help
|
diff browse annotate |
1c9d050ca983a13b4f1a63bcff889f6bfb2d0545 created 2008-03-22 09:50 -0700 pushed unknown |
jst | jst - Landing followup fix for bug 402983 and re-enabling the new stricter file URI security policies. r+sr=bzbarsky@mit.edu |
|
diff browse annotate |
49c3394f31353d8b517033b4ca0bc10032e7f144 created 2008-03-17 17:36 -0700 pushed unknown |
jst | jst - Fixing bug 395110. Give type attribute higher priority when deciding what plugin to use. r=jonas@sicking.cc, sr=bzbarsky@mit.edu |
|
diff browse annotate |
a054532372902bafaf15f94820d0863095afdb60 created 2008-03-14 16:08 -0700 pushed unknown |
jonas | jonas - Bug 401155: Make it safe to create a wrapper for an object at any time by making sure wrapping doesn't write script. Also set up a service that tries to keep track of when it's safe to execute script. r=bz sr=jst |
|
diff browse annotate |
c591c1b71935ef631cd9ec64d5ae2a6946f5bafc created 2008-03-12 14:52 -0700 pushed unknown |
dcamp | dcamp - Bug 394485: Prevent loading blocklisted urls loaded from <object> tags. r=jonas, sr=biesi, blocking1.9=stuart |
|
diff browse annotate |
d025ab2f8a83dd4538412c38b0d98a0d8c35b732 created 2008-03-10 19:18 -0700 pushed unknown |
jonas | jonas - Back out due to failed mochitest |
|
diff browse annotate |
d94399ec917e156d8107206268ff2fe889a73cf8 created 2008-03-10 17:49 -0700 pushed unknown |
jonas | jonas - Bug 401155: Make sure plugins and XBL constructors not execute when creating a script wrapper if it's not safe to execute scripts. r=bz sr=jst. |
|
diff browse annotate |
b40d7a61f35c1dda5693148ac2a688fa6e22bf35 created 2008-02-28 18:06 -0800 pushed unknown |
jst | jst - Fixing bug 410946. Prevent plugins from being destroyed while there's code from those plugins on the stack. r+sr=bzbarsky@mit.edu, a=beltzner@mozilla.com |
|
diff browse annotate |
6db6583411045d5b2bf4b131a812f7273c3e6805 created 2008-02-26 16:29 -0800 pushed unknown |
dtownsend | dtownsend - Bug 409025: OBJECTs with type attribute but no data attribute do not fire plugin errors. r=biesi, sr=jst |
|
diff browse annotate |
360c3ce4a5252b0a205bee7cb60d1df3b3b5efb8 created 2007-12-27 03:49 -0800 pushed unknown |
dtownsend | dtownsend - Bug 388445: Notify user when plugin on page is blocklisted. r=gavin, sr=jst |
|
diff browse annotate |
6e1c7a6ac8b56f8f1b3855d5c4af901e41b63cb0 created 2007-12-03 13:57 -0800 pushed unknown |
bzbarsky | bzbarsky - Propagate the node's principal as the owner to <object> loads as needed, and allow <object data="javascript:"> to work. Bug 353334 and bug 300263, r=biesi, sr=jst, a=dsicore |
|
diff browse annotate |
41cf0219c08b67cafbbee8af6ae633daae73884c created 2007-11-07 09:25 -0800 pushed unknown |
bzbarsky | bzbarsky - Handle image embeds with a null URI. Bug 402320, r+sr=jst |
|
diff browse annotate |
3451c90a8e37010095a3e657f2077e01682beae2 created 2007-09-25 13:41 -0700 pushed unknown |
gavin | gavin - Back out the patch for bug 393845 because it appears the regressions it caused are worse than the bug it fixed (a=biesi) |
|
diff browse annotate |
90127e35afe874e0d7bb13a898582f566aff5342 created 2007-09-14 11:57 -0700 pushed unknown |
bzbarsky | bzbarsky - Make disabling image loading in prefs also block images loaded via <object>. Bug 393503, r+sr=biesi, a=jst |
|
diff browse annotate |
d949791acaa512b94804770cfcf112e5e3d25dea created 2007-09-05 13:33 -0700 pushed unknown |
cbiesinger | cbiesinger - 393845 Stop plugins from content instead of from layout. Also, reget the frame after stopping the plugin, as that may process events. Finally, make the object frame not touch member variables after stopping the plugin. r+sr=bz a=jst |
|
diff browse annotate |
488bc73ac2de8efd6ba5f747ba601e81a2953784 created 2007-08-20 20:26 -0700 pushed unknown |
bzbarsky | bzbarsky - Make <object> do the same text/plain sniffing that <iframe> does, and use the content type hint if the type comes back as application/octet-stream or sniffed-binary. Bug 389677, r+sr=biesi, a=sicking |
|
diff browse annotate |
15ae98de61671cd75563f28163c022c3be042d42 created 2007-08-09 22:35 -0700 pushed unknown |
bzbarsky | bzbarsky - Make NS_CheckContent(Load|Process)Policy only take a principal, not a principal and a uri. Get the URI from the principal. Bug 391438, r+sr+a=sicking |
|
diff browse annotate |
45c61f5bc283e2492bbf1206e9216cbbf3083093 created 2007-08-07 18:16 -0700 pushed unknown |
bzbarsky | bzbarsky - Use the principal doing the load to decide on the URI to pass to content policies. This will help do the right thing for data:/javascript:/about:blank, as well as allow us to skip content policies altogether if the caller is system. Bug 388597, r+sr=sicking |
|
diff browse annotate |
cd11bc5ba7b247b90f253baca457d3c1865cb262 created 2007-08-06 17:32 -0700 pushed unknown |
cbiesinger | cbiesinger - Bug 390385 make sure that plugins don't get instantiated before the first Reflow of the objectframe, so that the first NPP_SetWindow call contains the right dimensions r+sr=bz |
|
diff browse annotate |
b5106a98eb526b9cf447c96abb703bb941b0ef55 created 2007-08-06 11:02 -0700 pushed unknown |
cbiesinger | cbiesinger - 364235 don't instantiate plugins for URLs with unknown schemes unless we also have a type specified r+sr=bz |
|
diff browse annotate |
605278dac45265081c1e582d649484dea39b032f created 2007-08-02 14:15 -0700 pushed unknown |
cbiesinger | cbiesinger - 382378 call NotifyContentObjectWrapper after the plugin has been instantiated so that scriptable plugins work correctly r+sr=bz |
|
diff browse annotate |
e3ed4f1f01e401b872cd3a78d917feffe547df57 created 2007-08-02 13:16 -0700 pushed unknown |
cbiesinger | cbiesinger - 322170 ignore errors from OnStartRequest (NPP_NewStream) for Shockwave on the Mac r=jst sr=bz |
|
diff browse annotate |
81977eb555a1ab6a8a0db9f7f5e277dc1af32487 created 2007-08-02 10:54 -0700 pushed unknown |
bzbarsky | bzbarsky - Flush layout before starting to pump data into plug-ins if we started the data |
|
diff browse annotate |
804826945c80b8e4492c423435fac9e7e5001553 created 2007-07-26 19:49 -0700 pushed unknown |
jonas | jonas - Bug 389508: Cross site XMLHttpRequest. r=jst/biesi sr/dveditz/biesi |
|
diff browse annotate |
ff24e969a342dd8c7cbe8a5e5e87bb11c9858370 created 2007-07-26 16:34 -0700 pushed unknown |
jonas | jonas - backout due to orange |
|
diff browse annotate |
e429a8c63ba627a18d8d8052e83def6d06a9e514 created 2007-07-26 15:20 -0700 pushed unknown |
jonas | jonas - Bug 389508: Implement Cross site XMLHttpRequest. r=jst sr=dveditz,biesi |
|
diff browse annotate |
7bf43c2a9f1485154798db2e93e4cbe64c9682b6 created 2007-07-18 17:28 -0700 pushed unknown |
cbiesinger | cbiesinger - 385118 make sure to set mInstantiating to false again before returning |
|
diff browse annotate |
a22bccf5eae298d6f44864ed10a3bf56c868f252 created 2007-07-18 15:02 -0700 pushed unknown |
cbiesinger | cbiesinger - bug 309523 remove now-addressed XXX comment |
|
diff browse annotate |
3a702175fcb9c14ca1da0d31d346f531a0d5a4c1 created 2007-07-18 14:48 -0700 pushed unknown |
cbiesinger | cbiesinger - bug 347736 instantiate <embed> plugins by extension if we don't have a MIME type |
|
diff browse annotate |
a232c160cbcf7c9a6a526a10431e07c64f1b949f created 2007-07-17 00:43 -0700 pushed unknown |
Olli Pettay | Olli Pettay - Bug 386599, Recursive <object> with border hangs Firefox, r=biesi, sr=bz |
|
diff browse annotate |
557272ece39f5caa085fd534b4a9b8b1ad5ef637 created 2007-07-13 17:28 -0700 pushed unknown |
flamingice | flamingice - Bug 330511, Plugin-in blocklisting, r+sr=jst |
|
diff browse annotate |
ab58bdbde9e03330d3a406d8b95aa3877152cf36 created 2007-07-08 00:08 -0700 pushed unknown |
jwalden | jwalden - Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros. |
|
diff browse annotate |
61fefadbf64bc584b77ce613c7d19b49bbfb5ba4 created 2007-07-05 15:44 -0700 pushed unknown |
dbaron | dbaron - Initialize mPendingInstantiateEvent to null. b=386889 r+sr=biesi |
|
diff browse annotate |
9f620bb15d287da36510fabe17071d65f2a94c88 created 2007-06-23 01:44 -0700 pushed unknown |
cbiesinger | cbiesinger - bug 382113 set LOAD_DOCUMENT_URI for <object> loads that load a document |
|
diff browse annotate |
384c2f37c53a66dea7059cddedd7195b84714654 created 2007-05-23 12:53 -0700 pushed unknown |
bzbarsky | bzbarsky - Make sure we flush out content before we try to set up the plug-in, sincethat's going to perform DOM access that can flush. Bug 377070, r+sr=biesi |
|
diff browse annotate |
9b4120ace2a0d29732d15a4a129ae0c2c44d3438 created 2007-05-22 14:45 -0700 pushed unknown |
Olli Pettay | Olli Pettay - Bug 378776, Need safe way to iterate a document's presshells, r+sr=bz |
|
diff browse annotate |
037001687c8fbc60e127ca7f535dcb7342dabdc5 created 2007-05-01 15:24 -0700 pushed unknown |
bzbarsky | bzbarsky - Introduce a GetPrimaryShell() API on nsIDocument. Convert existing callers ofGetShellAt(0) to using this API. Bug 378780. API introduction part by me,r+sr=jst. Mass-changes done by taras using squash, r+sr=me |
|
diff browse annotate |
9b2a99adc05e53cd4010de512f50118594756650 created 2007-03-22 10:30 -0700 pushed unknown |
hg | hg - Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT, |