content/base/src/nsObjectLoadingContent.cpp
1c9d050ca983a13b4f1a63bcff889f6bfb2d0545
created 2008-03-22 09:50 -0700
pushed unknown
jst jst - Landing followup fix for bug 402983 and re-enabling the new stricter file URI security policies. r+sr=bzbarsky@mit.edu
49c3394f31353d8b517033b4ca0bc10032e7f144
created 2008-03-17 17:36 -0700
pushed unknown
jst jst - Fixing bug 395110. Give type attribute higher priority when deciding what plugin to use. r=jonas@sicking.cc, sr=bzbarsky@mit.edu
a054532372902bafaf15f94820d0863095afdb60
created 2008-03-14 16:08 -0700
pushed unknown
jonas jonas - Bug 401155: Make it safe to create a wrapper for an object at any time by making sure wrapping doesn't write script. Also set up a service that tries to keep track of when it's safe to execute script. r=bz sr=jst
c591c1b71935ef631cd9ec64d5ae2a6946f5bafc
created 2008-03-12 14:52 -0700
pushed unknown
dcamp dcamp - Bug 394485: Prevent loading blocklisted urls loaded from <object> tags. r=jonas, sr=biesi, blocking1.9=stuart
d025ab2f8a83dd4538412c38b0d98a0d8c35b732
created 2008-03-10 19:18 -0700
pushed unknown
jonas jonas - Back out due to failed mochitest
d94399ec917e156d8107206268ff2fe889a73cf8
created 2008-03-10 17:49 -0700
pushed unknown
jonas jonas - Bug 401155: Make sure plugins and XBL constructors not execute when creating a script wrapper if it's not safe to execute scripts. r=bz sr=jst.
b40d7a61f35c1dda5693148ac2a688fa6e22bf35
created 2008-02-28 18:06 -0800
pushed unknown
jst jst - Fixing bug 410946. Prevent plugins from being destroyed while there's code from those plugins on the stack. r+sr=bzbarsky@mit.edu, a=beltzner@mozilla.com
6db6583411045d5b2bf4b131a812f7273c3e6805
created 2008-02-26 16:29 -0800
pushed unknown
dtownsend dtownsend - Bug 409025: OBJECTs with type attribute but no data attribute do not fire plugin errors. r=biesi, sr=jst
360c3ce4a5252b0a205bee7cb60d1df3b3b5efb8
created 2007-12-27 03:49 -0800
pushed unknown
dtownsend dtownsend - Bug 388445: Notify user when plugin on page is blocklisted. r=gavin, sr=jst
6e1c7a6ac8b56f8f1b3855d5c4af901e41b63cb0
created 2007-12-03 13:57 -0800
pushed unknown
bzbarsky bzbarsky - Propagate the node's principal as the owner to <object> loads as needed, and allow <object data="javascript:"> to work. Bug 353334 and bug 300263, r=biesi, sr=jst, a=dsicore
41cf0219c08b67cafbbee8af6ae633daae73884c
created 2007-11-07 09:25 -0800
pushed unknown
bzbarsky bzbarsky - Handle image embeds with a null URI. Bug 402320, r+sr=jst
3451c90a8e37010095a3e657f2077e01682beae2
created 2007-09-25 13:41 -0700
pushed unknown
gavin gavin - Back out the patch for bug 393845 because it appears the regressions it caused are worse than the bug it fixed (a=biesi)
90127e35afe874e0d7bb13a898582f566aff5342
created 2007-09-14 11:57 -0700
pushed unknown
bzbarsky bzbarsky - Make disabling image loading in prefs also block images loaded via <object>. Bug 393503, r+sr=biesi, a=jst
d949791acaa512b94804770cfcf112e5e3d25dea
created 2007-09-05 13:33 -0700
pushed unknown
cbiesinger cbiesinger - 393845 Stop plugins from content instead of from layout. Also, reget the frame after stopping the plugin, as that may process events. Finally, make the object frame not touch member variables after stopping the plugin. r+sr=bz a=jst
488bc73ac2de8efd6ba5f747ba601e81a2953784
created 2007-08-20 20:26 -0700
pushed unknown
bzbarsky bzbarsky - Make <object> do the same text/plain sniffing that <iframe> does, and use the content type hint if the type comes back as application/octet-stream or sniffed-binary. Bug 389677, r+sr=biesi, a=sicking
15ae98de61671cd75563f28163c022c3be042d42
created 2007-08-09 22:35 -0700
pushed unknown
bzbarsky bzbarsky - Make NS_CheckContent(Load|Process)Policy only take a principal, not a principal and a uri. Get the URI from the principal. Bug 391438, r+sr+a=sicking
45c61f5bc283e2492bbf1206e9216cbbf3083093
created 2007-08-07 18:16 -0700
pushed unknown
bzbarsky bzbarsky - Use the principal doing the load to decide on the URI to pass to content policies. This will help do the right thing for data:/javascript:/about:blank, as well as allow us to skip content policies altogether if the caller is system. Bug 388597, r+sr=sicking
cd11bc5ba7b247b90f253baca457d3c1865cb262
created 2007-08-06 17:32 -0700
pushed unknown
cbiesinger cbiesinger - Bug 390385 make sure that plugins don't get instantiated before the first Reflow of the objectframe, so that the first NPP_SetWindow call contains the right dimensions r+sr=bz
b5106a98eb526b9cf447c96abb703bb941b0ef55
created 2007-08-06 11:02 -0700
pushed unknown
cbiesinger cbiesinger - 364235 don't instantiate plugins for URLs with unknown schemes unless we also have a type specified r+sr=bz
605278dac45265081c1e582d649484dea39b032f
created 2007-08-02 14:15 -0700
pushed unknown
cbiesinger cbiesinger - 382378 call NotifyContentObjectWrapper after the plugin has been instantiated so that scriptable plugins work correctly r+sr=bz
e3ed4f1f01e401b872cd3a78d917feffe547df57
created 2007-08-02 13:16 -0700
pushed unknown
cbiesinger cbiesinger - 322170 ignore errors from OnStartRequest (NPP_NewStream) for Shockwave on the Mac r=jst sr=bz
81977eb555a1ab6a8a0db9f7f5e277dc1af32487
created 2007-08-02 10:54 -0700
pushed unknown
bzbarsky bzbarsky - Flush layout before starting to pump data into plug-ins if we started the data
804826945c80b8e4492c423435fac9e7e5001553
created 2007-07-26 19:49 -0700
pushed unknown
jonas jonas - Bug 389508: Cross site XMLHttpRequest. r=jst/biesi sr/dveditz/biesi
ff24e969a342dd8c7cbe8a5e5e87bb11c9858370
created 2007-07-26 16:34 -0700
pushed unknown
jonas jonas - backout due to orange
e429a8c63ba627a18d8d8052e83def6d06a9e514
created 2007-07-26 15:20 -0700
pushed unknown
jonas jonas - Bug 389508: Implement Cross site XMLHttpRequest. r=jst sr=dveditz,biesi
7bf43c2a9f1485154798db2e93e4cbe64c9682b6
created 2007-07-18 17:28 -0700
pushed unknown
cbiesinger cbiesinger - 385118 make sure to set mInstantiating to false again before returning
a22bccf5eae298d6f44864ed10a3bf56c868f252
created 2007-07-18 15:02 -0700
pushed unknown
cbiesinger cbiesinger - bug 309523 remove now-addressed XXX comment
3a702175fcb9c14ca1da0d31d346f531a0d5a4c1
created 2007-07-18 14:48 -0700
pushed unknown
cbiesinger cbiesinger - bug 347736 instantiate <embed> plugins by extension if we don't have a MIME type
a232c160cbcf7c9a6a526a10431e07c64f1b949f
created 2007-07-17 00:43 -0700
pushed unknown
Olli Pettay Olli Pettay - Bug 386599, Recursive <object> with border hangs Firefox, r=biesi, sr=bz
557272ece39f5caa085fd534b4a9b8b1ad5ef637
created 2007-07-13 17:28 -0700
pushed unknown
flamingice flamingice - Bug 330511, Plugin-in blocklisting, r+sr=jst
ab58bdbde9e03330d3a406d8b95aa3877152cf36
created 2007-07-08 00:08 -0700
pushed unknown
jwalden jwalden - Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros.
61fefadbf64bc584b77ce613c7d19b49bbfb5ba4
created 2007-07-05 15:44 -0700
pushed unknown
dbaron dbaron - Initialize mPendingInstantiateEvent to null. b=386889 r+sr=biesi
9f620bb15d287da36510fabe17071d65f2a94c88
created 2007-06-23 01:44 -0700
pushed unknown
cbiesinger cbiesinger - bug 382113 set LOAD_DOCUMENT_URI for <object> loads that load a document
384c2f37c53a66dea7059cddedd7195b84714654
created 2007-05-23 12:53 -0700
pushed unknown
bzbarsky bzbarsky - Make sure we flush out content before we try to set up the plug-in, sincethat's going to perform DOM access that can flush. Bug 377070, r+sr=biesi
9b4120ace2a0d29732d15a4a129ae0c2c44d3438
created 2007-05-22 14:45 -0700
pushed unknown
Olli Pettay Olli Pettay - Bug 378776, Need safe way to iterate a document's presshells, r+sr=bz
037001687c8fbc60e127ca7f535dcb7342dabdc5
created 2007-05-01 15:24 -0700
pushed unknown
bzbarsky bzbarsky - Introduce a GetPrimaryShell() API on nsIDocument. Convert existing callers ofGetShellAt(0) to using this API. Bug 378780. API introduction part by me,r+sr=jst. Mass-changes done by taras using squash, r+sr=me
9b2a99adc05e53cd4010de512f50118594756650
created 2007-03-22 10:30 -0700
pushed unknown
hg hg - Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,
less more (0) tip