caps/nsScriptSecurityManager.cpp
237852763567335e4134d7510dd1c0c0107e47bc
created 2018-10-15 08:02 +0000
pushed 2018-10-27 01:06 +0000
vinoth vinoth - Bug 1498885 - Assertion added in ContentSecurityPolicyPermitsJSAction() to not allow eval with SystemPrincipal r=ckerschb
e394388fc01759f8527852dfce2cfab361934ea9
created 2018-09-25 07:25 +0200
pushed 2018-10-13 00:15 +0000
Christoph Kerschbaumer Christoph Kerschbaumer - Bug 1490874: Log Principal based Security Errors to the Security pane in the console. r=smaug
ac12aff1944d591811cb51b0e3d6a104595f5831
created 2018-09-24 11:43 +0300
pushed 2018-09-24 21:48 +0000
shindli shindli - Backed out changeset 510e95767aeb (bug 1490874) for security failures in browser/components/payments/test/mochitest/test_basic_card_form.html CLOSED TREE
510e95767aebe3642fe28d9e507a8b9561e5619e
created 2018-09-24 09:34 +0200
pushed 2018-09-24 21:48 +0000
Christoph Kerschbaumer Christoph Kerschbaumer - Bug 1490874: Log Principal based Security Errors to the Security pane in the console. r=smaug
7ebf84d0611e5c5ee7e7a615c1dfbe1853e042d7
created 2018-07-17 21:37 +0200
pushed 2018-07-25 00:48 +0000
Andrea Marchesini Andrea Marchesini - Bug 1476306 - Moving NullPrincipal/ContentPrincipal/SystemPrincipal under mozilla namespace - part 1 - NullPrincipal, r=ckerschb
576783cbe9cb6d2d726a46213430b93225ed6e58
created 2018-07-05 14:53 -0700
pushed 2018-07-25 00:48 +0000
Kris Maglione Kris Maglione - Bug 1473631: Part 10 - Replace pref observers with callbacks in ScriptSecurityManager. r=njn
ca44c68906d0395259fbaca282c6e662abdcf481
created 2018-07-16 17:58 +0200
pushed 2018-07-25 00:48 +0000
Andrea Marchesini Andrea Marchesini - Bug 1473587 - CSP Violation events should have the correct sample for inline contexts, r=jorendorff, r=ckerschb
1b3143e4ec831f400df95c1fef8ee87d6f3368d2
created 2018-07-10 17:40 +0200
pushed 2018-07-25 00:48 +0000
Andrea Marchesini Andrea Marchesini - Bug 1418236 - Correct EventTarget for CSP violation events, r=ckerschb
1dea8bb53b30fe722aba6d4ac6d4ff4bec28ec97
created 2018-07-05 08:21 +0200
pushed 2018-07-05 23:51 +0000
Andrea Marchesini Andrea Marchesini - Bug 1418246 - Return valid columnNumber value in CSP violation events, r=ckerschb
9c84746c20d3a64baf1977c0c86f6635d3e3dd98
created 2018-05-31 11:28 +0200
pushed 2018-06-04 18:38 +0000
Jan de Mooij Jan de Mooij - Bug 1464374 part 4 - Remove unused nsScriptSecurityManager::doGetObjectPrincipal. r=bz
f915e7d86ab8334ebb266b1611c617db479522d9
created 2018-05-11 16:26 -0700
pushed 2018-05-25 23:33 +0000
Brian Grinstead Brian Grinstead - Bug 1460685 - Backed out changeset 09ee763947c3 (bug 1352513);r=Gijs
c09a1e918065e66d8cd5182c7e7d63cba0a77d45
created 2017-12-21 10:54 -0500
pushed 2018-05-24 16:58 +0000
Boris Zbarsky Boris Zbarsky - Bug 1424474 part 1. Make sure we don't call into the chrome registry's AllowContentToAccess with non-chrome URLs. r=gijs a=gchang
dba34d8471d2cad64ca3868d1e6fcda475b61b30
created 2018-05-08 15:52 +0200
pushed 2018-05-10 00:43 +0000
Andrea Marchesini Andrea Marchesini - Bug 1374745 - nsScriptSecurityManager should not use a string bundle before profile selection, r=ckerschb
a31c1b8a41f81fb564bd86e1c22617595d61a42d
created 2018-04-28 12:50 -0700
pushed 2018-05-10 00:43 +0000
Chris Peterson Chris Peterson - Bug 1457813 - Part 2: Replace non-asserting NS_PRECONDITIONs with MOZ_ASSERTs. r=froydnj
b4278b2f0801917efce3826515817a7e1251b4ce
created 2018-03-28 22:46 -0400
pushed 2018-04-05 22:59 +0000
Boris Zbarsky Boris Zbarsky - Bug 1448414. Remove the DOM_OBJECT classinfo bit. r=kmag
1fc80ba9ed07e9126e1e181e0051b7c22a151c24
created 2018-03-29 12:21 +0300
pushed 2018-04-05 22:59 +0000
Coroiu Cristina Coroiu Cristina - Backed out changeset 9e41e9c653f2 (bug 1448414) for mochitest failures Permission denied to create wrapper for object of class XPCComponents_Interfaces on a CLOSED TREE
0c7442ef9bbd58b45ddec508edae705e2bec0649
created 2018-03-28 22:46 -0400
pushed 2018-04-05 22:59 +0000
Boris Zbarsky Boris Zbarsky - Bug 1449211. Stop special-casing XUL command dispatchers and tree selections in content XBL scopes. r=kmag
9e41e9c653f26f87285ccb5696b492c1e8c7c3be
created 2018-03-28 22:46 -0400
pushed 2018-04-05 22:59 +0000
Boris Zbarsky Boris Zbarsky - Bug 1448414. Remove the DOM_OBJECT classinfo bit. r=kmag
d46afbe90f3c9dbeb0379d40f8292004dc5c6916
created 2018-02-26 20:43 +0100
pushed 2018-03-02 02:16 +0000
Valentin Gosu Valentin Gosu - Bug 1433958 - Change code that sets nsIURI.host to use nsIURIMutator r=mayhemer
432d38e262305e84cbb05ca1db5758d40e63202d
created 2018-02-05 16:34 -0500
pushed 2018-02-08 00:09 +0000
Boris Zbarsky Boris Zbarsky - Bug 1435483 part 3. Remove nsIXPCException. r=qdot
beb46b2f38d48591d907d5823b95c492fa36f89a
created 2017-12-21 10:54 -0500
pushed 2018-01-30 01:38 +0000
Boris Zbarsky Boris Zbarsky - Bug 1424474 part 1. Make sure we don't call into the chrome registry's AllowContentToAccess with non-chrome URLs. r=gijs
236ad715d7548c2a0ac400aeadc12627885e764b
created 2017-12-12 10:53 -0600
pushed 2018-01-30 01:38 +0000
Gijs Kruitbosch Gijs Kruitbosch - Bug 1424261, r=bz
ec15d17d85cb9423cd45fa19069d831c4c563d8c
created 2017-11-22 21:31 +0000
pushed 2018-01-30 01:38 +0000
Gijs Kruitbosch Gijs Kruitbosch - Bug 1222924 - stop allowing webpages to link to moz-icon: , r=mrbkap
4350a326a49805c6138aabd0ed68136498bf97cd
created 2017-11-02 19:56 -0700
pushed 2017-11-28 20:17 +0000
Kris Maglione Kris Maglione - Bug 1412345: Downgrade expanded principals before inheriting. r=bz,krizsa
06db7fb30689b8ff22bc7b91b6ac847c9a01c47d
created 2017-07-20 20:44 +0200
pushed 2017-11-15 09:57 +0000
Christoph Kerschbaumer Christoph Kerschbaumer - Bug 1073952 - Inherit CSP into iframe sandbox srcdoc. r=freddyb, a=dveditz
df948a52ffb1e48a8fc7e43867557710b37f6914
created 2017-10-25 19:46 -0700
pushed 2017-11-03 18:37 +0000
Kris Maglione Kris Maglione - Bug 1411817: Add do_AddRef overloads for nsCOMPtr<T> and nsRevocableEventPtr<T>. r=froydnj
3feb5338f65c83d2af52fb8a53f866155e88dc15
created 2017-10-16 21:08 -0700
pushed 2017-11-03 18:37 +0000
Kris Maglione Kris Maglione - Bug 1409249: Require singleton constructors to return explicit already_AddRefed. r=froydnj
3b3a3a585d0d97233737efb1573670f34689bc63
created 2017-10-19 10:11 +1100
pushed 2017-10-24 22:56 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1409960 - Remove ClassInfoData. r=bz.
c2d3e50e7a8ecc231b8d9c0b9ef1c436a1bb6e2e
created 2017-10-18 13:17 +1100
pushed 2017-10-24 22:56 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1409598 - Change nsIXPCScriptable::className and nsIClassInfo::{contractID,classDescription} from string to AUTF8String. r=froydnj.
28a28f017a5f8be72f91b3efb4e820abd16b949c
created 2017-10-10 15:00 -0700
pushed 2017-10-24 22:56 +0000
Kris Maglione Kris Maglione - Bug 1407428: Hand out a const array reference for expanded principal whiteList. r=krizsa
994ea93958587c927e5daa729c9393056f655a9b
created 2017-10-16 00:00 +0200
pushed 2017-10-24 22:56 +0000
Sebastian Hengst Sebastian Hengst - Backed out changeset 237acf2879f6 (bug 1407428) for frequent crashes, e.g. in xpcshell's test_bug248970_cookie.js. r=backout on a CLOSED TREE
237acf2879f6222bc4b076c377bf026d18a6ebef
created 2017-10-10 15:00 -0700
pushed 2017-10-24 22:56 +0000
Kris Maglione Kris Maglione - Bug 1407428: Hand out a const array reference for expanded principal whiteList. r=krizsa
3792a715a50dcd211d5a72ae3be1bf58a9de8ebf
created 2017-06-28 12:31 -0700
pushed 2017-09-23 00:09 +0000
Jason Orendorff Jason Orendorff - Bug 1363200 - JSAPI for realms: Change a few XPConnect methods to take Realm arguments instead of JSCompartments. r=mrbkap
0cc8ef854b497929161250f9aa067228abe85e63
created 2017-07-12 15:00 -0500
pushed 2017-09-12 22:03 +0000
Jason Orendorff Jason Orendorff - Bug 1363200 - JSAPI for realms: Move mIsContentXBLScope to the CompartmentPrivate. r=mrbkap
c105574f5739c8582a8bfdd12b2cb945bff288d6
created 2017-09-05 11:04 -0700
pushed 2017-09-08 01:10 +0000
Kris Maglione Kris Maglione - Bug 1396449: Part 1 - Use WebExtensionPolicy objects in extension content principals. r=krizsa
a676a11885728e790fc81eebb60b8f574ff100d6
created 2017-06-08 17:44 +0800
pushed 2017-08-31 22:44 +0000
Chung-Sheng Fu Chung-Sheng Fu - Bug 863246 - Content can only load resource:// URIs declared content-accessible in manifests r=billm,bz
4c7a7a93b2c35be2b42ba1f11e7cfb1f9603fe6b
created 2017-08-25 16:44 +0200
pushed 2017-08-31 22:44 +0000
Sebastian Hengst Sebastian Hengst - Backed out changeset 05fc8d2d7ca9 (bug 863246) for failing various reftests, e.g. parser/htmlparser/tests/reftest/bug535530-2.html. r=backout on a CLOSED TREE
05fc8d2d7ca945d915d8279bd877a38824b30ac8
created 2017-06-08 17:44 +0800
pushed 2017-08-31 22:44 +0000
Chung-Sheng Fu Chung-Sheng Fu - Bug 863246 - Content can only load resource:// URIs declared content-accessible in manifests r=billm,bz
e3e420a10be0c7b2037fab085aa7e25633b6242a
created 2017-08-17 15:29 +1000
pushed 2017-08-31 22:44 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1390428 (part 9) - Remove nsXPIDLCString. r=erahm.
42cf6375ccfdaabdbbc3e63dc0c3a658fe32f0f4
created 2017-08-06 15:31 +0900
pushed 2017-08-23 01:08 +0000
Masatoshi Kimura Masatoshi Kimura - Bug 1387805 - Remove [deprecated] nsIScriptSecurityManager.getCodebasePrincipal(). r=bz
9a2e09bc461f1df68700ea0eee570516c1f8f234
created 2017-06-20 15:23 -0400
pushed 2017-08-23 01:08 +0000
Thomas Wisniewski Thomas Wisniewski - Bug 1261289 - Allow webextensions to open view-source links. r=mixedpuppy, r=smaug
e26e9804c545afcb33549da0f7fd693cc3fc671f
created 2017-08-04 14:40 +1000
pushed 2017-08-08 23:59 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1386600 - Change nsIStringBundle methods to return |AString| instead of |wstring|. r=emk,sr=dbaron.
adf6435ac760a25dda3f267f6419db334f08f440
created 2017-08-04 14:11 +0200
pushed 2017-08-08 23:59 +0000
Christoph Kerschbaumer Christoph Kerschbaumer - Bug 1381761 - Treating 'data:' documents as unique, opaque origins should still inherit the CSP. r=smaug,dveditz
2b347fb55a9965acec727f6e40671ba859636603
created 2017-07-31 14:28 +1000
pushed 2017-08-01 03:32 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1384835 (part 3, attempt 2) - Remove the Preferences::Get*CString() variants that return nsAdoptingCString. r=froydnj.
f2356ef5b902b23d5e8c5ff6a53df46b3489c637
created 2017-07-31 14:23 +1000
pushed 2017-08-01 03:32 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1384835 (part 2, attempt 2) - Remove the Preferences::Get*String() variants that return nsAdoptingString. r=froydnj.
04539e21f0d579a537e1a6abab75d9b88258d6cd
created 2017-07-28 10:29 +0200
pushed 2017-07-28 23:02 +0000
Sebastian Hengst Sebastian Hengst - Backed out changeset 5df4d8778602 (bug 1384835)
88e14ba4308e1ca878548a2b1616276c7b543c39
created 2017-07-28 10:29 +0200
pushed 2017-07-28 23:02 +0000
Sebastian Hengst Sebastian Hengst - Backed out changeset ef5feef07bed (bug 1384835)
ef5feef07bed07583c52e434dbc5e4b9a2545deb
created 2017-07-27 16:45 +1000
pushed 2017-07-28 23:02 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1384835 (part 3) - Remove the Preferences::Get*CString() variants that return nsAdoptingCString. r=froydnj.
5df4d877860281f66dc14b512de963539dc443b0
created 2017-07-25 20:36 +1000
pushed 2017-07-28 23:02 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1384835 (part 2) - Remove the Preferences::Get*String() variants that return nsAdoptingString. r=froydnj.
b4f4996c541ea5e260e4ca13617b201e90b08096
created 2017-07-19 09:37 +0100
pushed 2017-07-25 22:37 +0000
Bob Owen Bob Owen - Bug 1378377 Part 1: Expose file:// URI whitelist check to chrome JS. r=bz
129793760f2d718ed61ba17d9aacd57c7ec6785b
created 2017-07-12 15:13 +1000
pushed 2017-07-25 22:37 +0000
Nicholas Nethercote Nicholas Nethercote - Bug 1380227 - Avoid many UTF16toUTF8 and UTF8toUTF16 conversions in nsStringBundle. r=emk.
f722debcf50215bec64f141d606e37ec636ad116
created 2016-11-23 17:54 -0500
pushed 2017-07-11 23:52 +0000
Dragana Damjanovic Dragana Damjanovic - Bug 1317641 - Some loadinfo security flags should not apply in case of a redirect. r=bz, a=dveditz
a358c0a7c665a0760a3089f4dd73f4bb9effa061
created 2017-05-18 09:07 +0200
pushed 2017-06-24 00:05 +0000
Peter Van der Beken Peter Van der Beken - Bug 1252211 - Remove DOMCI for TreeSelection, XULCommandDispatcher and XULControllers. r=bz.
23edf58d766b391a07ac4f89ab558bbc48fd5413
created 2017-06-13 12:20 +0200
pushed 2017-06-24 00:05 +0000
Carsten "Tomcat" Book Carsten "Tomcat" Book - Backed out changeset 2c51cdd42834 (bug 1252211) for bustage
2c51cdd4283493b1ee4a3f8dcc75481fa06094ac
created 2017-05-18 09:07 +0200
pushed 2017-06-24 00:05 +0000
Peter Van der Beken Peter Van der Beken - Bug 1252211 - Remove DOMCI for TreeSelection, XULCommandDispatcher and XULControllers. r=bz.
06634ddc1a18ca945492a6317f548a8be21dff7b
created 2017-06-02 11:05 +0200
pushed 2017-06-24 00:05 +0000
Andrea Marchesini Andrea Marchesini - Bug 1369323 - Get rid of nsScriptSecurityManager::GetNoAppCodebasePrincipal, r=bholley
f46160bbc4ec20a480a1305aecfa46107e50b19d
created 2017-06-02 11:05 +0200
pushed 2017-06-24 00:05 +0000
Andrea Marchesini Andrea Marchesini - Bug 1369314 - Get rid of nsScriptSecurityManager::GetAppCodebasePrincipal, r=bholley
913c4c60537a3729fe3bd42e04420d74655bbe72
created 2017-02-08 23:11 +0000
pushed 2017-05-19 22:38 +0000
Gijs Kruitbosch Gijs Kruitbosch - Bug 1335272 - fix about:cache internal links, r=bz, a=jcristau
bb6cc749654ef67208a581f1a9375f16b17de185
created 2017-02-08 16:00 -0500
pushed 2017-05-19 22:38 +0000
Ryan VanderMeulen Ryan VanderMeulen - Backed out 3 changesets (bug 1335272) for browser_BrowserTestUtils.js timeouts.
e9ee24c88e55c466cfb768e5e8ecad68ff05779f
created 2017-02-02 15:10 +0000
pushed 2017-05-19 22:38 +0000
Gijs Kruitbosch Gijs Kruitbosch - Bug 1335272 - Fix about:cache internal links. r=bz, a=jcristau
less more (0) -100 -60 tip