3b6ba803a8
Bug 1165162 - Serialize originSuffix into .origin. r=gabor,sr=sicking
...
We also provide an opt-out for the original behavior, and use it in various
consumers that look like they need fixing up. Most of the usage here is in
code with persistence considerations, where we may need some sort of migration
path.
2015-05-20 17:11:49 -07:00
9a937e13f4
Bug 1165162 - Hoist GetOrigin onto BasePrincipal. r=gabor
2015-05-20 17:11:48 -07:00
8ee7426f3a
Bug 1165162 - Fix up nsScriptSecurityManager::AppStatusForPrincipal to compare principals rather than origins. r=gabor, sr=sicking
...
The current check will fail once we start munging the format of nsIPrincipal::Origin.
2015-05-20 17:11:47 -07:00
91e0c12696
Bug 1165162 - Rework the nsIScriptSecurityManager principal-minting API to be originAttributes-centric. r=gabor,r=bholley,sr=sicking
2015-05-20 17:11:41 -07:00
eea636ee0c
Bug 1165162 - Make OriginAttributes a dictionary, and make it accessible as both a jsval and a canonical string. r=gabor,r=bholley,sr=sicking
2015-05-20 17:09:53 -07:00
6fe02add87
Bug 1165834: Add alicdn.com (used by taobao.com) to the CSS Unprefixing Service whitelist. r=miketaylr
2015-05-19 10:38:06 -07:00
d6082103c1
Bug 1164977 - Hoist attribute serialization into BasePrincipal. r=gabor
2015-05-18 15:52:34 -07:00
f8d1d0c840
Bug 1164977 - Hoist app attributes into a struct on BasePrincipal and refer to them as 'origin attributes'. r=gabor
...
This sets the stage for the upcoming work for signed apps.
2015-05-18 15:52:34 -07:00
213bf81699
Bug 1164977 - Unify subsumes/equals logic on BasePrincipal and reduce duplicated code. r=gabor
2015-05-18 15:52:33 -07:00
9438ba6505
Bug 1164977 - Hoist all the app attribute handling into BasePrincipal. r=gabor
2015-05-18 15:52:33 -07:00
913d8b5a1a
Bug 1163826 - Add remainder of top .jp sites to CSS unprefixing service whitelist. r=dholbert
2015-05-14 10:32:00 -04:00
cf42e317ab
Bug 1155963 Only allow NS_LITERAL_CSTRING to be used on compile-time literals r=froydnj,ehsan
2015-05-16 09:07:10 +01:00
e2ee3711db
Bug 1164292 followup: Add 'override' annotations to BasePrincipal & nsSystemPrincipal GetCsp()/SetCsp() methods. rs=ehsan
2015-05-15 14:54:21 -07:00
8444c671f4
Bug 1164292 - Tests. r=gabor
2015-05-15 11:51:54 -07:00
bd42cbf003
Bug 1164292 - Twiddle format of GetScriptLocation to match what we use for GetOrigin. r=gabor
2015-05-15 11:51:53 -07:00
2d6160ec06
Bug 1164292 - Properly implement nsExpandedPrincipal::GetOrigin. r=gabor
2015-05-15 11:51:52 -07:00
d7f3ecfc0a
Bug 1164292 - Order the nsEP whitelist array. r=gabor
2015-05-15 11:51:51 -07:00
e61971d74b
Bug 1164292 - Switch nsIPrincipal::origin to ACString. r=gabor
2015-05-15 11:51:51 -07:00
93d7d50247
Bug 1164292 - Make all nsIPrincipal implementations inherit BasePrincipal and hoist some repeated code. r=gabor
...
Losing the NS_DECL_NSIPRINCIPAL isn't great, but I think it's worth it to share
more code.
2015-05-15 11:51:50 -07:00
9e3345280e
Bug 1164292 - Rebrand nsBasePrincipal into mozilla::BasePrincipal and give it its own file. r=gabor
...
The goal here is to provide a common superclass for _all_ the principal
implementations, rather than just nsPrincipal and nsExpandedPrincipal.
2015-05-15 11:51:49 -07:00
6882fa756b
Bug 1164292 - Re-implement dumpImpl in terms of GetScriptLocation. r=gabor
...
The existing setup adds a lot of complication and not a lot of value.
2015-05-15 11:51:48 -07:00
46b43e4f8b
Bug 1164292 - Hoist refcounting into nsJSPrincipals. r=gabor
...
This is a special-snowflake reference counting system that's tied to
JSPrincipals, so it makes sense to consolidate this on nsJSPrincipals.
2015-05-15 11:51:47 -07:00
3c714c42eb
Backed out changeset 17cfad44e12b (bug 1155963) for breaking b2g builds
2015-05-14 16:35:18 -07:00
ae441fafa2
Bug 1155963 Only allow NS_LITERAL_CSTRING to be used on compile-time literals r=froydnj,ehsan
2015-05-15 00:00:33 +01:00
fb12c84213
Bug 1132745 followup: Fix a typo in a CSS Unprefixing Service whitelisted domain. (no review)
2015-05-08 09:08:27 -07:00
4a15da718a
Bug 1162106: Add top .jp sites to CSS unprefixing service whitelist. r=dholbert
...
At the request of the Japan team. See Bug 1162245 to track
removing these from this list.
---
caps/nsPrincipal.cpp | 26 ++++++++++++++++++++++++++
1 file changed, 26 insertions(+)
2015-05-07 09:04:42 -07:00
2d69d081ad
Bug 1132745 part 2: Add Mozilla China team's requested additional domains to CSSUnprefixingService whitelist. r=miketaylr
2015-05-05 09:04:23 -07:00
5a9765f82b
Bug 1132745 part 1: remove music.baidu.com from CSSUnprefixingService whitelist. r=miketaylr
2015-05-05 09:04:22 -07:00
ebde6b9f4f
Bug 1157835: Remove the MSVC_ENABLE_PGO flag from the build system. r=glandium
...
--HG--
extra : rebase_source : 0c47c99bb8b92f8361a51fd81b20a2cc8647a986
2015-04-27 19:59:27 -04:00
cb54385682
Bug 1156632 - Remove unused forward class declarations - patch 4 - netwerk image and dom, r=ehsan
2015-04-22 08:29:20 +02:00
e005d7be52
Merge m-c to fx-team a=merge CLOSED TREE
2015-04-14 15:40:46 -07:00
2f31f8bdf2
Bug 1150045 - De-anonymize Expanded Principals. r=bholley
2015-04-10 17:52:29 +02:00
f1fc41b0e5
Bug 949614 - Use === for SimpleTest.is; r=Waldo
...
This is more likely to be correct, and a necessary step in case we ever want
to move to Object.is.
This keeps ise as an alias for is, and introduces is_loosely for the old
behaviour.
2015-04-14 15:28:13 +02:00
e6a1d175c3
Bug 1134096 - Revise docs for ::NewChannel2, ::GetChannelPrincipal and add deprecation warnings (r=tanvi,sicking)
2015-04-13 13:37:14 -07:00
b077d9624d
Bug 1134920 - Use moz_xmalloc/moz_xrealloc/free instead of nsMemory::Alloc/Realloc/Free. r=nfroyd
2015-04-01 13:51:45 +09:00
f5ee2614a8
Bug 1149280 part 2. Drop the useless mScheme member of nsNullPrincipalURI. r=smaug
2015-03-31 13:11:04 -04:00
ab624ae20e
Bug 1149280 part 1. Make nullprincipal creation faster. r=smaug
2015-03-31 13:11:00 -04:00
e6f385fb3d
Bug 1148527 - Indentation fix after bug 1145631, r=ehsan
2015-03-27 18:52:19 +00:00
9ae27c5155
Bug 1126014 - DomainPolicy support for e10s. r=mrbkap
2015-03-24 15:29:16 +01:00
883849ee32
Bug 1145631 - Part 1: Replace MOZ_OVERRIDE and MOZ_FINAL with override and final in the tree; r=froydnj
...
This patch was automatically generated using the following script:
function convert() {
echo "Converting $1 to $2..."
find . \
! -wholename "*/.git*" \
! -wholename "obj-ff-dbg*" \
-type f \
\( -iname "*.cpp" \
-o -iname "*.h" \
-o -iname "*.c" \
-o -iname "*.cc" \
-o -iname "*.idl" \
-o -iname "*.ipdl" \
-o -iname "*.ipdlh" \
-o -iname "*.mm" \) | \
xargs -n 1 sed -i -e "s/\b$1\b/$2/g"
}
convert MOZ_OVERRIDE override
convert MOZ_FINAL final
2015-03-21 12:28:04 -04:00
1f28a7b068
Bug 1144991 another followup, to fix the stupid compile issue. r=must-reopen-the-CLOSED TREE
2015-03-19 21:16:22 -04:00
3535d21268
Bug 1144991 followup. Allow the hidden window to link to chrome things even though most resource:// URIs can't. r=bholley and I sneer upon the CLOSED TREE.
2015-03-19 21:04:25 -04:00
94fe221522
Bug 1144991 - Be a bit more restrictive about when a URI_IS_UI_RESOURCE source is allowed to link to a URI_IS_UI_RESOURCE URI that doesn't have the same scheme. r=bholley, a=me
2015-03-19 18:58:44 -04:00
988454ac8a
Bug 1132743 followup: hook up nsPrincipal.cpp's "gCodeBasePrincipalSupport" in new InitializeStatics method, instead of lazily. implicit rs=dbaron CLOSED TREE
...
--HG--
extra : amend_source : c779dbbb74b5563ab9b4ee33dd61438fbbd6a356
2015-03-13 13:16:01 -07:00
908a699328
Bug 1132743: Only allow CSS Unprefixing Service to be activated for hosts on a small, hardcoded whitelist. r=dbaron f=bz
...
--HG--
rename : layout/style/test/test_unprefixing_service.html => layout/style/test/unprefixing_service_iframe.html
2015-03-13 13:15:09 -07:00
bbd726bf8c
Backed out 2 changesets (bug 1132743) for asan mochitest-e10s-1 bustage CLOSED TREE
...
Backed out changeset 4e00f10f5a2d (bug 1132743)
Backed out changeset 720842726906 (bug 1132743)
2015-03-13 15:16:33 -07:00
6130329261
Bug 1132743 followup: hook up nsPrincipal.cpp's "gCodeBasePrincipalSupport" in new InitializeStatics method, instead of lazily. implicit rs=dbaron
2015-03-13 13:16:01 -07:00
aff7407e30
Bug 1132743: Only allow CSS Unprefixing Service to be activated for hosts on a small, hardcoded whitelist. r=dbaron f=bz
...
--HG--
rename : layout/style/test/test_unprefixing_service.html => layout/style/test/unprefixing_service_iframe.html
2015-03-13 13:15:09 -07:00
d1c61bc9b6
Bug 1116187 - Disable failing mochitest-chrome tests for B2G, r=gbrown
2015-02-06 16:30:37 -08:00
c6890412ec
Bug 1087646 - Properly serialize nullprincipal URIs across IPC. r=bzbarsky
2015-02-24 12:54:40 -08:00
c9d51e1ad0
Bug 1123854 - Remove some out of memory checks in caps/. r=jst
2015-01-30 10:59:49 -08:00
d1ead4e72c
Bug 1067022 - Annotate the expected 5 "bad inline size" assertions on 10.10 in test_bug995943.xul, r=dbaron
...
--HG--
extra : rebase_source : 4cda7e6863fd6daad5de642be9ace6a0f04c8e54
2015-01-18 12:53:13 -08:00
1e88271572
Bug 1119268 - Mark virtual overridden functions as MOZ_OVERRIDE in misc code; r=bsmedberg
2015-01-12 23:26:30 -05:00
4a8e595770
Backout c034dba7a417
2015-01-12 14:46:48 -08:00
d517a30886
Bug 1119268 - Mark virtual overridden functions as MOZ_OVERRIDE in misc code; r=bsmedberg
2015-01-12 16:35:06 -05:00
97e4b52984
Bug 1110615 - Fix inheriting problem for blobs (r=sicking)
2014-12-12 09:03:47 -08:00
f7aea19aae
Backed out 15 changesets (bug 1087442)
...
Backed out changeset 3f4166fb5e37 (bug 1087442)
Backed out changeset 0c9c9123a0a9 (bug 1087442)
Backed out changeset 1d85d298042d (bug 1087442)
Backed out changeset 51f3ce397d68 (bug 1087442)
Backed out changeset f3b81a623692 (bug 1087442)
Backed out changeset 472e8fa74596 (bug 1087442)
Backed out changeset 12f97df7b79c (bug 1087442)
Backed out changeset 253cde88d3c5 (bug 1087442)
Backed out changeset b44f9ebd56cb (bug 1087442)
Backed out changeset 48e412887726 (bug 1087442)
Backed out changeset a2c76343f7a9 (bug 1087442)
Backed out changeset 0b5b07cfef0e (bug 1087442)
Backed out changeset 2931c35342a4 (bug 1087442)
Backed out changeset 681ce9dcad64 (bug 1087442)
Backed out changeset 47c505856954 (bug 1087442)
2014-12-11 21:58:21 -08:00
31b61e551f
Bug 1087442 - Attach LoadInfo inside each individual ProtocolHandler - securitymanager changes (r=sicking)
2014-12-11 20:47:55 -08:00
22d0c4b343
Bug 1107814 - Part 1: Mark more directories as FAIL_ON_WARNINGS for all compilers. r=gps
2014-12-04 16:24:03 -08:00
ba415e054d
Bug 1083422 - Add triggering Principal to nsILoadInfo - update consumers (r=bz)
2014-11-14 08:57:26 -08:00
17502c7ff1
Bug 1094257 - nsPrincipal::GetBaseDomain() should not use TLD if the protocol handler of the URI scheme has NORELATIVE flag, r=bz
2014-11-11 09:10:56 +00:00
08be6709e0
Bug 1088617 - Remove nsIScriptSecurityManager::CheckSameOrigin. r=me
2014-10-29 09:21:18 +01:00
f53e1888e0
Bug 1088617 - Handle nsIURIWithPrincipal in nsPrincipal::CheckMayLoad. r=bz
...
This mimics the logic already inside nsNullPrincipal::CheckMayLoad.
2014-10-29 09:21:17 +01:00
bf9324688d
Bug 1069694 - Remove OldDebugAPI from the browser. r=shu
2014-10-12 19:37:41 +02:00
3140b4a353
Bug 1054646 - Part 1: Change nsNullPrincipal::CheckMayLoad to always allow loads when the principal of the URI in the principal doing the load. r=bz
2014-09-30 09:09:36 +01:00
8ce4688d81
Bug 1066718 - Get sIOService before invoking ReadPrefs. r=bz
2014-09-16 21:30:32 +02:00
59ccd2fecb
Bug 1001090 - Part 5: Fix errors in tests throughout the tree. (r=robcee,gavin)
2014-09-15 16:30:47 -07:00
4ae78956b0
Bug 1008481 - Re-enable failing test. r=me
2014-09-13 13:13:23 -07:00
daf96052e9
Bug 1008481 - Switch to the root dir instead of the profile dir. r=me
2014-09-13 13:13:22 -07:00
ac94bb3958
Bug 1008481 - Add an expected assertion. r=me
2014-09-13 13:13:22 -07:00
1e4137ff7a
Bug 1008481 - Really disable the test on only opt.
...
--HG--
extra : rebase_source : 93237cb46d90ef61228150be0c4a24ddf9f46ea2
2014-09-10 16:23:40 -04:00
10ab2e900f
Bug 1008481 - Skip test_bug995943.xul on OSX opt for failing ~80% of the time.
2014-09-10 14:27:02 -04:00
3ef23ad9b7
Bug 1008481 - Request complete log for intermittently-failing test. r=me
2014-09-09 21:52:31 -07:00
86ba57ba6a
Bug 1053725 - When one domain is whitelisted for file:// URI access, whitelist all subdomains. r=bz
2014-09-08 22:22:22 -07:00
21d9e88153
Bug 1061136 - Followup bugfix. r=bz
2014-09-08 22:22:21 -07:00
6cfbd9472f
Bug 1061136 - Assume both http:// and https:// for schemeless URIs in CAPS prefs. r=bz
2014-09-05 20:01:06 -07:00
68de320099
Bug 1062529 - Split GetChannelPrincipal into GetChannelResultPrincipal and GetChannelURIPrincipal. r=bz
2014-08-06 16:05:40 -07:00
5567369ba5
Bug 1060989 - Fix more bad implicit constructors in caps; r=bsmedberg
...
--HG--
extra : rebase_source : 5045340f3d9f8d9a2c50359fd0b3a75ec223eab1
2014-09-02 18:20:14 -04:00
4533961b74
Bug 1011738 - Theme support for b2g/gaia, Part 4 : security checks r=bent,bz
2014-08-28 17:20:27 -07:00
fd5e9d1fcc
bug 1047696 - mark a number of classes MOZ_FINAL to get compilers to devirtualize more r=froydnj
2014-08-05 13:33:55 -04:00
e70ddb7476
Bug 1052052 - Hoist Auto*JSContext into nsContentUtils and kill nsCxPusher.{cpp,h}. r=gabor
2014-08-14 18:47:15 -07:00
30ae466592
Backed out changesets 5b1a3161f614, 17a9673ed782, and a9b8c346d295 (bug 1052052) for B2G non-unified bustage.
2014-08-14 17:23:10 -04:00
3e4d70a655
Bug 1052052 - Hoist Auto*JSContext into nsContentUtils and kill nsCxPusher.{cpp,h}. r=gabor
2014-08-14 12:54:34 -07:00
2252bd6c38
Bug 994872 - Remove documentPrincipal from nsIContentSecurityPolicy::SetRequestContext. (r=ckerschb)
2014-07-30 14:37:22 -07:00
f6516d5622
Bug 1022229 - Borrow App ID and mozBrowser-ness when creating sandbox null principals. r=bz
2014-07-29 08:47:52 -07:00
4adfe5c438
Bug 1022229 - Let Null Principals have App IDs and mozBrowser status. r=bz
2014-07-29 08:47:52 -07:00
22b3a5b9bb
Bug 1022229 - Hoist GetAppStatus into a static method on nsScriptSecurityManager. r=bz
2014-07-29 08:47:52 -07:00
9a8cfb647e
Backed out 5 changesets (bug 1022229) for non-unified bustage.
...
Backed out changeset d79b991a8d96 (bug 1022229)
Backed out changeset 34f9a0e7dbde (bug 1022229)
Backed out changeset 37fbaf69c6e0 (bug 1022229)
Backed out changeset d6111b0603f5 (bug 1022229)
Backed out changeset 154922edf5fe (bug 1022229)
2014-07-28 15:08:51 -04:00
b755961e1d
Bug 1022229 - Followup bustage fix. r=me CLOSED TREE
2014-07-28 11:26:41 -07:00
0f8a49569d
Bug 1022229 - Borrow App ID and mozBrowser-ness when creating sandbox null principals. r=bz
2014-07-28 10:37:54 -07:00
f5a7274a4e
Bug 1022229 - Let Null Principals have App IDs and mozBrowser status. r=bz
2014-07-28 10:37:54 -07:00
635f27b521
Bug 1022229 - Hoist GetAppStatus into a static method on nsScriptSecurityManager. r=bz
2014-07-28 10:37:54 -07:00
bc5d6801bb
Bug 1041860 - Avoid setting FINAL_LIBRARY to libraries that further use a FINAL_LIBRARY. r=mshal
2014-07-23 08:37:51 +09:00
0e87a94e07
Bug 1035395, r=bholley,smaug
...
--HG--
extra : rebase_source : 478200a62a5073177ae3c782e252fa9a804e5b01
2014-07-18 09:37:42 -07:00
a4ac396211
Bug 1038535 - Flatten caps/{idl,include,src}/ directories. r=bholley,gps
...
--HG--
rename : caps/src/DomainPolicy.cpp => caps/DomainPolicy.cpp
rename : caps/include/DomainPolicy.h => caps/DomainPolicy.h
rename : caps/idl/nsIDomainPolicy.idl => caps/nsIDomainPolicy.idl
rename : caps/idl/nsIPrincipal.idl => caps/nsIPrincipal.idl
rename : caps/idl/nsIScriptSecurityManager.idl => caps/nsIScriptSecurityManager.idl
rename : caps/src/nsJSPrincipals.cpp => caps/nsJSPrincipals.cpp
rename : caps/include/nsJSPrincipals.h => caps/nsJSPrincipals.h
rename : caps/src/nsNullPrincipal.cpp => caps/nsNullPrincipal.cpp
rename : caps/include/nsNullPrincipal.h => caps/nsNullPrincipal.h
rename : caps/src/nsNullPrincipalURI.cpp => caps/nsNullPrincipalURI.cpp
rename : caps/src/nsNullPrincipalURI.h => caps/nsNullPrincipalURI.h
rename : caps/src/nsPrincipal.cpp => caps/nsPrincipal.cpp
rename : caps/include/nsPrincipal.h => caps/nsPrincipal.h
rename : caps/src/nsScriptSecurityManager.cpp => caps/nsScriptSecurityManager.cpp
rename : caps/include/nsScriptSecurityManager.h => caps/nsScriptSecurityManager.h
rename : caps/src/nsSystemPrincipal.cpp => caps/nsSystemPrincipal.cpp
rename : caps/include/nsSystemPrincipal.h => caps/nsSystemPrincipal.h
2014-07-15 11:12:59 -07:00
571a8c4e1f
Bug 965413 part 4. Teach the security manager about nsILoadInfo. r=smaug
2014-07-10 02:56:36 -04:00
e56956aa2f
Bug 1032644 - Fix some -Wunused warnings in non-unified OS X build. r=ehsan
2014-07-02 18:55:19 -07:00
dd08a67adb
Bug 1028588 - Fix dangerous public destructors in miscellaneous places - r=ehsan
2014-06-23 18:40:03 -04:00
eb4c58e601
Bug 1008481 - Even more debugging output. r=me DONTBUILD
2014-06-10 21:44:32 -07:00
5d261ca374
Bug 1022667, part 1 - Remove IDToString from nsScriptSecurityManager.cpp. r=Ms2ger
2014-06-10 16:42:20 +01:00
Bobby Holley
Daniel Holbert
Mike Taylor
Neil Rashbrook
Wes Kocher
David Major
Andrea Marchesini
David Rajchenbach-Teller
Ms2ger
Christoph Kerschbaumer
Mike Hommey
Boris Zbarsky
Gabor Krizsanits
Ehsan Akhgari
Jonathan Griffin
Blake Kaplan
Andrew McCreight
Phil Ringnalda
Chris Peterson
Tom Schuster
Bob Owen
Shu-yu Guo
Ryan VanderMeulen
Fabrice Desré
Trevor Saunders
Sid Stamm
Steve Fink
Birunthan Mohanathas
Benoit Jacob
Jonathan Watt