2014 11:37:48 -0800 - rev 196449
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042833 - Add 'none' architecture used in --disable-ion builds, r=jandem.
d8dfc26f9295711be054560aa5f563d9c1f4893e: Bug 1029620 P7 Test new fetch Headers DOM object. r=ehsan
Ben Kelly <ben@wanderview.com> - Mon, 28 Jul 2014 15:28:20 -0400 - rev 196448
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1029620 P7 Test new fetch Headers DOM object. r=ehsan
ce5290527b36feb9b7925adfca667a453244d777: Bug 1029620 P6 Implement Fetch Headers DOM object. r=ehsan r=jst
Ben Kelly <ben@wanderview.com> - Mon, 28 Jul 2014 15:28:20 -0400 - rev 196447
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1029620 P6 Implement Fetch Headers DOM object. r=ehsan r=jst
35147019d5e96a2466d2cb8c682e4d5501b2154c: Bug 1029620 P5 Create dom.fetch.enabled pref, defaulted to false. r=ehsan
Ben Kelly <ben@wanderview.com> - Mon, 28 Jul 2014 15:28:20 -0400 - rev 196446
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1029620 P5 Create dom.fetch.enabled pref, defaulted to false. r=ehsan
9bb4c48369fa24f2fce7615ac6c974bd58232737: Merge m-c to inbound. a=merge CLOSED TREE.
Ryan VanderMeulen <ryanvm@gmail.com> - Mon, 28 Jul 2014 15:09:21 -0400 - rev 196445
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Merge m-c to inbound. a=merge CLOSED TREE.
d735d53ecce2e3aa93d8a0cbd17f7ca9e6a403bc: Backed out 5 changesets (bug 1022229) for non-unified bustage.
Ryan VanderMeulen <ryanvm@gmail.com> - Mon, 28 Jul 2014 15:08:51 -0400 - rev 196444
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Backed out 5 changesets (bug 1022229) for non-unified bustage. Backed out changeset d79b991a8d96 (bug 1022229) Backed out changeset 34f9a0e7dbde (bug 1022229) Backed out changeset 37fbaf69c6e0 (bug 1022229) Backed out changeset d6111b0603f5 (bug 1022229) Backed out changeset 154922edf5fe (bug 1022229)
d79b991a8d96cf68c628b51950a0125ec5f071bb: Bug 1022229 - Followup bustage fix. r=me CLOSED TREE
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 11:26:41 -0700 - rev 196443
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1022229 - Followup bustage fix. r=me CLOSED TREE
655c65e5ba576d26ab8a1ea5cd867718eed47281: Bug 1042840 - Remove evalInWindow. r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 11:19:25 -0700 - rev 196442
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042840 - Remove evalInWindow. r=gabor
d2116f6d0d6511225999ae69afce036447821516: Bug 1042824 - Remove implicit cloning behavior in function forwarders. r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 11:19:25 -0700 - rev 196441
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042824 - Remove implicit cloning behavior in function forwarders. r=gabor
80e729eabf75a24b1c1391721aece92a6261cdb2: Bug 1042824 - Borrow the JSID_VOID handling from the cloning forwarding. r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 11:19:25 -0700 - rev 196440
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042824 - Borrow the JSID_VOID handling from the cloning forwarding. r=gabor
e66847243b1df2efb810555f625d027ee6be4d49: Bug 1042824 - Manually do the cross-compartment call in NonCloningFunctionForwarder. r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 11:19:24 -0700 - rev 196439
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042824 - Manually do the cross-compartment call in NonCloningFunctionForwarder. r=gabor
acadf614da49cb6b2feb9656678f73e952fc30c3: Bug 1042824 - Do a security check on the callee in ExportFunction. r=gabor
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 11:19:24 -0700 - rev 196438
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1042824 - Do a security check on the callee in ExportFunction. r=gabor It would be nice to enforce this in New*FunctionForwarder, but we're already in the target compartment at that point. :-( We don't need to worry about this at the other callsites of New*FunctionForwarder because: * The stuff in XPCComponents is always invoked by System Principaled code. * The stuff in StackScopedCloneRead only gets invoked when we're already done a successful CheckedUnwrap inside the JS engine.
8f2c13fb47340dcedf95fd1d400b0d3988fa9584: Bug 1035867 - Fix WebappRT for the new Webapps implementation, r=myk.
Antonio M. Amaya <amac@tid.es> - Mon, 28 Jul 2014 11:06:34 -0700 - rev 196437
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1035867 - Fix WebappRT for the new Webapps implementation, r=myk.
7c67613ba2edaaeedbb04057dc9f93a1dd102dc1: Bug 1024250; r=bz
Terrence Cole <terrence@mozilla.com> - Thu, 17 Jul 2014 14:18:04 -0700 - rev 196436
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1024250; r=bz
34f9a0e7dbde9e94b8bd6d971c76debc64841055: Bug 1022229 - Tests. r=bz
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 10:37:55 -0700 - rev 196435
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1022229 - Tests. r=bz
37fbaf69c6e0767fe9b892dac03f9c5f8477b327: Bug 1022229 - Borrow App ID and mozBrowser-ness when creating sandbox null principals. r=bz
Bobby Holley <bobbyholley@gmail.com> - Mon, 28 Jul 2014 10:37:54 -0700 - rev 196434
Push 27214 by cbook@mozilla.com at Tue, 29 Jul 2014 07:16:00 +0000
Bug 1022229 - Borrow App ID and mozBrowser-ness when creating sandbox null principals. r=bz
(0) -100000 -30000 -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 +10000 +30000 +100000 +300000 tip