Bug 1432613 - Make nsIJAREntry.JAREntry readonly MozReview-Commit-ID: 3yPZIn2NkH

Bug 1432602 - Add nsIFileURLMutator.setFile() MozReview-Commit-ID: EF2vVYoN8bg

Bug 1432928 - Use nsIURIMutator in extensions.xml::refreshInfo MozReview-Commit-ID: GN4PXoWkX8V

Bug 1432320 - (Part 2) Change calls to nsIURL.{fileName,fileBaseName,fileExtension} setters to use nsIURLMutator MozReview-Commit-ID: D5aTl1i14gI

Bug 1432320 - (Part 1) Add nsIURLMutator MozReview-Commit-ID: 8GYru46kFQE

Bug 1431192 - Only fetch download protection lists when Safe Browsing is enabled. r?gcp Download protection requires both the malware list as well as its own special lists. The code therefore checks that both Safe Browsing and download protection are enabled before checking downloaded files. The list manager should check the same prefs before downloading any of the download protection lists in order to avoid connecting to the Safe Browsing server when Safe Browsing is fully disabled. MozReview-Commit-ID: 66vMA56T4pJ

Bug 1434125 - Add xpidl + rust command line arguments and output dependencies to the tup backend. MozReview-Commit-ID: 9DsymfiOB8N

Bug 1433019 - Dispatch scroll events before dispatching animation events. r?mstange,botond See 7.6. in the section '8.1.4.2 Processing model'; https://html.spec.whatwg.org/multipage/webappapis.html#processing-model-8 Note that this dispatching scroll events should be done after we process WillRefresh() for FlushType::Style observers since main-thread scroll animations is one of the FlushType::Style observers, that means it affects scroll events. Also test_scroll_event_ordering.html was modified to check scroll events happen before requestAnimationFrame callbacks. MozReview-Commit-ID: LuV157XoRkJ

Bug 1434116 - Add direct adding, thumbnail disabling and bug fixes to Activity Stream. r?dmose MozReview-Commit-ID: J8WNlfmATf6

Bug 1376910 - Remove SysV IPC access from Linux content sandbox when possible. r?gcp There are a few things that use SysV IPC, which we discovered the last time we tried to do this, which need to be accomodated: 1. The ALSA dmix plugin; if the build has ALSA support (off by default) and if audio remoting is disabled, SysV IPC is allowed. 2. ATI/AMD's old proprietary graphics driver (fglrx), which is obsolete and doesn't support newer hardware, but still has users; if it's detected, SysV IPC is allowed. 3. Graphics libraries trying to use the MIT-SHM extension; this is already turned off for other reasons (see bug 1271100), but that shim seems to not load early enough in some cases, so it's copied into libmozsandbox, which is preloaded before anything else in LD_PRELOAD. Also, msgget is now blocked in all cases; the only case it was known to be used involved ESET antivirus, which is now handled specially (bug 1362601). In any case, the seccomp-bpf policy has never allowed actually *using* message queues, so creating them is not very useful. MozReview-Commit-ID: 5bOOQcXFd9U

Bug 1213998 - Apply chroot() to sandboxed content processes on Linux. r=gcp MozReview-Commit-ID: DGepECmw3pq

Bug 1430949 - Isolate network namespace in Linux content sandbox level 4. r?gcp This is turned off if the X11 server is remote -- including TCP to localhost -- because otherwise it would be blocked. Note that ssh X forwarding presents a TCP-only server. The Nightly default for the force-namespace hidden pref is changed to false, because we will now normally be using namespaces if available. MozReview-Commit-ID: L9BbLdoLvLg

Bug 1432395 - Change cache version to force new caches; r=glandium This is basically the same deal as e331a3b9fae2. Caching is hard. MozReview-Commit-ID: 9uWHHdnHgq1

Merge inbound to mozilla-central. a=merge

Bug 1433597 - Remove unused --wasm-check-bce flag, r=luke

Bug 1433837 - Cleanup JSObject slots_ initialization r=jandem js::Allocate<JSObject> now only sets slots_ if nDynamicSlots is non-zero. This avoids spurious writes for other types and is now consistent with JIT code. MozReview-Commit-ID: 3spPMFj7Fxz

Bug 1433837 - Cleanup JSObject initialization nits r=jandem Make JSObject initializations more consistent accross different types. MozReview-Commit-ID: Ixbr1bfM0hj

Bug 1433837 - Delay MetadataBuilder for UnboxedObject and TypedObject r=jandem Avoid NewObjectMetadata hook while OutlineTypedObjects have a uninitialized owner pointer. MozReview-Commit-ID: Hn0HmnEUmz5

Bug 1433837 - Objects that are isNative should extend NativeObject r=jandem MozReview-Commit-ID: E3p4j45xnc7

Bug 1428888 - Allow C++ to accumulate multiple samples into a categorical histogram in one call r=chutten Telemetry::Accumulate now supports two new signatures: Accumulate(HistogramId, nsTArray stringLabels) and Accumulate(nsTArray enumValues). In the stringLabels case, if the array contains an invalid label, then no samples are accumulated at all. In the enumValues array case, the class template ensures that we do not have a mismatch of labels in the array, since the enumValues class is tied to the id of the histogram we want to accumulate to.