13 Коммитов

Автор	SHA1	Сообщение	Дата
gerv%gerv.net	1856815ff1	Oops.	2001-09-20 00:02:59 +00:00
scc%mozilla.org	102170b2a0	bug #98089: ripped new license	2001-09-19 20:09:47 +00:00
brendan%mozilla.org	dbd7fed5b1	FASTLOAD_20010703_BRANCH landing, r=dbaron, sr=shaver.	2001-07-31 19:05:34 +00:00
mstoltz%netscape.com	e0fc50a6d4	Fixes for 32878, 37739. Added PR_CALLBACK macros. Changed security.principal pref syntax to a nicer syntax. Removed "security.checkxpconnect" hack.	2000-05-16 03:40:51 +00:00
mstoltz%netscape.com	9bb975256e	Fixes for 27010, 32878, and 32948.	2000-04-26 03:50:07 +00:00
mstoltz%netscape.com	57feeae5ec	Backing out changes until I can figure out why it's crashing on startup.	2000-04-23 21:25:39 +00:00
mstoltz%netscape.com	62bffdd26e	Fixes for bugs 27010, 32878, 32948.	2000-04-23 20:30:29 +00:00
norris%netscape.com	ea9d7682c1	Fix 31998 nsScriptSecurityManager not thread safe breaks table regress	2000-03-21 23:12:16 +00:00
norris%netscape.com	7d053b70b0	Adding nsAggregatePrincipal support. r=norris	2000-03-21 04:05:35 +00:00
norris%netscape.com	2b4b436f5f	Fix 25062 Reload vulnerability ... 25206 Reload vulnerability #2 Implement grant dialogs and persistence for capabilities. most r=mstoltz, some code from morse w/ r=norris	2000-02-10 04:56:56 +00:00
mstoltz%netscape.com	5014545a00	Implemented the reading of capabilities data from prefs. Reads codebase and certificate principal data and populates ScriptSecurityManager's principals table. bug= 18122 r=norris, rginda	2000-01-18 21:54:01 +00:00
warren%netscape.com	7d4fa072a5	Fix for leak/bloat stats going negative. a=jar	1999-12-10 04:27:52 +00:00
norris%netscape.com	7cd400a26f	* Fix the following bugs by tightening the default security policy. ... 17977 [DOGFOOD] Reading documents using document.body 17538 document.lastModified is exposed 17537 document.images vulnerabilities 16036 [DOGFOOD] document.Element exposes the DOM of documents from 15757 [DOGFOOD] Injecting JS code using setAttribute and getElemen 15550 Injecting text in documents from any domain using createText 15067 [DOGFOOD] getElementsByTagName() allows reading of arbitrary * Create an array of dom property policy types and initialize it when the script security manager is created. * Move some implementation code to a new shared implementation base class. * Implement privilege enabling, disabling and reverting * Implement stack walking for checking privileges. r=mstoltz@netscape.com * Modify nsIPref to support security policy work. r=neeti@netscape.com	1999-11-11 22:10:36 +00:00