norris%netscape.com
72152baded
Fix bad separator in Makefile problem.
2000-02-10 05:33:49 +00:00
norris%netscape.com
2b4b436f5f
Fix 25062 Reload vulnerability
...
25206 Reload vulnerability #2
Implement grant dialogs and persistence for capabilities.
most r=mstoltz, some code from morse w/ r=norris
2000-02-10 04:56:56 +00:00
norris%netscape.com
7cd400a26f
* Fix the following bugs by tightening the default security policy.
...
17977 [DOGFOOD] Reading documents using document.body
17538 document.lastModified is exposed
17537 document.images vulnerabilities
16036 [DOGFOOD] document.Element exposes the DOM of documents from
15757 [DOGFOOD] Injecting JS code using setAttribute and getElemen
15550 Injecting text in documents from any domain using createText
15067 [DOGFOOD] getElementsByTagName() allows reading of arbitrary
* Create an array of dom property policy types and initialize it when the script security manager is created.
* Move some implementation code to a new shared implementation base class.
* Implement privilege enabling, disabling and reverting
* Implement stack walking for checking privileges.
r=mstoltz@netscape.com
* Modify nsIPref to support security policy work.
r=neeti@netscape.com
1999-11-11 22:10:36 +00:00
dmose%mozilla.org
142ac52eaf
updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org
1999-11-06 03:43:54 +00:00
briano%netscape.com
4f8c7d2d53
General cleanup.
1999-09-10 08:53:30 +00:00
norris%netscape.com
88708be24d
Makefile.in: remove unused file
...
nsScriptSecurityManager.cpp: Fix CheckURI problems (but still disabled)
nsSecurityManagerFactory.cpp: Make registration string match convention
1999-09-09 13:47:16 +00:00
kipp%netscape.com
b92bd76cbb
Make it build on unix
1999-09-01 01:50:01 +00:00
norris%netscape.com
ec9d253f50
Add all-powerful system principals. Remove some dead code from the build.
1999-09-01 00:54:35 +00:00
alecf%netscape.com
6c2881ae30
remove libcaps dependancy on libxp by using PL/PR routines instead of XP_*
1999-08-27 04:09:41 +00:00
arielb%netscape.com
1b252b2e3b
includes updates to codbase matching security checks currently turned off
...
but in place. redefined the script security manager in caps and it is
now generating codebase principals.
1999-08-20 09:51:02 +00:00
arielb%netscape.com
4b06750b30
removed zip support from caps module. from now on all that stuff will
...
be used by libjar. should also remove a lot of memory leaks reported on
nsZip
1999-08-07 21:40:33 +00:00
sspitzer%netscape.com
18ee1a3dd5
fix the port bustages. use ZLIB_LIBS and not -lz. r=briano.
1999-08-07 02:15:37 +00:00
sspitzer%netscape.com
e6cfae8c46
fix for run time bustage. r=briano
1999-08-07 00:10:14 +00:00
arielb%netscape.com
a1d83223f4
added a new and improved factory to caps module. fixed some bugs and
...
cleared some warnings. also move some methods of privilege manager to
principal manager.
1999-08-06 22:44:35 +00:00
briano%netscape.com
39e329f8ae
Cleaned it up.
1999-08-02 06:40:06 +00:00
arielb%netscape.com
0d16b83058
add a principal manager to caps api. everything is now xpidled so
...
i removed the public directory from the module.
1999-08-01 21:26:02 +00:00
arielb%netscape.com
d00edf950d
removed some enums and migrated them into nsPrivilege, nsIPrivilege and
...
nsPrivilegemanager. cleaning up some old code from the security module
and refining their api's and such like.
1999-07-27 00:50:59 +00:00
arielb%netscape.com
8dad60d09d
Fix to the caps security module. I removed the nsPrincipal struct, from now
...
on you can access principals by their xpcomed interface nsIPrincipal.
1999-07-24 03:58:23 +00:00
arielb%netscape.com
587d04c222
idled principals interfaces and some fixes to caps manager...
1999-07-16 20:31:18 +00:00
raman%netscape.com
eb1dd00c2c
Bug fixes from MozillaClassic branch, plus changes to build caps without rdf
1998-11-16 21:57:13 +00:00
cls%seawood.org
5db72cde51
Moved zlib from REQUIRES to a ifndef MOZ_NATIVE_ZLIB endif block.
1998-10-22 03:59:53 +00:00
cls%seawood.org
ed2a7f5f65
Sync'd various Makefile.ins to their Makefile counterparts.
...
Removed nspr & nspr20 from REQUIRES. Removed NSPR_LDFLAGS.
Changed LIBNSPR refs to NSPR_LIBS.
Removed leftover NSPR20 ifdefs.
1998-10-21 02:13:56 +00:00
sudu%netscape.com
7563a7dd9d
Bring autoconf build up to date with non-autoconf build
1998-09-21 19:25:58 +00:00
raman%netscape.com
0b469efbf5
Added CPPSRCS
1998-09-02 19:11:06 +00:00
cls%seawood.org
9020b80c52
Updates to autoconf files.
1998-08-26 04:04:57 +00:00
cls%seawood.org
84f1cedcbb
AUTOCONF_1_0 landing.
1998-08-19 20:42:14 +00:00