20257 unable to edit existing images in editor due to JS error
19933 JavaScript "window.location" core dumps in CAPS
Back out previous changes for enforcing security on listeners and go with a
simple restriction of access to the method for adding listeners.
r=mstoltz
Add checks to nsScriptSecurityManager::CheckCanListenTo that take
a principal and ensure that the currently executing script code
either is from the same origin as that principal or has the
UniversalBrowserRead privilege enabled. (chrome code has all
privileges enabled by default.) It's okay for the principal passed in
to be null. That just signifies a privileged window/document that only
can be listened to with privileges.
I added GetPrincipal/SetPrincipal methods to nsIEventListenerManager.
nsDocument::GetNewListenerManager sets a principal on the listener
manager when it creates one. Obviously there are other places that
create listener managers, but scripts seem to go through this one.
Another change is to save some memory usage. Currently I allocate an
array of PolicyType that is NS_DOM_PROP_MAX elements long.
Unfortunately, compilers appear to allocate four bytes for each
PolicyType, so the array takes around 2400 bytes. I've added changes
to use two bit vectors that should consume about 1/16 that space.
r=joki
There are also changes that push nsnull onto the JSContext stack when
entering a nested event loop.
r=jband
Remove --enable-dom, because Mariner is dead (sob).
Rename some MODULE= lines to make the afore-mentioned --enable-debug
technique actually useful. Feel free to recategorize.
Fix libraptorhtml.so link bogosity by disabling shared lib generation for the
sub-archives (libraptor*_s.a), so that we can put bin before lib in the
library path and still get the right effect. We could disable static-lib
generation in most other places and cut the build time down a fair bit, too.
[NOTE: I'm getting on a train...msw@gimp.org has agreed to be my tinderbox
buddy. Thanks, Matt!]
care to only remove makefiles affailiated with building nglayout. I have also verified that
the build at this point in time succesfully builds with autoconf.
If you must recover one of these makefiles, you can use the static tag STATIC_MAKEFILES.
If I removed a makefile that you need, please e-mail cyeh@netscape.com.
saari%netscape.com
hyatt%netscape.com
norris%netscape.com
brendan%mozilla.org
vidur%netscape.com
tbogard%aol.net
dmose%mozilla.org
joki%netscape.com
rods%netscape.com
cyeh%netscape.com
briano%netscape.com
tague%netscape.com
waterson%netscape.com
shaver%netscape.com
ramiro%netscape.com
cls%seawood.org
dcone%netscape.com
joki