94d1d69dc1
Bug 1373513 - Part 1: data:image, data:css, and data:fonts should be same origin. r=smaug
...
For font-face
https://drafts.csswg.org/css-fonts-3/#font-fetching-requirements
/* data url's with no redirects are treated as same origin */
src: url("data:application/font-woff;base64,...");
For image
https://html.spec.whatwg.org/multipage/images.html#updating-the-image-data
Step 12
⌛ Fetch request. Let this instance of the fetching algorithm be
associated with image request.
This will go to Fetch spec then.
For <link rel="stylesheet" href="data:text/css" ...>
https://html.spec.whatwg.org/multipage/semantics.html#obtaining-a-resource-from-a-link-element
Step 10
Fetch request.
This will also go to Fetch spec then.
[Fetch] specification,
https://fetch.spec.whatwg.org/#main-fetch , step 12,
request’s current url’s scheme is "data"
1. Set request’s response tainting to "basic".
And from
https://html.spec.whatwg.org/multipage/urls-and-fetching.html#terminology-3
A response whose type is "basic", "cors", or "default" is
CORS-same-origin.
For subresource loading using data: URI, it should be treated as same
origin.
2017-07-12 11:00:13 +08:00
4e9cf83ee8
Bug 1378712 - Remove all trailing whitespaces r=Ehsan
...
MozReview-Commit-ID: Kdz2xtTF9EG
--HG--
extra : rebase_source : 7235b3802f25bab29a8c6ba40a181a722f3df0ce
2017-07-06 14:00:35 +02:00
9679cb9dce
Bug 1371457 - Change restyle marker data to animation state. r=bholley,gregtatum
...
Stylo doesn't have a good equivalent for restyle hints to expose in markers and
the ones exposed for Gecko aren't very accurate either, so we don't want to
expose the restyle hint anymore.
At the same time, several animation restyle tests currently use the hint inside
the marker to check when animation-only restyles have happened. We can preserve
this by changing the data inside the marker to be a flag for whether the restyle
is animation only, which we know for both Gecko and Stylo.
MozReview-Commit-ID: 8L8KU8Ush7P
--HG--
extra : rebase_source : 4eef80653c1ef79ee1539d27fe6a70fbfaf441ad
2017-06-28 11:59:28 -07:00
68794e5c6e
Bug 1376164 - Turn nsDocumentViewer::mHintCharset and mForceCharacterSet into const mozilla::Encoding*. r=hsivonen
...
MozReview-Commit-ID: HTi2eNwDH99
--HG--
extra : rebase_source : 13c702981c188a395b6026883c3731e816f55240
2017-06-25 22:46:08 +09:00
4e00eff077
merge mozilla-inbound to mozilla-central a=merge
2017-06-27 10:56:41 +02:00
f115503a0b
Bug 1372405 - Provide names for all runnables in the tree (r=froydnj)
...
MozReview-Commit-ID: DKR6ROiHRS7
2017-06-26 14:19:58 -07:00
b515c9c804
Bug 1373984 - Turn nsIDocument::mCharacterSet into mozilla::NotNull<const mozilla::Encoding*>. r=hsivonen
...
MozReview-Commit-ID: GF0YXDwfA14
--HG--
extra : rebase_source : fdae0046f882d47fb539a7f882364e5c5caafdcd
extra : source : 49249788c0dee331ac2989dc39f0505d965a7bd8
2017-06-18 20:37:50 +09:00
dfc1ad2562
Backed out changeset 7235d05662b0 (bug 1373984) for Android bustage. r=backout on a CLOSED TREE
2017-06-25 18:30:13 +02:00
2e04751921
Bug 1373984 - Turn nsIDocument::mCharacterSet into mozilla::NotNull<const mozilla::Encoding*>. r=hsivonen
...
MozReview-Commit-ID: GF0YXDwfA14
--HG--
extra : rebase_source : a84ab644f52e68676b45f112ff69f868d89f6177
extra : source : 49249788c0dee331ac2989dc39f0505d965a7bd8
2017-06-18 20:37:50 +09:00
e02435a31e
Backed out changeset 77af189b5c49 (bug 1373984) for build bustage in nsHtml5Parser.cpp a=backout CLOSED TREE
...
MozReview-Commit-ID: 6kBmU71j2To
2017-06-25 05:10:14 -07:00
241039fd97
Bug 1373984 - Turn nsIDocument::mCharacterSet into mozilla::NotNull<const mozilla::Encoding*>. r=hsivonen
...
MozReview-Commit-ID: GF0YXDwfA14
--HG--
extra : rebase_source : 09da1685795583513bf019d61c58230c2c4d298d
extra : source : 49249788c0dee331ac2989dc39f0505d965a7bd8
2017-06-18 20:37:50 +09:00
f1364a75ea
Bug 1374580 (part 3) - Remove ns{,C}Substring typedefs. r=froydnj.
...
All the instances are converted as follows.
- nsSubstring --> nsAString
- nsCSubstring --> nsACString
--HG--
extra : rebase_source : cfd2238c52e3cb4d13e3bd5ddb80ba6584ab6d91
2017-06-20 19:19:52 +10:00
eaa22c46f8
Bug 1373604 - Only try to switch focus to targetDocShell if the load succeeds. r=smaug
...
MozReview-Commit-ID: H1TsRcbagg4
2017-06-21 14:54:15 +08:00
8a1350b5a6
Backed out changeset 4f6302a98ae4 (bug 1372405)
...
--HG--
extra : rebase_source : 41632f3158e88e692809731394a683d065a73dfb
2017-06-21 13:59:26 +02:00
6b3e84ed5f
Bug 1372405 - Provide names for all runnables in the tree (r=froydnj)
...
MozReview-Commit-ID: DKR6ROiHRS7
2017-06-20 21:44:11 -07:00
013fb0680e
merge mozilla-inbound to mozilla-central a=merge
2017-06-20 11:26:40 +02:00
954618ad23
Bug 1362903 - Use reftest-wait to ensure this test finishes. r=smaug
...
This prevents a subsequent test from being started before this test is finished.
MozReview-Commit-ID: FPgVVMk6qeC
--HG--
extra : rebase_source : 5789af451fe67660f66e8bc0dc0b5dc709918db0
2017-06-19 11:34:15 +09:00
9e38f7b8fc
Bug 1319111 - Expose 'result principal URI' on LoadInfo as a source for NS_GetFinalChannelURI (removes some use of LOAD_REPLACE flag). r=bz, r=mikedeboer
...
--HG--
extra : rebase_source : c9690f4b8decd39a10da676bd50ec09cb2ad8892
2017-05-30 18:07:59 +02:00
396962011a
Bug 1363546 - Store and report HSTS upgrade source r=francois,keeler,mayhemer p=francois
...
Add a field to the HSTS cache which indicates the source of the HSTS
entry if known, from the preload list, organically seen header, or HSTS
priming, or unknown otherwise. Also adds telemetry to collect the source
when upgrading in NS_ShouldSecureUpgrade.
MozReview-Commit-ID: 3IwyYe3Cn73
--HG--
extra : rebase_source : 9b8daac3aa02bd7a1b4285fb1e5731a817a76b7f
2017-05-23 15:31:37 -07:00
829704554e
Bug 1370788 - Move XFO out of nsDSURIContentListener.cpp into dom/security. r=smaug
2017-06-19 06:59:44 +02:00
838ccc4108
Bug 1369025 - Remove mozilla::dom::EncodingUtils. r=hsivonen
...
MozReview-Commit-ID: 5O5WtxbmATQ
--HG--
rename : dom/encoding/encodingsgroups.properties => intl/locale/encodingsgroups.properties
extra : rebase_source : 13143b43ee745b618e05ed1b6991d69781c2767d
2017-06-17 11:54:40 +09:00
432653453a
Bug 1261841 part 2 - Use encoding_rs instead of uconv. r=emk,mystor.
...
MozReview-Commit-ID: 15Y5GTX98bv
2017-06-13 13:23:23 +03:00
632fd14dfa
Bug 1024557 - Ignore x-frame-options if CSP with frame-ancestors exists. r=smaug
2017-06-07 21:17:49 +02:00
86374cab11
Bug 1369014: Do not pass explicitly pass a triggeringPrincipal within nsDocShellTreeOwner::HandleEvent. r=smaug
...
--HG--
extra : rebase_source : 832b69c0edec7f004afdf410e231adb660df0769
2017-06-07 14:25:46 +02:00
dd81367ed0
Bug 1337858 - Replace CopyFavicon in the Docshell with a proper favicons API. r=standard8
...
MozReview-Commit-ID: 8wjSbj0FTwE
--HG--
extra : rebase_source : 9957affac43f7e04dcd94d2fa9cf2d973cd327de
2017-05-18 16:48:23 +02:00
d0c653622f
Bug 1357386: Gather telemetry for toplevel data: URI loads. r=dveditz,francois
2017-05-31 20:24:17 +02:00
3fc12a8c6e
Bug 1363977 - Have loadTabs() provide the correct triggeringPrincipal. r=gijs,smaug
2017-05-29 21:32:21 +02:00
bdfe9a25bf
Backed out changeset 2b92af4575ae (bug 1357386)
2017-05-30 08:51:22 +02:00
74a7c96cd0
Bug 1357386: Have loadTabs() provide the correct triggeringPrincipal. r=gijs,smaug
2017-05-30 08:31:08 +02:00
c1a123b391
Bug 1363327 - remove unused config variable MOZ_DEVTOOLS_ALL;r=ochameau
...
The variable MOZ_DEVTOOLS_ALL was only used in order to register about:debugging and should
no longer be needed.
MozReview-Commit-ID: 16di87Cad2n
--HG--
extra : rebase_source : 19be6ea118c00293e36b4a1d7e3441499ecb3c62
2017-05-23 19:38:07 +02:00
5fb78f1d7e
Bug 1363327 - register about:debugging dynamically using a manifest;r=ochameau
...
MozReview-Commit-ID: 2WG5zN6p1EK
--HG--
extra : rebase_source : e64de772772242fbae8de186df0f97ba60df92d2
2017-05-26 10:09:42 +02:00
b852ed009a
Backout of 7f28c1084c47 (bug 1319111) for security checks breakage, r=me
2017-05-25 18:16:02 +02:00
5f3173e90f
Bug 1365306 - Remove net::ThrottlingService, don't suspend/resume download channels on page load. r=hurley
2017-05-18 14:09:00 -04:00
2dfe5d94b8
Bug 1319111 - Expose 'result principal URI' on LoadInfo as a source for NS_GetFinalChannelURI (removes some use of LOAD_REPLACE flag). r=bz
2017-05-23 08:09:00 -04:00
8266cde3a0
Bug 817374 - Fix inconsistency of the setOverLink parameter. r=mossop
...
MozReview-Commit-ID: 6rLOm1T2sOd
--HG--
extra : rebase_source : 1ab6b328ce4190f40934720c9c4c1fd94107d217
2016-11-21 21:39:15 +09:00
d6d727a69e
backout of f9abb9c83452 (bug 1319111) for crashes, r=bz
2017-05-13 13:55:11 +02:00
0a1e1fe23b
Backed out changeset 95ff98f1c2e5 (bug 1319111) for talos failures a=backout
...
MozReview-Commit-ID: Gs09moFm5rQ
2017-05-12 18:24:42 -07:00
70f62bdec1
backout of f9abb9c83452 (bug 1319111) for crashes, r=bz
2017-05-12 22:13:49 +02:00
1b5ad2c128
Merge inbound to central, a=merge
...
MozReview-Commit-ID: DfRZi0gKjit
2017-05-10 16:48:03 -07:00
faf81a4714
Bug 1087380 - avoid alternate (www....com) URI fixup for localhost and items with ports, r=bz
...
MozReview-Commit-ID: HB9SxRSWnz
--HG--
extra : rebase_source : 99a9708588b277e31c8082b9579371609fc658d1
2017-05-06 19:59:24 +01:00
630810655b
Bug 1359204 - Use SystemPrincipal as TriggeringPrincipal when loading page as view-source. r=bz
2017-05-10 18:43:04 +02:00
725d1c193f
Bug 1358297: Part 3. Create special case for stripping CR and LF on TSubstring, and use it in all the places that it is called. Use ASCIIMask to make it fast. r=froydnj
...
MozReview-Commit-ID: 5ugh3Ma0OtH
--HG--
extra : rebase_source : 956a7a0535c3b7433fadfa65d0cfc26d9915f61a
2017-05-10 13:12:36 -04:00
0e308b0c4f
Bug 1348050 - Part 3: Mark channel as urgent-start for loading image. r=baku,mayhemer
...
This part is mainly to mark the channel as urgent-start if src related
attributes in HTMLImageElement and HTMLInputElement is set and the channel is
open due to user interaction. Unfortunately, we cannot just check the event
state just after creating channel since some loading image tasks will be queue
and execute in stable state. Thus, I store the event state in elements and
pass it to the place where create the channel.
MozReview-Commit-ID: GBdAkPfVzsn
--HG--
extra : rebase_source : 715352317b4b600f8a7f78b7bc22b894bb272d27
2017-04-25 09:17:38 +08:00
f2d9eb6a36
Bug 1358469. Revert our web-incompatible change to rel=noreferrer targeting behavior. r=mystor
2017-05-05 13:20:42 -04:00
a1b64b4694
Bug 1319111 - Expose URI to make security check against on LoadInfo (no LOAD_REPLACE flag). r=bz
2017-01-27 19:10:01 +01:00
7652396698
Bug 1284579 - Part 2: revise NS_ShouldCheckAppCache. r=valentin
...
There's one redudant NS_ShouldCheckAppCache(nsIURI*, bool) is not used
anymore. Also we remove the extra usePrivateBrowsing argument, since we
can get this information from nsIPrincipal.
2017-05-04 09:40:00 +08:00
b49ab64eb4
Bug 1355039 - Ensure the right url is used for reloading. r=bz
2017-05-03 11:04:02 -04:00
8bd7c966ab
Bug 1348044 - Mark the channel as UrgentStart for top level document loading. r=smaug
...
The urgent-start classification will tell the network requests scheduler to perform it with the highest priority and also ignoring any parallelism or overall connection limits. Doing this for top level document load could increase the responsiveness to users.
2017-04-26 04:27:00 -04:00
bc1d6a21a2
Bug 1358320 - Make TimeStamp::ProcessCreation()'s outparam optional. r=gsvelto.
...
TimeStamp::ProcessCreations()'s aIsInconsistent outparam is ignored by the
majority of its caller. This patch makes it optional. Notably, this makes
ProcessCreation() easier to use in a constructor's initializer list.
2017-04-26 14:55:54 +10:00
7711007990
Bug 1359092 - Extend loadURI within nsIWebNavigation.idl by a triggeringPrincipal argument. r=bz
2017-04-25 12:22:25 +02:00
Yoshi Huang
Sylvestre Ledru
J. Ryan Stinnett
Masatoshi Kimura
Carsten "Tomcat" Book
Bill McCloskey
Sebastian Hengst
Wes Kocher
Nicholas Nethercote
Samael Wang
Hiroyuki Ikezoe
Honza Bambas
Kate McKinley
Christoph Kerschbaumer
Henri Sivonen
Marco Bonardo
Julian Descottes
Gijs Kruitbosch
Milan Sreckovic
Tom Tung
Boris Zbarsky
Olli Pettay
Kershaw Chang