created 2008-03-22 09:50 -0700
pushed unknown
jst jst - Landing followup fix for bug 402983 and re-enabling the new stricter file URI security policies.
created 2008-03-17 17:36 -0700
pushed unknown
jst jst - Fixing bug 395110. Give type attribute higher priority when deciding what plugin to use.,
created 2008-03-14 16:08 -0700
pushed unknown
jonas jonas - Bug 401155: Make it safe to create a wrapper for an object at any time by making sure wrapping doesn't write script. Also set up a service that tries to keep track of when it's safe to execute script. r=bz sr=jst
created 2008-03-12 14:52 -0700
pushed unknown
dcamp dcamp - Bug 394485: Prevent loading blocklisted urls loaded from <object> tags. r=jonas, sr=biesi, blocking1.9=stuart
created 2008-03-10 19:18 -0700
pushed unknown
jonas jonas - Back out due to failed mochitest
created 2008-03-10 17:49 -0700
pushed unknown
jonas jonas - Bug 401155: Make sure plugins and XBL constructors not execute when creating a script wrapper if it's not safe to execute scripts. r=bz sr=jst.
created 2008-02-28 18:06 -0800
pushed unknown
jst jst - Fixing bug 410946. Prevent plugins from being destroyed while there's code from those plugins on the stack.,
created 2008-02-26 16:29 -0800
pushed unknown
dtownsend dtownsend - Bug 409025: OBJECTs with type attribute but no data attribute do not fire plugin errors. r=biesi, sr=jst
created 2007-12-27 03:49 -0800
pushed unknown
dtownsend dtownsend - Bug 388445: Notify user when plugin on page is blocklisted. r=gavin, sr=jst
created 2007-12-03 13:57 -0800
pushed unknown
bzbarsky bzbarsky - Propagate the node's principal as the owner to <object> loads as needed, and allow <object data="javascript:"> to work. Bug 353334 and bug 300263, r=biesi, sr=jst, a=dsicore
created 2007-11-07 09:25 -0800
pushed unknown
bzbarsky bzbarsky - Handle image embeds with a null URI. Bug 402320, r+sr=jst
created 2007-09-25 13:41 -0700
pushed unknown
gavin gavin - Back out the patch for bug 393845 because it appears the regressions it caused are worse than the bug it fixed (a=biesi)
created 2007-09-14 11:57 -0700
pushed unknown
bzbarsky bzbarsky - Make disabling image loading in prefs also block images loaded via <object>. Bug 393503, r+sr=biesi, a=jst
created 2007-09-05 13:33 -0700
pushed unknown
cbiesinger cbiesinger - 393845 Stop plugins from content instead of from layout. Also, reget the frame after stopping the plugin, as that may process events. Finally, make the object frame not touch member variables after stopping the plugin. r+sr=bz a=jst
created 2007-08-20 20:26 -0700
pushed unknown
bzbarsky bzbarsky - Make <object> do the same text/plain sniffing that <iframe> does, and use the content type hint if the type comes back as application/octet-stream or sniffed-binary. Bug 389677, r+sr=biesi, a=sicking
created 2007-08-09 22:35 -0700
pushed unknown
bzbarsky bzbarsky - Make NS_CheckContent(Load|Process)Policy only take a principal, not a principal and a uri. Get the URI from the principal. Bug 391438, r+sr+a=sicking
created 2007-08-07 18:16 -0700
pushed unknown
bzbarsky bzbarsky - Use the principal doing the load to decide on the URI to pass to content policies. This will help do the right thing for data:/javascript:/about:blank, as well as allow us to skip content policies altogether if the caller is system. Bug 388597, r+sr=sicking
created 2007-08-06 17:32 -0700
pushed unknown
cbiesinger cbiesinger - Bug 390385 make sure that plugins don't get instantiated before the first Reflow of the objectframe, so that the first NPP_SetWindow call contains the right dimensions r+sr=bz
created 2007-08-06 11:02 -0700
pushed unknown
cbiesinger cbiesinger - 364235 don't instantiate plugins for URLs with unknown schemes unless we also have a type specified r+sr=bz
created 2007-08-02 14:15 -0700
pushed unknown
cbiesinger cbiesinger - 382378 call NotifyContentObjectWrapper after the plugin has been instantiated so that scriptable plugins work correctly r+sr=bz
created 2007-08-02 13:16 -0700
pushed unknown
cbiesinger cbiesinger - 322170 ignore errors from OnStartRequest (NPP_NewStream) for Shockwave on the Mac r=jst sr=bz
created 2007-08-02 10:54 -0700
pushed unknown
bzbarsky bzbarsky - Flush layout before starting to pump data into plug-ins if we started the data
created 2007-07-26 19:49 -0700
pushed unknown
jonas jonas - Bug 389508: Cross site XMLHttpRequest. r=jst/biesi sr/dveditz/biesi
created 2007-07-26 16:34 -0700
pushed unknown
jonas jonas - backout due to orange
created 2007-07-26 15:20 -0700
pushed unknown
jonas jonas - Bug 389508: Implement Cross site XMLHttpRequest. r=jst sr=dveditz,biesi
created 2007-07-18 17:28 -0700
pushed unknown
cbiesinger cbiesinger - 385118 make sure to set mInstantiating to false again before returning
created 2007-07-18 15:02 -0700
pushed unknown
cbiesinger cbiesinger - bug 309523 remove now-addressed XXX comment
created 2007-07-18 14:48 -0700
pushed unknown
cbiesinger cbiesinger - bug 347736 instantiate <embed> plugins by extension if we don't have a MIME type
created 2007-07-17 00:43 -0700
pushed unknown
Olli Pettay Olli Pettay - Bug 386599, Recursive <object> with border hangs Firefox, r=biesi, sr=bz
created 2007-07-13 17:28 -0700
pushed unknown
flamingice flamingice - Bug 330511, Plugin-in blocklisting, r+sr=jst
created 2007-07-08 00:08 -0700
pushed unknown
jwalden jwalden - Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros.
created 2007-07-05 15:44 -0700
pushed unknown
dbaron dbaron - Initialize mPendingInstantiateEvent to null. b=386889 r+sr=biesi
created 2007-06-23 01:44 -0700
pushed unknown
cbiesinger cbiesinger - bug 382113 set LOAD_DOCUMENT_URI for <object> loads that load a document
created 2007-05-23 12:53 -0700
pushed unknown
bzbarsky bzbarsky - Make sure we flush out content before we try to set up the plug-in, sincethat's going to perform DOM access that can flush. Bug 377070, r+sr=biesi
created 2007-05-22 14:45 -0700
pushed unknown
Olli Pettay Olli Pettay - Bug 378776, Need safe way to iterate a document's presshells, r+sr=bz
created 2007-05-01 15:24 -0700
pushed unknown
bzbarsky bzbarsky - Introduce a GetPrimaryShell() API on nsIDocument. Convert existing callers ofGetShellAt(0) to using this API. Bug 378780. API introduction part by me,r+sr=jst. Mass-changes done by taras using squash, r+sr=me
created 2007-03-22 10:30 -0700
pushed unknown
hg hg - Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,
less more (0) tip