mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - r=release-managers,diannaS 

Differential Revision: https://phabricator.services.mozilla.com/D189768
This commit is contained in:
ffxbld 2023-10-02 13:07:06 +00:00
Родитель 6a9e3fb4e9
Коммит 4fb745dae5
4 изменённых файлов: 217 добавлений и 350 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

7
netwerk/dns/effective_tld_names.dat
Просмотреть файл

@ -5881,6 +5881,7 @@ kyiv.ua
lg.ua
lt.ua
lugansk.ua
luhansk.ua
lutsk.ua
lv.ua
lviv.ua
@ -5904,11 +5905,13 @@ te.ua
ternopil.ua
uz.ua
uzhgorod.ua
uzhhorod.ua
vinnica.ua
vinnytsia.ua
vn.ua
volyn.ua
yalta.ua
zakarpattia.ua
zaporizhzhe.ua
zaporizhzhia.ua
zhitomir.ua
@ -6707,7 +6710,7 @@ org.zw
// newGTLDs
// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2023-08-26T15:11:08Z
// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2023-09-30T15:11:25Z
// This list is auto-generated, don't edit it manually.
// aaa : American Automobile Association, Inc.
// https://www.iana.org/domains/root/db/aaa.html
@ -7405,7 +7408,7 @@ cbs
// https://www.iana.org/domains/root/db/center.html
center
// ceo : CEOTLD Pty Ltd
// ceo : XYZ.COM LLC
// https://www.iana.org/domains/root/db/ceo.html
ceo

103
security/manager/ssl/StaticHPKPins.h
Просмотреть файл

@ -364,21 +364,6 @@ static const StaticFingerprints kPinset_facebook = {
kPinset_facebook_Data
};
static const char* const kPinset_yahoo_Data[] = {
kDigiCert_Assured_ID_Root_CAFingerprint,
kGlobalSign_Root_CAFingerprint,
kDigiCert_Trusted_Root_G4Fingerprint,
kDigiCert_High_Assurance_EV_Root_CAFingerprint,
kGlobalSign_Root_CA___R3Fingerprint,
kDigiCert_Global_Root_G2Fingerprint,
kDigiCert_Global_Root_CAFingerprint,
kDigiCert_Global_Root_G3Fingerprint,
};
static const StaticFingerprints kPinset_yahoo = {
sizeof(kPinset_yahoo_Data) / sizeof(const char*),
kPinset_yahoo_Data
};
/* Domainlist */
struct TransportSecurityPreload {
// See bug 1338873 about making these fields const.
@ -404,91 +389,62 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "appengine.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "apps.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "at.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "au.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "aus4.mozilla.org", true, true, true, 3, &kPinset_mozilla_services },
{ "aus5.mozilla.org", true, true, true, 7, &kPinset_mozilla_services },
{ "az.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "be.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "bi.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "blog.torproject.org", true, false, false, -1, &kPinset_tor },
{ "blogger.com", true, false, false, -1, &kPinset_google_root_pems },
{ "blogspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "br.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "bugs.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
{ "build.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
{ "business.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "ca.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "calendar.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "cd.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "cdn.ampproject.org", true, false, false, -1, &kPinset_google_root_pems },
{ "cdn.mozilla.net", true, false, true, 16, &kPinset_mozilla_services },
{ "cdn.mozilla.org", true, false, true, 17, &kPinset_mozilla_services },
{ "cg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ch.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "check.torproject.org", true, false, false, -1, &kPinset_tor },
{ "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chfr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "chit.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "chrome-devtools-frontend.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chrome.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chrome.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chromereporting-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chromiumbugs.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chromiumcodereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "cl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "classroom.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "cloud.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "cn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "co.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "code.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "code.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "codereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "codereview.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
{ "contributor.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "corp.goog", true, false, false, -1, &kPinset_google_root_pems },
{ "cr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "crash-reports-xpsp2.mozilla.com", false, false, true, 11, &kPinset_mozilla_services },
{ "crash-reports.mozilla.com", false, false, true, 10, &kPinset_mozilla_services },
{ "crash-stats.mozilla.org", false, false, true, 12, &kPinset_mozilla_services },
{ "crbug.com", true, false, false, -1, &kPinset_google_root_pems },
{ "crosbug.com", true, false, false, -1, &kPinset_google_root_pems },
{ "crrev.com", true, false, false, -1, &kPinset_google_root_pems },
{ "ct.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "datastudio.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "de.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "developer.android.com", true, false, false, -1, &kPinset_google_root_pems },
{ "developers.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "dist.torproject.org", true, false, false, -1, &kPinset_tor },
{ "dk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "dl.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "dns.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "do.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "docs.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "domains.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
{ "download.mozilla.org", false, false, true, 14, &kPinset_mozilla_services },
{ "drive.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "edit.yahoo.com", true, true, false, -1, &kPinset_yahoo },
{ "en-maktoob.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "encrypted.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "es.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "espanol.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "example.test", true, true, false, -1, &kPinset_test },
{ "exclude-subdomains.pinning.example.com", false, false, false, -1, &kPinset_mozilla_test },
{ "facebook.com", true, false, false, -1, &kPinset_facebook },
{ "fi.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "fi.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "firebaseio.com", true, false, false, -1, &kPinset_google_root_pems },
{ "firefox.com", true, true, true, 15, &kPinset_mozilla_services },
{ "fj.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "fr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "g.co", false, false, false, -1, &kPinset_google_root_pems },
{ "g4w.co", true, false, false, -1, &kPinset_google_root_pems },
{ "ggpht.com", true, false, false, -1, &kPinset_google_root_pems },
{ "gl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "glass.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "gm.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "gmail.com", false, false, false, -1, &kPinset_google_root_pems },
{ "goo.gl", true, false, false, -1, &kPinset_google_root_pems },
{ "google", true, false, false, -1, &kPinset_google_root_pems },
@ -726,7 +682,6 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "googlevideo.com", true, false, false, -1, &kPinset_google_root_pems },
{ "googleweblight.com", true, false, false, -1, &kPinset_google_root_pems },
{ "goto.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "gr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "groups.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "gstatic.cn", true, false, false, -1, &kPinset_google_root_pems },
{ "gstatic.com", true, false, false, -1, &kPinset_google_root_pems },
@ -736,84 +691,43 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "hangout", true, false, false, -1, &kPinset_google_root_pems },
{ "hangouts.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "history.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "hk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "hn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "hostedtalkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "hu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "id.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ie.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "in.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "inbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "include-subdomains.pinning.example.com", true, false, false, -1, &kPinset_mozilla_test },
{ "it.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "kr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "kz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "lens.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "li.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "login.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "login.yahoo.com", true, true, false, -1, &kPinset_yahoo },
{ "lt.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "lu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "lv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "m.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "mail-settings.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "mail.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "mail.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "maktoob.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "malaysia.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "market.android.com", true, false, false, -1, &kPinset_google_root_pems },
{ "mbasic.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "meet.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "messenger.com", true, false, false, -1, &kPinset_facebook },
{ "mt.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "mtouch.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "mu.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "mw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "mx.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "myaccount.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "myactivity.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "ni.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "nl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "no.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "np.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "nz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "oauthaccountmanager.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
{ "pa.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "passwords.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "passwordsleakcheck-pa.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
{ "payments.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "pe.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ph.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "pinning-test.badssl.com", true, false, false, -1, &kPinset_test },
{ "pinningtest.appspot.com", true, false, false, -1, &kPinset_test },
{ "pixel.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "pixel.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "pk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "pl.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "play.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "plus.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "plus.sandbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "pr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "profiles.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "py.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "qc.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "remotedesktop.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "research.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "ro.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ru.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "rw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "script.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "se.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "secure.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "security.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "services.mozilla.com", true, false, true, 6, &kPinset_mozilla_services },
{ "sg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "sites.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "spreadsheets.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "static.googleadsserving.cn", true, false, false, -1, &kPinset_google_root_pems },
{ "stats.g.doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
{ "sv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "sync.services.mozilla.com", true, false, true, 13, &kPinset_mozilla_services },
{ "t.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "tablet.facebook.com", true, false, false, -1, &kPinset_facebook },
@ -822,24 +736,14 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "telemetry.mozilla.org", true, true, true, 8, &kPinset_mozilla_services },
{ "test-mode.pinning.example.com", true, true, false, -1, &kPinset_mozilla_test },
{ "testpilot.firefox.com", false, false, true, 9, &kPinset_mozilla_services },
{ "th.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "torproject.org", false, false, false, -1, &kPinset_tor },
{ "touch.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "tr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "translate.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
{ "tunnel-staging.googlezip.net", true, false, false, -1, &kPinset_google_root_pems },
{ "tunnel.googlezip.net", true, false, false, -1, &kPinset_google_root_pems },
{ "tv.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "tw.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ua.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ua5v.com", true, false, false, -1, &kPinset_google_root_pems },
{ "uk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "upload.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "urchin.com", true, false, false, -1, &kPinset_google_root_pems },
{ "uy.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "uz.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ve.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "vn.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "w-spotlight.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "wallet.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "webfilings-eu-mirror.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
@ -864,19 +768,16 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "www.googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
{ "www.messenger.com", true, false, false, -1, &kPinset_facebook },
{ "www.torproject.org", true, false, false, -1, &kPinset_tor },
{ "xa.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "xbrlsuccess.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
{ "xn--7xa.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "youtu.be", true, false, false, -1, &kPinset_google_root_pems },
{ "youtube-nocookie.com", true, false, false, -1, &kPinset_google_root_pems },
{ "youtube.com", true, false, false, -1, &kPinset_google_root_pems },
{ "ytimg.com", true, false, false, -1, &kPinset_google_root_pems },
{ "za.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "zh.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
};
// Pinning Preload List Length = 481;
// Pinning Preload List Length = 397;
static const int32_t kUnknownId = -1;
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1704365324185000);
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1704711208887000);

441
security/manager/ssl/nsSTSPreloadList.inc
Просмотреть файл

Разница между файлами не показана из-за своего большого размера Загрузить разницу

16
services/settings/dumps/blocklists/addons-bloomfilters.json
Просмотреть файл

@ -1,5 +1,19 @@
{
"data": [
{
"stash": {
"blocked": [
"{c4ff78d2-349f-41c1-b0da-b31cf9596d79}:3.4.3",
"{c4ff78d2-349f-41c1-b0da-b31cf9596d79}:3.3.22"
],
"unblocked": []
},
"schema": 1695818184964,
"key_format": "{guid}:{version}",
"stash_time": 1695926111010,
"id": "74bc4a8e-4ab4-474d-b54f-ce86e6788fd2",
"last_modified": 1695926175791
},
{
"stash": {
"blocked": [],
@ -2482,5 +2496,5 @@
"last_modified": 1690223886167
}
],
"timestamp": 1695818184766
"timestamp": 1695926175791
}