11fbb63457
Bug 1321299. Cross-origin objects should allow gets of certain symbol-named properties but force the value to be undefined. r=bholley
2016-12-02 15:24:20 -05:00
0dc689acdd
Bug 553032 - use MOZ_FORMAT_PRINTF in js; r=evilpie
...
MozReview-Commit-ID: DD3DJRkOxmC
--HG--
extra : rebase_source : 61cdf0da1a82b626abc79209ee41e43c3bb152ca
2016-10-11 12:44:40 -06:00
9e31a95f74
Backed out changeset 2bfd163f23f9 (bug 553032)
2016-10-19 18:29:36 +02:00
5b851428f8
Bug 553032 - use MOZ_FORMAT_PRINTF in js; r=evilpie
...
MozReview-Commit-ID: DD3DJRkOxmC
--HG--
extra : rebase_source : 4f98705e5e2c5ff9860f04384abbc6f5dc18a7a9
2016-10-11 12:44:40 -06:00
10dd75211d
Bug 1289050 - Part 2: Use ASCII or Latin1 variants of JS_ReportError in not-simple cases. r=jwalden
2016-08-15 19:20:01 +09:00
6d493d48ec
Bug 1289050 - Part 1: Use ASCII variant of JS_ReportError in simple case. r=jwalden
2016-08-14 20:39:28 +09:00
7f794780e0
Bug 1302448 part 2 - Rename XPCJSRuntime to XPCJSContext. r=mrbkap
...
--HG--
rename : js/xpconnect/src/XPCJSRuntime.cpp => js/xpconnect/src/XPCJSContext.cpp
extra : rebase_source : e6b435ab1ca2739e340669195dff77c561ea573e
2016-09-14 15:48:17 +02:00
d2be3b7515
Bug 1292289, part 1 - Stop unnecessarily using xpcprivate in XPCWrapper.h. r=mrbkap
...
This file is included in caps/, but it only uses generic JS things,
aside from a macro.
AccessCheck.cpp was bootlegging xpcprivate.h.
MozReview-Commit-ID: C6fGOFxsTvg
--HG--
extra : rebase_source : bd5e7bf9010acf83ccab8ce6cce77a557ad76196
2016-08-04 11:14:35 -07:00
91efc5a86c
Bug 1241764: Replace nsPIDOMWindow with nsPIDOMWindowInner/Outer. r=mrbkap,smaug
2016-01-30 09:05:36 -08:00
180499c4ff
Bug 1242214 - Rename JSPropertyDescriptor JS::PropertyDescriptor in js. r=sstangl
2016-01-28 11:28:04 +01:00
fffc37012e
Bug 1125423 part 2 - Rename stopAtOuter argument to *Unwrap functions to stopAtWindowProxy. r=bz
2015-11-06 19:03:52 +01:00
c7d3c4e21a
Bug 1216401: Eviscerate nsIDOMWindow, move still needed methods to nsPIDOMWindow. r=bz
2015-10-26 14:37:32 -07:00
796a2d66a8
Bug 1212693 - Remove skipCOWCallableChecks. r=bz
2015-10-08 10:22:00 -07:00
4046fe1490
Bug 1179003 - Convert the infallible objectClassIs proxy hook into a fallible getBuiltinClass hook that indicates class type via outparam. r=efaust, r=bz on DOM bits, r=billm on IPC bits
...
--HG--
extra : rebase_source : 6ddc3727c411fdfced6338e5e383a10572575f0f
2015-08-28 21:55:40 -07:00
a8939590de
Bug 1182996 - Fix and add missing namespace comments. rs=ehsan
...
The bulk of this commit was generated by running:
run-clang-tidy.py \
-checks='-*,llvm-namespace-comment' \
-header-filter=^/.../mozilla-central/.* \
-fix
2015-07-13 08:25:42 -07:00
258ad59e3f
Bug 1171931 - Refactor duplicated code using XRE_IsParent/ContentProcess. r=froydnj
2015-07-03 18:29:00 -07:00
5f5c327690
Backed out changeset 8b4e4083639e (bug 1171931) for B2G debug emulator bustage.
2015-06-25 19:48:42 -04:00
702a59d135
Bug 1171931 - Refactor duplicated code using XRE_IsParent/ContentProcess. r=froydnj
...
--HG--
extra : rebase_source : 2ecbe6c1dd8a7ad8dc529b53349ad431cf1116c9
2015-06-24 14:11:00 -04:00
e457975e9d
Bug 1152784 - Be more robust about possible intermediate wrappers in IsFrameId. r=bz
...
Boris and I debugged this. It looks like we're somehow ending up with an
XrayWaiver on the other end of a CrossOriginXrayWrapper. The specifics of how
this happens are a bit fuzzy to me, but it's presumably happening in all the
brain transplant weirdness we do when recomputing wrappers during document.domain.
Having an XrayWaiver there isn't unsafe - the wrapper computation algorithm
will ignore the waiver if the principals don't allow the caller to waive. But
it does throw a wrench in some brittle code that only expects certain kinds
of wrappers. Let's just do what XrayTraits::getTargetObject does. I don't think
this is really unsafe at all, because the only wrapper with a security boundary
is the CCW, and we're already stripping that off unconditionally with
Wrapper::wrappedObject.
2015-04-10 00:28:05 -07:00
b8b1677f0f
Bug 1144366 - Switch SpiderMonkey and XPConnect style from |T *t| to |T* t|. r=jorendorff
2015-03-28 23:22:11 +01:00
c8a25251c1
Backed out changeset 0c030f97a04f (bug 1144366) for being on top of patches being backed out
...
CLOSED TREE
2015-03-28 10:39:56 -07:00
8d6d44ecb8
Bug 1144366 - Switch SpiderMonkey and XPConnect style from |T *t| to |T* t|. r=jorendorff
2015-03-28 12:08:37 +01:00
f45ce06bc8
Bug 1133081, part 5 - Remove non-asserting PropertyDescriptor accessors in favor of the new PropDesc-inspired asserting accessors. r=efaust.
...
value() can't assert hasValue() because too many places have plausible reasons for calling it on a PropertyDescriptor they basically know nothing about. One such place is CompartmentChecker::check(Handle<JSPropertyDescriptor>). Another is DefinePropertyByDescriptor. Maybe this will change with time.
In some cases we do things like `desc.hasWritable() && desc.writable() != existing_desc.writable()`. It is OK to write it this way, even though we have not checked existing_desc.hasWritable(), because in these cases we already know existingDesc is a complete property descriptor.
--HG--
extra : rebase_source : 3ec090ea79908eb5e7b5ea8ad1d702229f5cc3b1
2015-02-15 06:18:30 -06:00
2f3d90830b
Bug 1123461 - Make a real interface for js/ipc (r=dvander)
2015-01-26 13:32:18 -08:00
8960d9ef9f
Bug 1094176 - Remove lookup API from browser. r=bholley
2014-12-17 00:28:39 +01:00
ea05bd3408
Bug 1081985 - Move checkPassToPrivilegedCode to AccessCheck.cpp where it belongs. r=gabor
2014-10-20 15:52:52 +02:00
ad9fdda6a1
Bug 1081990 - Turn off COWs for Functions. r=gabor
2014-10-18 11:02:10 +02:00
8e020623f3
Bug 1084245 - Introduce a hacky opt-out of the new security checks for MozTCPSocket. r=bz
2014-10-17 18:02:19 +02:00
7575a7e608
Bug 1083060 - Refactor the XOW access control code to use an enum rather than a char*. r=bz
...
Srsly.
2014-10-17 16:17:02 +02:00
870851e291
Bug 1082450 - Deny access to cross-origin callables on COWs. r=gabor
2014-10-15 15:05:10 +02:00
24ea99f72c
Bug 1082450 - Deny access to accessor properties on COWs. r=gabor
2014-10-15 15:05:10 +02:00
86e770dc65
Bug 1065185 - Turn off indexed/.length access on COW arrays. r=bz
2014-10-03 10:05:52 +02:00
25211c35fe
Bug 1065185 - Expand XrayWrapper console messages for COWs. r=bz
2014-10-03 10:05:51 +02:00
3090e7865a
Bug 1060521 - Remove infrastructure for Xrayed NewResolve, GetProperty, and SetProperty on XPCWrappedNatives. r=peterv
2014-09-15 14:13:02 +02:00
d126c3c24f
Bug 1063962 - Replace jschar typedef with C++11 char16_t type. r=jandem
2014-07-21 21:43:21 -07:00
a04e5f6e91
Bug 965898 - Handleify more stuff. r=me
2014-07-30 12:23:04 -07:00
8bbf60b812
Bug 965898 - Squelch exceptions during the shadowing detection in isCrossOriginAccessPermitted. r=gabor
2014-07-30 12:23:03 -07:00
99778c8324
Bug 965898 - Switch policies for get{,Own}PropertyDescriptor. r=gabor
2014-07-30 12:23:03 -07:00
2fcb56964b
Bug 965898 - Implement proper behavior for [[Enumerate]] And [[OwnPropertyKeys]]. r=gabor
2014-07-30 12:23:02 -07:00
49e86ce330
Backed out 16 changesets (bug 965898) for rooting hazards. CLOSED TREE
...
Backed out changeset ac4abde3579f (bug 965898)
Backed out changeset c4c7ab1a2f70 (bug 965898)
Backed out changeset e0bf3598dfe1 (bug 965898)
Backed out changeset 8f2788a0ba24 (bug 965898)
Backed out changeset 0d1cda4decaa (bug 965898)
Backed out changeset 3d80ffc439fb (bug 965898)
Backed out changeset ad66ab36fe2d (bug 965898)
Backed out changeset dcf7ccf6eff2 (bug 965898)
Backed out changeset d3f02e80355d (bug 965898)
Backed out changeset 212f2d05d9e7 (bug 965898)
Backed out changeset c350a2c0aa6d (bug 965898)
Backed out changeset c75acd0663a9 (bug 965898)
Backed out changeset d68f7ef0ae69 (bug 965898)
Backed out changeset 610e6d6e1a88 (bug 965898)
Backed out changeset 54d40a30f6ad (bug 965898)
Backed out changeset 403a0e1d2324 (bug 965898)
2014-07-29 22:57:59 -07:00
0ff091e38b
Bug 965898 - Squelch exceptions during the shadowing detection in isCrossOriginAccessPermitted. r=gabor
2014-07-29 21:35:32 -07:00
8f84226eb0
Bug 965898 - Switch policies for get{,Own}PropertyDescriptor. r=gabor
2014-07-29 21:35:32 -07:00
d080afcd9d
Bug 965898 - Implement proper behavior for [[Enumerate]] And [[OwnPropertyKeys]]. r=gabor
2014-07-29 21:35:31 -07:00
e6562f0ffa
Bug 1036185 - Clean up logic in IsPermitted (bonus fix). r=gabor
2014-07-15 09:04:19 -07:00
4330519678
Bug 832014 part 9. Switch AccessCheck to using the generated LocationBinding::IsPermitted method. r=bholley
2014-07-11 19:34:44 -04:00
b986e6ec0f
Bug 1034627 part 3 - Fix SandboxDump, AccessCheck.cpp to work with Latin1 strings and nursery strings. r=bholley
2014-07-10 17:36:35 +02:00
44da586636
Bug 1034191 - Make nsDependentJSString users work with Latin1 strings and nursery-allocated strings. r=bz
2014-07-05 17:30:54 +02:00
a5a0be7595
Bug 987163 - Drop special COW support for TypedArrays. r=gabor
...
From now on, if someone wants to expose a TypedArray to content, they should
use Cu.cloneInto.
2014-06-17 10:16:08 -07:00
699946fc90
Bug 1022016 - Redesign nsDependentJSString API to be less of a footgun. r=gabor
2014-06-10 20:15:56 -07:00
38b0b1f449
Bug 1006692 - Replaced nsScriptSecurityManager::SubjectIsPrivileged and AccessCheck::IsCallerChrome by nsContentUtils::IsCallerChrome. r=bholley
2014-05-19 13:39:00 +02:00
Boris Zbarsky
Tom Tromey
Sebastian Hengst
Tooru Fujisawa
Jan de Mooij
Andrew McCreight
Kyle Huey
Tom Schuster
Bobby Holley
Jeff Walden
Birunthan Mohanathas
Juan Gomez
Ryan VanderMeulen
Phil Ringnalda
Jason Orendorff
Bill McCloskey
Chris Peterson
Julien Levesy