Jens Hausdorf
05355d48f8
Bug 1647722 - Make ContentSecurityManager logging easier to parse r=freddyb,ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D82399
2020-07-21 17:44:19 +00:00
Frederik Braun
a7153982e8
Bug 1366973: Rename security flags to not contain DATA anymore r=geckoview-reviewers,ckerschb,snorp
...
Differential Revision: https://phabricator.services.mozilla.com/D83490
2020-07-15 11:20:45 +00:00
Nika Layzell
22a65a237e
Bug 1650163 - Part 1: Switch native remoteType values to nsCString, r=farre,geckoview-reviewers,agi
...
Differential Revision: https://phabricator.services.mozilla.com/D82104
2020-07-08 20:15:59 +00:00
Frederik Braun
9cf407544a
Bug 1644671
- systemprincipal restrictions telemetry r=tjr,ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D79142
2020-07-08 13:11:57 +00:00
Bogdan Tara
ecb7c0ac10
Backed out changeset 1e15fd6bbf25 (bug 1644671
) for telemetry related bustages CLOSED TREE
2020-07-08 15:34:15 +03:00
Frederik Braun
ae8dc932e1
Bug 1644671
- systemprincipal restrictions telemetry r=tjr,ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D79142
2020-07-08 12:06:05 +00:00
Narcis Beleuzu
339d33ec67
Backed out changeset 627f9b4fea56 (bug 1644671
) for bustages on TelemetryEventData.h.stub . CLOSED TREE
2020-07-07 20:33:53 +03:00
Frederik Braun
71de7e32d5
Bug 1644671
- systemprincipal restrictions telemetry r=tjr,ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D79142
2020-07-07 14:17:05 +00:00
Simon Giesecke
cd8b8939b9
Bug 1648010 - Replace uses of NS_LITERAL_STRING/NS_LITERAL_CSTRING macros by _ns literals. r=geckoview-reviewers,jgilbert,agi,hsivonen,froydnj
...
Differential Revision: https://phabricator.services.mozilla.com/D80860
2020-07-01 08:29:29 +00:00
Jonathan Kingston
832fdf2e6e
Bug 1642808 - Remove whitelist from dom security. r=Gijs
...
Differential Revision: https://phabricator.services.mozilla.com/D77949
2020-06-02 23:15:13 +00:00
Alexis Beingessner
0e39201277
Bug 1637727 - convert nsIOService prefs to StaticPrefs. r=KrisWright,necko-reviewers
...
converts:
* security.data_uri.block_toplevel_data_uri_navigations
* network.offline-mirrors-connectivity
Differential Revision: https://phabricator.services.mozilla.com/D77104
2020-05-28 18:23:25 +00:00
Frederik Braun
ab74268189
Bug 1613609 - prototype patch with whitelist for sysrequest r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D75064
2020-05-20 13:01:35 +00:00
Dorel Luca
305e9f8c08
Backed out changeset be2d763a80d8 (bug 1613609) for making nightlies not being able to connecto to sites fi add-ons are installed. a=backout DONTBUILD
2020-05-20 06:35:48 +03:00
Frederik Braun
b27d095e3d
Bug 1613609 - prototype patch with whitelist for sysrequest r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D75064
2020-05-19 08:55:06 +00:00
Mihai Alexandru Michis
a2026344a1
Backed out 2 changesets (bug 1613609) for causing bustages.
...
CLOSED TREE
Backed out changeset dd6e395dc342 (bug 1613609)
Backed out changeset 5bcb7b13a4ad (bug 1613609)
2020-05-18 16:38:58 +03:00
Frederik Braun
6cdb200d94
Bug 1613609 - prototype patch with whitelist for sysrequest r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D75064
2020-05-18 10:59:12 +00:00
Csoregi Natalia
5162f86676
Backed out 2 changesets (bug 1613609) for failures on nsXPConnect.cpp. CLOSED TREE
...
Backed out changeset c593a7296df4 (bug 1613609)
Backed out changeset 72199fc4ea2b (bug 1613609)
2020-05-18 13:05:12 +03:00
Frederik Braun
7bb9748003
Bug 1613609 - prototype patch with whitelist for sysrequest r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D75064
2020-05-18 09:19:28 +00:00
Christoph Kerschbaumer
026a7442f3
Bug 1636900: Remove TYPE_XBL from nsIContentPolicy. r=remote-protocol-reviewers,emilio,whimboo
...
Differential Revision: https://phabricator.services.mozilla.com/D74835
2020-05-13 06:53:28 +00:00
Frederik Braun
68b90281b3
Bug 1613609 - allow requests with new loadinfo flag to succeeed r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D68391
--HG--
extra : moz-landing-system : lando
2020-04-07 11:55:23 +00:00
Emilio Cobos Álvarez
4b9fdf3d73
Bug 1627707 - Rename LoadInfo::LoadingPrincipal to GetLoadingPrincipal as it can return null. r=ckerschb
...
Mostly a matter of:
rg -l '\->LoadingPrincipal' | xargs sed -i 's/->LoadingPrincipal/->GetLoadingPrincipal/g'
And then clang-format. But I tweaked manually nsHttpChannelAuthProvider (move
the variable where it's used, don't take a useless strong ref),
AddonContentPolicy (move the declaration of the variable to the if condition),
and BackgroundUtils (same).
Differential Revision: https://phabricator.services.mozilla.com/D69828
--HG--
extra : moz-landing-system : lando
2020-04-06 18:57:36 +00:00
Cosmin Sabou
d557e2ed22
Backed out 3 changesets (bug 1627707) for build bustages @ mozilla::net::LoadInfo.
...
Backed out changeset 65d6a90651ce (bug 1627707)
Backed out changeset 378ec30d9979 (bug 1627707)
Backed out changeset 058a19e11b06 (bug 1627707)
2020-04-06 20:07:04 +03:00
Emilio Cobos Álvarez
97872f2fee
Bug 1627707 - Rename LoadInfo::LoadingPrincipal to GetLoadingPrincipal as it can return null. r=ckerschb
...
Mostly a matter of:
rg -l '\->LoadingPrincipal' | xargs sed -i 's/->LoadingPrincipal/->GetLoadingPrincipal/g'
And then clang-format. But I tweaked manually nsHttpChannelAuthProvider (move
the variable where it's used, don't take a useless strong ref),
AddonContentPolicy (move the declaration of the variable to the if condition),
and BackgroundUtils (same).
Differential Revision: https://phabricator.services.mozilla.com/D69828
--HG--
extra : moz-landing-system : lando
2020-04-06 16:00:43 +00:00
Sebastian Streich
f7280c333b
Bug 1622042 - Refactor NsContentUtils:Allowsl10n r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D66633
--HG--
extra : moz-landing-system : lando
2020-03-26 13:18:40 +00:00
Christoph Kerschbaumer
3e884ce321
Bug 1188538: Ensure every protocol handler sets a valid security flag. r=bholley,mixedpuppy
...
Differential Revision: https://phabricator.services.mozilla.com/D67496
--HG--
extra : moz-landing-system : lando
2020-03-20 08:25:18 +00:00
Stefan Hindli
91f4c18048
Backed out 4 changesets (bug 1622042) for causing AddonInstallException: Could not install add-on: c:\users\task_1584560140\appdata\local\temp\tmpbg9_h7.zip: ERROR_FILE_ACCESS: There was an error accessing the filesystem. CLOSED TREE
...
Backed out changeset 929043330599 (bug 1622042)
Backed out changeset b08cdd075e20 (bug 1622042)
Backed out changeset ca87f1c6b90b (bug 1622042)
Backed out changeset 27dbbb7cd590 (bug 1622042)
2020-03-18 22:49:23 +02:00
Sebastian Streich
56a7a311d1
Bug 1622042 - Refactor NsContentUtils:Allowsl10n r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D66633
--HG--
extra : moz-landing-system : lando
2020-03-18 16:00:40 +00:00
Cosmin Sabou
029804e3f7
Backed out 4 changesets (bug 1622042) for causing build bustages on nsContentUtils.cpp. CLOSED TREE
...
Backed out changeset dc7af5abb8de (bug 1622042)
Backed out changeset 16e3b4a1fefc (bug 1622042)
Backed out changeset f60b16588dad (bug 1622042)
Backed out changeset 4193aea26e28 (bug 1622042)
--HG--
extra : amend_source : 2f2befe5703f683ccaac6d634fc4a262db9fff86
2020-03-17 20:38:35 +02:00
Sebastian Streich
63b92a302c
Bug 1622042 - Refactor NsContentUtils:Allowsl10n r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D66633
--HG--
extra : moz-landing-system : lando
2020-03-17 17:11:42 +00:00
Frederik Braun
ec09510e3c
Bug 1544011 - remove exception that SystemPrincipal may open discovery pane r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D65541
--HG--
extra : moz-landing-system : lando
2020-03-05 18:43:04 +00:00
Frederik Braun
59d5c8bfd3
Bug 1561318 - rm exception that fennec Settings may load accounts.firefox.com using the system principal r=Gijs
...
This breaks fennec builds from mozilla-central, but fennec will only be built from
esr branches, so this code-exception that adds complexity can be removed
Differential Revision: https://phabricator.services.mozilla.com/D64384
--HG--
extra : moz-landing-system : lando
2020-02-28 12:35:34 +00:00
David Major
64ac7e058b
Bug 1610978 - Fix a clang 10 warning in DebugSecFlagType r=ckerschb
...
Clang 10 warns about the loop variable creating a copy.
Differential Revision: https://phabricator.services.mozilla.com/D60751
--HG--
extra : moz-landing-system : lando
2020-02-04 08:38:14 +00:00
Christoph Kerschbaumer
357ee3d14c
Bug 1609877: Convert prefs for domsecurity to use static prefs. r=tjr
...
Differential Revision: https://phabricator.services.mozilla.com/D60403
--HG--
extra : moz-landing-system : lando
2020-01-22 11:04:17 +00:00
Razvan Maries
41ffa16326
Backed out changeset dbaa31392a53 (bug 1609877) for build bustages on DOMSecurityMonitor.cpp. CLOSED TREE
2020-01-20 22:08:07 +02:00
Christoph Kerschbaumer
b7a9b6218a
Bug 1609877: Convert prefs for domsecurity to use static prefs. r=tjr
...
Differential Revision: https://phabricator.services.mozilla.com/D60403
--HG--
extra : moz-landing-system : lando
2020-01-20 18:10:38 +00:00
Christoph Kerschbaumer
4b1d0172e9
Bug 1607483: Disallow loading http(s) scripts into system privileged contexts. r=tjr
...
Differential Revision: https://phabricator.services.mozilla.com/D58962
--HG--
extra : moz-landing-system : lando
2020-01-17 17:29:47 +00:00
Narcis Beleuzu
4e0356f4f1
Backed out changeset caa23b535218 (bug 1607483) for mochitest failures on test_input.html. CLOSED TREE
2020-01-17 14:45:45 +02:00
Christoph Kerschbaumer
fd03c6b7d1
Bug 1607483: Disallow loading http(s) scripts into system privileged contexts. r=tjr
...
Differential Revision: https://phabricator.services.mozilla.com/D58962
--HG--
extra : moz-landing-system : lando
2020-01-17 10:17:07 +00:00
Matt Woodrow
dc86748b77
Bug 1599438 - Store sandbox flags on the LoadInfo when creating a channel for a docshell, so that we don't read a stale value from the BrowsingContext later. r=bzbarsky
...
Differential Revision: https://phabricator.services.mozilla.com/D59263
--HG--
extra : moz-landing-system : lando
2020-01-15 08:02:57 +00:00
Narcis Beleuzu
c59ca04e7b
Backed out changeset b3538b7016aa (bug 1599438) for bustages on TestHttpFuzzing.cpp . CLOSED TREE
2020-01-15 06:03:55 +02:00
Matt Woodrow
dd0d183cb4
Bug 1599438 - Store sandbox flags on the LoadInfo when creating a channel for a docshell, so that we don't read a stale value from the BrowsingContext later. r=bzbarsky
...
Differential Revision: https://phabricator.services.mozilla.com/D59263
--HG--
extra : moz-landing-system : lando
2020-01-15 02:05:57 +00:00
Narcis Beleuzu
15d6a86b62
Backed out changeset 3d924e2a2e54 (bug 1607483) for assertion failures on nsContentSecurityManager.cpp . CLOSED TREE
2020-01-14 22:28:32 +02:00
Christoph Kerschbaumer
003b30393d
Bug 1607483: Disallow loading http(s) scripts into system privileged contexts. r=tjr
...
Differential Revision: https://phabricator.services.mozilla.com/D58962
--HG--
extra : moz-landing-system : lando
2020-01-14 17:42:18 +00:00
Boris Zbarsky
6639140a09
Bug 1603806. Add a blocking reason when loads with the SEC_REQUIRE_SAME_ORIGIN_* security flags are blocked due to not being same-origin. r=ckerschb,ochameau
...
Differential Revision: https://phabricator.services.mozilla.com/D57147
--HG--
extra : moz-landing-system : lando
2019-12-16 09:36:45 +00:00
Boris Zbarsky
ee1cc488f2
Bug 1602483 part 2. Add a window id argument to CheckLoadURIWithPrincipal. r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D56428
--HG--
rename : devtools/client/webconsole/test/browser/browser_webconsole_same_origin_errors.js => devtools/client/webconsole/test/browser/browser_webconsole_checkloaduri_errors.js
rename : devtools/client/webconsole/test/browser/test-same-origin-required-load.html => devtools/client/webconsole/test/browser/test-checkloaduri-failure.html
extra : moz-landing-system : lando
2019-12-12 16:41:19 +00:00
Boris Zbarsky
cbc90e1aca
Bug 1602090 part 2. Create separate CheckMayLoad and CheckMayLoadWithReporting APIs. r=ckerschb
...
CheckMayLoadAndReport takes a window ID. This allows us to report
errors from it to the web console as needed. Most consumers know statically
whether they want reporting or not, so there's no reason to force the ones that
don't to provide window ids.
Differential Revision: https://phabricator.services.mozilla.com/D56388
--HG--
extra : moz-landing-system : lando
2019-12-13 06:24:12 +00:00
Ciure Andrei
6c95adafed
Backed out 4 changesets (bug 1602483, bug 1602090) for causing perma leackchecks CLOSED TREE
...
Backed out changeset 6b057ba06b4a (bug 1602483)
Backed out changeset 9be3269d781d (bug 1602483)
Backed out changeset e3e2c1d7478e (bug 1602090)
Backed out changeset fdc4a588912e (bug 1602090)
2019-12-12 18:37:01 +02:00
Boris Zbarsky
4425adb1cc
Bug 1602483 part 2. Add a window id argument to CheckLoadURIWithPrincipal. r=ckerschb
...
Differential Revision: https://phabricator.services.mozilla.com/D56428
--HG--
rename : devtools/client/webconsole/test/browser/browser_webconsole_same_origin_errors.js => devtools/client/webconsole/test/browser/browser_webconsole_checkloaduri_errors.js
rename : devtools/client/webconsole/test/browser/test-same-origin-required-load.html => devtools/client/webconsole/test/browser/test-checkloaduri-failure.html
extra : moz-landing-system : lando
2019-12-12 13:05:12 +00:00
Boris Zbarsky
e0acf6e9fc
Bug 1602090 part 2. Create separate CheckMayLoad and CheckMayLoadWithReporting APIs. r=ckerschb
...
CheckMayLoadAndReport takes a window ID. This allows us to report
errors from it to the web console as needed. Most consumers know statically
whether they want reporting or not, so there's no reason to force the ones that
don't to provide window ids.
Differential Revision: https://phabricator.services.mozilla.com/D56388
--HG--
extra : moz-landing-system : lando
2019-12-12 13:03:42 +00:00
Boris Zbarsky
1a285c6f35
Bug 1601377 part 1. Make it clear that nsContentUtils::PrincipalAllowsL10n never takes a null nsIPrincipal. r=smaug
...
Differential Revision: https://phabricator.services.mozilla.com/D56216
--HG--
extra : moz-landing-system : lando
2019-12-09 15:10:32 +00:00