Граф коммитов

1351 Коммитов

Автор SHA1 Сообщение Дата
Alex Catarineu 31723548da Bug 1598647 - Set Origin to null with network.http.referer.hideOnionSource r=JuniorHsu
Differential Revision: https://phabricator.services.mozilla.com/D54303

--HG--
extra : moz-landing-system : lando
2019-11-25 13:29:47 +00:00
Razvan Maries c5d796f8ad Backed out changeset 4082b974a1e6 (bug 1597704) test_isOriginPotentiallyTrustworthy.js. CLOSED TREE 2019-11-22 13:35:36 +02:00
Sebastian Streich 309ac043a0 Bug 1597704 - Move is OriginPotentially Trustworthy into Principal r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D53830

--HG--
extra : moz-landing-system : lando
2019-11-21 16:29:13 +00:00
Daniel Varga f12c40c242 Backed out changeset afe80b4ff889 (bug 1595934) Requested by ehsan to see if it fixex bug 1597915. On a CLOSED TREE 2019-11-22 02:01:51 +02:00
Christoph Kerschbaumer ca7efe86e5 Bug 1595652: Exempt loads triggered by an extension from XFO. r=jkt,mixedpuppy
Differential Revision: https://phabricator.services.mozilla.com/D53969

--HG--
extra : moz-landing-system : lando
2019-11-21 12:10:29 +00:00
Cosmin Sabou be84eb7037 Backed out 11 changesets (bug 1582512) for causing valgrind bustages.
Backed out changeset 8b850fd66bf5 (bug 1582512)
Backed out changeset 07d3631e609a (bug 1582512)
Backed out changeset fa91b085eb59 (bug 1582512)
Backed out changeset 232d5735d404 (bug 1582512)
Backed out changeset 47045fa2ffd2 (bug 1582512)
Backed out changeset 40a0f6c6cd61 (bug 1582512)
Backed out changeset 5fb3e489c31f (bug 1582512)
Backed out changeset 379318a35b20 (bug 1582512)
Backed out changeset bf81985c33b7 (bug 1582512)
Backed out changeset 1e0dd57b8041 (bug 1582512)
Backed out changeset 2787043f1fab (bug 1582512)
2019-11-20 18:44:45 +02:00
Tom Ritter 20a474798e Bug 1582512 - Fixup: correct filemode
Differential Revision: https://phabricator.services.mozilla.com/D53974

--HG--
extra : moz-landing-system : lando
2019-11-20 16:11:58 +00:00
Tom Ritter 571911416d Bug 1582512 - Add in exception cases where we disable the javascript load restrictions r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D53245

--HG--
extra : moz-landing-system : lando
2019-11-20 16:11:58 +00:00
Tom Ritter 52b85ecf29 Bug 1582512 - Record a Telemetry Event if we receive a request to load a script filename we aren't expecting r=chutten
While we're here, we also extend the collection period for evalUsage, as it is taking longer to deploy than expected.

Differential Revision: https://phabricator.services.mozilla.com/D53233

--HG--
extra : moz-landing-system : lando
2019-11-19 16:10:51 +00:00
Tom Ritter 7ce42ac1ac Bug 1582512 - Rename FilenameToEvalType to FilenameToFilenameType r=Gijs,ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D53232

--HG--
extra : moz-landing-system : lando
2019-11-18 20:44:56 +00:00
Tom Ritter 035192e513 Bug 1582512 - Rename FilenameType to FilenameTypeAndDetails r=Gijs,ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D53231

--HG--
extra : moz-landing-system : lando
2019-11-18 20:44:48 +00:00
Tom Ritter e7037fe85f Bug 1582512 - Register a ScriptValidationCallback to examine script loads in the parent process r=Gijs,ckerschb
Additionally, we disable validation on PAC scripts.

Differential Revision: https://phabricator.services.mozilla.com/D46500

--HG--
extra : moz-landing-system : lando
2019-11-19 13:04:00 +00:00
Kashav Madan de916ceae2 Bug 1595183 - Unskip tests that are failing cleanly or no longer timing out, r=kmag
Differential Revision: https://phabricator.services.mozilla.com/D53090

--HG--
extra : moz-landing-system : lando
2019-11-19 03:44:07 +00:00
Ehsan Akhgari 30cf316b38 Bug 1595934 - Make nsICookieManager cookie enumerators return Array<nsICookie> instead of nsISimpleEnumerator; r=baku
Differential Revision: https://phabricator.services.mozilla.com/D52761

--HG--
extra : moz-landing-system : lando
2019-11-17 07:21:14 +00:00
Tom Ritter 4d04d9e9fa Bug 1596421 - Disable eval restrictions if the web extension process is disabled r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D53026

--HG--
extra : moz-landing-system : lando
2019-11-15 15:36:42 +00:00
Christoph Kerschbaumer 515d2c1cdb Bug 1595762: Make type object loads subject to CSP frame ancestors. r=jkt,annevk
Differential Revision: https://phabricator.services.mozilla.com/D52806

--HG--
extra : moz-landing-system : lando
2019-11-13 14:52:55 +00:00
Sebastian Streich 0ccaa6de78 Bug 1591932 - Enable Sniffing on No Mime+ XCTO nosniff r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D50816

--HG--
extra : moz-landing-system : lando
2019-11-13 12:12:34 +00:00
Sebastian Streich 4829a03b44 Bug 1595541 - enable test_same_site_cookies_laxByDefault with fission r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D52552

--HG--
extra : moz-landing-system : lando
2019-11-12 07:50:25 +00:00
Tom Ritter 525cd2f1c2 Bug 1592321 - Collect a sanitized path for files doing eval() on Windows in the same manner as untrusted modules r=aklotz
Differential Revision: https://phabricator.services.mozilla.com/D50957

--HG--
extra : moz-landing-system : lando
2019-11-11 15:39:21 +00:00
Matt Woodrow 936025ce74 Bug 1594166 - Dont do nsContentSecurityManager checks for internal redirects. r=baku,ckerschb
We fail this during test_invalid_mime_type_blob.html when using DocumentChannel for blobs without this.
DocumentChannelChild reports an internal redirect as it replaces itself with the real channel (BlobURLChannel), and we fail the CheckLoadURIWithPrincipal checks.

The old channel has a null principal (due to being a sandboxed iframe), and we compare that to the blob principal computed from the URI, which is a normal content principal.

Differential Revision: https://phabricator.services.mozilla.com/D51905

--HG--
extra : moz-landing-system : lando
2019-11-07 19:13:59 +00:00
Christoph Kerschbaumer 28d322dce6 Bug 1593321: Ignore XFO on channels that will be redirected. r=jkt,dragana
Differential Revision: https://phabricator.services.mozilla.com/D51988

--HG--
extra : moz-landing-system : lando
2019-11-06 12:53:46 +00:00
Sebastian Streich 799a5345a7 Bug 1585000 - Enable Samesite Cookies for Fission r=ckerschb,farre
Differential Revision: https://phabricator.services.mozilla.com/D49424

--HG--
extra : moz-landing-system : lando
2019-11-05 09:39:13 +00:00
Christoph Kerschbaumer e8e2dc31b7 Bug 1584998: Make x-frame-options work with fission enabled. r=jkt,farre,johannh,flod
Differential Revision: https://phabricator.services.mozilla.com/D50588

--HG--
extra : moz-landing-system : lando
2019-10-31 08:28:35 +00:00
Kashav Madan c39158719d Bug 1582531 - Update fission annotations for tests that pass, r=mccr8
Differential Revision: https://phabricator.services.mozilla.com/D50507

--HG--
extra : moz-landing-system : lando
2019-10-30 21:51:22 +00:00
Razvan Maries dc147d06b0 Backed out changeset 5f185a11889b (bug 1584998) for perma fails on browser_bug593387.js. CLOSED TREE 2019-10-30 23:26:01 +02:00
Christoph Kerschbaumer 36376205fb Bug 1584998: Make x-frame-options work with fission enabled. r=jkt,farre,johannh
Differential Revision: https://phabricator.services.mozilla.com/D50588

--HG--
extra : moz-landing-system : lando
2019-10-30 17:54:36 +00:00
Daniel Varga 617d42c7ed Backed out changeset ac8f6632f7e0 (bug 1584998) on request by dev. On a CLOSED TREE 2019-10-30 19:33:29 +02:00
Thomas Nguyen ac066415f5 Bug 1586684 - Rewrite test_navigate_to.html to pass when fission enable r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D51096

--HG--
extra : moz-landing-system : lando
2019-10-30 17:14:56 +00:00
Christoph Kerschbaumer 9c55479432 Bug 1584998: Make x-frame-options work with fission enabled. r=jkt,farre,johannh
Differential Revision: https://phabricator.services.mozilla.com/D50588

--HG--
extra : moz-landing-system : lando
2019-10-30 14:47:19 +00:00
Tom Ritter 1d804e6a9a Bug 1584602 - Enforce eval restrictions in Workers and do not enforce restrictions in Release r=ckerschb
This commit does two things. Firstly it enforces eval restrictions in Workers per Bug 1584602.
We're collecting telemetry on these in Beta (and not seeing any) so we can let enforcement ride up to Beta.

Secondly, it disables enforcement checks on Release (and late Beta, as explained in the comment) until
we can gather data about what's happening in Release. This is a counterpart to Bug 1592349 for -central.

We have two separate commits because the first part of this is a change in the same code and we'd have
rebase problems if we tried to do them both separately.

This does tie enforcement to a build-time constant instead of leaving it as a pref. This doesn't make
me very happy inside, but I don't think the extra complexity is worth it...

Differential Revision: https://phabricator.services.mozilla.com/D50970

--HG--
extra : moz-landing-system : lando
2019-10-30 15:21:57 +00:00
Christoph Kerschbaumer 3ae6cda13c Bug 1557712: Fix intermittent test failure for test_frameancestors_userpass.html. r=jkt
Differential Revision: https://phabricator.services.mozilla.com/D51071

--HG--
extra : moz-landing-system : lando
2019-10-30 10:24:00 +00:00
Tom Ritter d72a6eb2f3 Bug 1588816 - Remove userChrome.css case since XBL is dead in Nightly r=bgrins
Differential Revision: https://phabricator.services.mozilla.com/D50964

--HG--
extra : moz-landing-system : lando
2019-10-29 17:10:59 +00:00
Christoph Kerschbaumer 8f2c346f91 Bug 1557712: Fix intermittent test failure for test_frameancestors_userpass.html. r=jkt
Differential Revision: https://phabricator.services.mozilla.com/D50907

--HG--
extra : moz-landing-system : lando
2019-10-29 09:23:57 +00:00
Thomas Nguyen feddf115a9 Bug 1590321 - Rewrite browser_test_referrer_loadInOtherProcess.js to work with fission enabled r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D50570

--HG--
extra : moz-landing-system : lando
2019-10-28 09:44:30 +00:00
kriswright 10581910fe Bug 1591226 - Convert network.http.referer.defaultPolicy.* to static prefs r=njn
Converts network.http.referer.defaultPolicy, network.http.referer.defaultPolicy.trackers, network.http.referer.defaultPolicy.pbmode, and network.http.referer.defaultPolicy.trackers.pbmode to static prefs and updates the uses of their old mirror values.

Differential Revision: https://phabricator.services.mozilla.com/D50541

--HG--
extra : moz-landing-system : lando
2019-10-25 19:13:19 +00:00
kriswright 87eaba1b18 Bug 1591226 - Convert network.http.referer.XOriginTrimmingPolicy to static pref. r=njn
Converts network.http.referer.XOriginTrimmingPolicy to a static pref. Leverages do_not_use_directly and a getter to clamp the pref value.

Differential Revision: https://phabricator.services.mozilla.com/D50540

--HG--
extra : moz-landing-system : lando
2019-10-25 04:55:12 +00:00
kriswright 22476a1d9e Bug 1591226 - Convert network.http.referer.trimmingPolicy to static pref. r=njn
Converts network.http.referer.trimmingPolicy and leverages do_not_use_directly with a getter to clamp the value.

Differential Revision: https://phabricator.services.mozilla.com/D50539

--HG--
extra : moz-landing-system : lando
2019-10-25 04:53:08 +00:00
kriswright 45ce89e55d Bug 1591226 - Convert network.http.referer.XOriginPolicy to static pref. r=njn
Converts network.http.referer.XOriginPolicy to a static pref and leverages 'do_not_use_directly' and a getter in order to clamp the value.

Differential Revision: https://phabricator.services.mozilla.com/D50537

--HG--
extra : moz-landing-system : lando
2019-10-25 04:52:05 +00:00
kriswright 23017ea284 Bug 1591226 - Convert network.http.referer.referrerLengthLimit to static pref. r=njn
Converts network.http.referer.referrerLengthLimit to a static pref and replaces its mirror variable.

Differential Revision: https://phabricator.services.mozilla.com/D50536

--HG--
extra : moz-landing-system : lando
2019-10-25 04:25:38 +00:00
kriswright be277687fd Bug 1591226 - Convert network.http.sendRefererHeader to a static pref. r=njn
Converts network.http.sendRefererHeader to a static pref. The original mirror variable was clamped between 0 and 2, so the pref has been updated with DoNotUseDirectly and a getter.

Differential Revision: https://phabricator.services.mozilla.com/D50535

--HG--
extra : moz-landing-system : lando
2019-10-25 04:20:39 +00:00
kriswright 9ac026787f Bug 1591226 - Convert network.http.referer.hideOnionSource to a static pref. r=njn
Converts network.http.referer.hideOnionSource to a static pref and removes its mirror variable and varcache pref definition.

Differential Revision: https://phabricator.services.mozilla.com/D50534

--HG--
extra : moz-landing-system : lando
2019-10-25 04:16:29 +00:00
kriswright f634517db3 Bug 1591226 - Convert network.http.referer.spoofSource to static pref. r=njn
Converts network.http.referer.spoofSource to a static pref and removes the varcache instance and mirror variable.

Differential Revision: https://phabricator.services.mozilla.com/D50533

--HG--
extra : moz-landing-system : lando
2019-10-25 04:15:11 +00:00
Sebastian Streich 07e8abd797 Bug 1590322 - Enable Cache-Split-Test with fission r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D50476

--HG--
extra : moz-landing-system : lando
2019-10-24 14:50:06 +00:00
Thomas Nguyen cf2f2ec008 Bug 1580462 - Store iframe's FeaturePolicy in browsingContext to inherit cross origin document. r=baku,farre
Differential Revision: https://phabricator.services.mozilla.com/D48825

--HG--
extra : moz-landing-system : lando
2019-10-23 19:39:00 +00:00
Christoph Kerschbaumer be72bce5f7 Bug 1590777: Add Null check for referrerinfo within ParseCSPAndEnforceFrameAncestorCheck. r=tnguyen
Differential Revision: https://phabricator.services.mozilla.com/D50239

--HG--
extra : moz-landing-system : lando
2019-10-23 15:21:48 +00:00
Christoph Kerschbaumer a9ab8a0285 Bug 1590784: Move GetHttpChannelHelper into nsContentSecurityUtils. r=jkt
Differential Revision: https://phabricator.services.mozilla.com/D50238

--HG--
extra : moz-landing-system : lando
2019-10-23 15:17:21 +00:00
Razvan Maries 7fb625f8cf Backed out changeset ae33b9c001e5 (bug 1580462) for build bustages on nsWindow.cpp. CLOSED TREE 2019-10-23 11:07:00 +03:00
Thomas Nguyen a220530f6b Bug 1580462 - Store iframe's FeaturePolicy in browsingContext to inherit cross origin document. r=baku,farre
Differential Revision: https://phabricator.services.mozilla.com/D48825

--HG--
extra : moz-landing-system : lando
2019-10-22 14:36:00 +00:00
Sebastian Streich f4b2f14328 Bug 1585664 - Add GetAsciiSpecForLogging and update callers r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D47909

--HG--
extra : moz-landing-system : lando
2019-10-22 16:03:27 +00:00
Sebastian Streich 14d2d23a81 Bug 1590318 - Make browser_test_FTP_console_warning.js fission ready r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D50075

--HG--
extra : moz-landing-system : lando
2019-10-22 16:20:11 +00:00