6e5d279c63
Bug 757046 - Convert enablePrivilege into an insecure test-only construct (preffed off everywhere but in automation). r=bz
2012-08-23 11:45:28 -07:00
b41ca730d1
Bug 784551 - remove JSSecurityCallbacks::findObjectPrincipals (r=mrbkap)
...
--HG--
extra : rebase_source : 8043b79eb031e4c3e196f6f693fa6a8a16099ecb
2012-08-23 09:51:09 -07:00
ceb8da37c6
Bug 668558 - remove JSSecurityCallbacks::subsumePrincipals (r=mrbkap)
...
--HG--
extra : rebase_source : 6cb1ce1b8f2505ca98235e7ad44138ac5f42737a
2012-08-23 09:45:24 -07:00
4e199a1679
Bug 780618 - Move all error codes to nsError.h; r=ehsan
2012-07-27 17:03:27 +03:00
f813f6360a
Bug 777135 - Part 1: Add nice C++ version of nsIPrincipal::GetAppStatus. r=mounir
...
--HG--
extra : rebase_source : 6150a2b708faa41f1f6c7723260fc52444b7ea8d
2012-08-13 12:58:38 -04:00
ee9eae3141
Fix for bug 768692 (Move DOM list binding generation to the new DOM binding codegen). r=bzbarsky.
...
--HG--
extra : rebase_source : 651a0fac4c9a87ef1c0a9cd91588c6421fd050c4
2012-05-22 15:46:20 +02:00
75ab7efb95
Bug 780387 - Part b: Stop using PRIntn; r=bsmedberg
2012-08-09 09:09:40 +02:00
01a802da01
Bug 341604 - modify CheckMayLoad to allow sandboxed workers to load blob and data URIs r=jst
2012-08-20 11:34:33 -07:00
588eef842d
Bug 777705 - Default policy for expanded principals. r=mrbkap
2012-08-20 11:22:34 -07:00
894868aa63
Bug 781224 - Rename APP_STATUS_TRUSTED to APP_STATUS_PRIVILEGED in nsIPrincipal [r=mounir]
2012-08-08 10:21:54 -07:00
a2abc41ee2
Bug 775788 - Modify JSFunctionSpec to accept JSJitInfos. (r=luke)
2012-08-07 22:26:19 -07:00
53e0011130
No bug - Fix error in nsIPrincipal comment (it's nsIScriptSecurityManager::NO_APP_ID, not nsIAppsService::NO_APP_ID). r=me DONTBUILD
2012-08-06 00:31:22 -04:00
70d7c821af
Bug 774032 bonus - Use @DEPTH@ and @relativesrcdir@ in Makefile.in. r=ted
2012-08-04 20:26:44 +02:00
69647e26b0
Bug 776824 - Add isInBrowserElement to nsIPrincipal. r=mrbkap sr=sicking
2012-07-31 17:47:20 +02:00
d0ad5a7d0c
Bug 777292 part 2 - Change all nsnull to nullptr
2012-07-30 17:20:58 +03:00
a9916a6e83
Bug 772987 - Part 2: Use Static{Auto,Ref}Ptr where appropriate. r=mounir
...
--HG--
extra : rebase_source : 4e3e72ba53cd0177160f80231eebeb4972119eec
2012-07-26 15:33:45 -04:00
35a4609900
Bug 777582 - Make nsPrincipal deserialize members in the order that they are serialized. r=mounir
2012-07-25 20:12:03 -04:00
497e7cd9bb
Bug 773637 - Kill NS_SCRIPTABLE attributes, Part 2: Remove NS_SCRIPTABLE. r=ehsan
...
--HG--
extra : rebase_source : 83020e0a1961ed5b33d5e0599419c6b7b82caa87
2012-07-06 15:31:49 -05:00
a1186c1020
Bug 773637 - Kill NS_SCRIPTABLE annotations, Part 1: Remove NS_*PARAM annotations. r=ehsan
...
--HG--
extra : rebase_source : a0b4bc50fece36d9a90fed61431635948bfa33b5
2012-07-06 15:14:07 -05:00
a3a4cd22bf
Bug 758258 - part 6 - Change how extendedOrigin is generated. r=sicking
2012-07-21 17:37:02 -07:00
6f0cdcac36
Bug 758258 - Tests. r=sicking
2012-07-21 17:14:25 -07:00
23c9838514
Bug 774585: Rename getCodebasePrincipal to getSimpleCodebasePrincipal since the behavior has semantically changed. r=mounir
2012-07-21 00:29:40 -07:00
2b321c7ef8
Bug 774585 - Temporarily disable test_principal_extendedorigin_appid_appstatus.html for failures on OS X 10.7 (and possibly others); rs=mounir on a CLOSED TREE
2012-07-20 12:20:55 +01:00
df5968efcc
No bug - fix build bustage on Windows/Android and M-oth on MacOS. r=me CLOSED TREE
2012-07-20 02:14:25 -07:00
118be3572d
No bug - Pushing on a CLOSED TREE. r=me
2012-07-20 00:32:12 -07:00
451cb5b27f
Bug 774585 - Tests. r=sicking
2012-07-20 00:26:05 -07:00
02bbfed9f0
Bug 774585 - Make GetChannelPrincipal get the correct app principal. r=mounir
2012-07-20 00:07:49 -07:00
c10568d0b9
Bug 774585 - Add GetDocShellCodebasePrincipal to nsIScriptSecurityManager. r=mounir
2012-07-20 00:06:24 -07:00
1887aa86ce
Bug 758258 - part 5 - Add GetAppCodebasePrincipal and GetNoAppCodebasePrincipal to nsIScriptSecurityManager. r=mrbkap sr=sicking
2012-07-19 20:28:08 -07:00
72c743ad58
Bug 758258 - part 4 - Update CreateCodebasePrincipal() to take app/inbrowser info. r=sicking
2012-07-19 15:32:08 -07:00
99b949ad17
Bug 758258 - part 3 - Add extendedOrigin, appStatus and appId to nsIPrincipal. r=bholley sr=sicking
2012-07-19 22:44:03 -07:00
6422e89acc
No bug - Disable failing test on a CLOSED TREE. r=me
2012-07-19 18:55:05 -07:00
ec19a64b45
No bug - fix test bustage on a CLOSED TREE. r=me
2012-07-19 17:35:42 -07:00
84f86ababe
Bug 758258 - Part 2 - Add GetExtendedOrigin(), NO_APP_ID and UNKNOWN_APP_ID. r=sicking
2012-07-18 21:25:19 -07:00
3c5ac44be1
Bug 758258 - Part 1 - Create skeleton for extendedOrigin tests. r=sicking
2012-07-19 16:14:11 -07:00
87ba3d6565
Backed out changeset 1bafff5720a8
2012-07-19 15:22:36 -07:00
dfcda357cb
Backed out changeset afc1cf222996
2012-07-19 15:22:32 -07:00
82bd7de2c9
Bug 758258 - Part 2 - Add GetExtendedOrigin(), NO_APP_ID and UNKNOWN_APP_ID. r=sicking
2012-07-18 21:25:19 -07:00
41bafcaa32
Bug 758258 - Part 1 - Create skeleton for extendedOrigin tests. r=sicking
2012-07-19 10:29:21 -07:00
41eae831f2
Bug 775354 - Add a static method to be able to compute the origin based on nsPrincipal algorithm. r=mrbkap
2012-07-18 21:23:44 -07:00
61d9d40b3d
Bug 327244 (2/2) - Remove nsIScriptSecurityManager::CheckLoadURI(). r=sicking,jlebar
2012-07-18 15:27:02 -07:00
adfa6702cc
Bug 327244 (1/2) - Remove nsIScriptSecurityManager::CheckLoadURIStr(). r=sicking
2012-07-19 10:49:17 -07:00
c2d155cb67
Backout ea6db8f420c0 (bug 770831), b51c79ee0883 (bug 774957), 020f6ed5958b (bug 758258), 11d8e19e1fca (bug 758258), 707fc51bfe2e (bug 775354), 489d944a6fe6 (bug 327244), be7df3c9d50f (bug 327244) for m-oth orange
2012-07-19 08:29:48 +01:00
49af88332c
Bug 758258 - Part 2 - Add GetExtendedOrigin(), NO_APP_ID and UNKNOWN_APP_ID. r=sicking
2012-07-18 21:25:19 -07:00
59be621600
Bug 758258 - Part 1 - Create skeleton for extendedOrigin tests. r=sicking
2012-07-18 21:26:30 -07:00
a809017de5
Bug 775354 - Add a static method to be able to compute the origin based on nsPrincipal algorithm. r=mrbkap
2012-07-18 21:23:44 -07:00
f293eab524
Bug 327244 (2/2) - Remove nsIScriptSecurityManager::CheckLoadURI(). r=sicking,jlebar
2012-07-18 15:27:02 -07:00
432f61b8f5
Bug 327244 (1/2) - Remove nsIScriptSecurityManager::CheckLoadURIStr(). r=sicking
2012-07-18 13:35:15 -07:00
4c50ad8340
Bug 774585: Remove unused argument in nsScriptSecurityManager. r=mrbkap
2012-07-17 22:28:47 -07:00
9ecc2d4946
Bug 655649 - Recompute cross-compartment wrappers when setting document.domain. r=mrbkap
2012-07-12 10:10:15 +02:00
bfff055672
Bug 370750 - consolidate mochitest files installation; r=glandium
...
With assistance on the patch from Ms2ger, Waldo, and Mossop.
2012-07-03 16:49:02 -04:00
1e533fbd2e
Bug 769533 - Part 1. Replace AppendWithConversion with others. r=jlebar
2012-07-06 18:43:28 +09:00
791b8a0a39
Bug 754202 - Check principal in IsCapabilityEnabled when there's no code on the stack. r=mrbkap
2012-06-28 23:47:55 +02:00
338e1a2a10
Bug 754202 - Remove mContextPrincipal usage from within nsScriptSecurityManager. r=mrbkap
2012-06-28 23:47:55 +02:00
83245872f0
Bug 754202 - Remove context pushing/popping API. r=mrbkap Each one of these uses grabs the principal off of an object for pushing, but also enters the compartment of that object. So we shouldn't need this anymore.
...
Can I get a 'hell yeah'?
2012-06-28 23:47:55 +02:00
285b2d0a7e
Bug 754202 - Pull subject principals directly off the compartment. r=mrbkap It would be nice to check these principals against the principals acquired using the old mechanism. Unfortunately, they often differ. Because CAPS uses JS stack frames, any time we enter a compartment and do an operation (even throwing an Access-Denied exception) without running any JS code, we'll end up with a different principal.
...
Our security story is pretty darn tied to compartments at this point, so let's
just pull the trigger.
2012-06-28 23:47:55 +02:00
6def798e8f
Bug 754202 - Pull object principals directly off the compartment and assert that behavior doesn't change. r=bz
2012-06-28 23:47:55 +02:00
0ba5460898
Bug 766173 - Hold a strong ref to nsScriptSecurityManager, instead of hoping that it won't get addref'ed or released. r=bsmedberg
...
--HG--
rename : mobile/android/base/resources/drawable/tabs_button_contracted.xml => mobile/android/base/resources/drawable/tabs_button.xml
extra : rebase_source : 8f861c2298fd053a0e1f6deb6f9945040ea8db90
2012-06-19 13:20:34 -04:00
549521b5db
Bug 758992 - Make the classes which use the XPCOM nsISupports implementation macros final, to avoid the warning about deleting using a pointer to a base class with virtual functions and no virtual dtor (caps parts); r=bholley
2012-06-12 23:58:27 -04:00
8d5ee1114e
Merge m-c to inbound
2012-06-10 21:34:50 -04:00
ca009b979f
Backout bug 754202 (all patches, rather than just patches 3-7).
2012-06-10 17:22:31 -07:00
0ec5784959
Backout 90107a2a0c64 (bug 754202) for real due to orange.
2012-06-10 19:46:20 -04:00
5f2a19ee6e
Revert c39d36167b99 due to a horribly munged backout.
2012-06-10 19:44:50 -04:00
6d6c4efbab
Backout the bug 754202 backout due to orange.
2012-06-10 19:37:47 -04:00
75ea89c874
Merge backout.
2012-06-11 00:28:30 +02:00
b65e3d0fc1
Back out bug 754202. r=me
2012-06-11 00:28:05 +02:00
00f2cea380
Bug 734891 - Followup: Fix build warnings in nsPrincipal.cpp.
2012-06-10 21:25:17 +02:00
a4d0a2ae65
Bug 734891 - part 2: Adding ExpandedPrincipal support
2012-06-09 15:19:26 -07:00
c33eb75fc0
Bug 734891 - part 1: Decoupling URI based logic from caps/certificate related logic of nsPrincipal
2012-06-09 15:19:26 -07:00
0cf789a95d
Bug 734891 - part 0: rearanging nsPrincipal methods for follow up
2012-06-09 15:19:26 -07:00
8c6bec7d49
Bug 754202 - Remove mContextPrincipal usage from within nsScriptSecurityManager. r=mrbkap
2012-06-07 14:28:22 +02:00
3065c84571
Bug 754202 - Remove context pushing/popping API. r=mrbkap
...
Each one of these uses grabs the principal off of an object for pushing, but also enters the compartment of that object. So we shouldn't need this anymore.
Can I get a 'hell yeah'?
2012-06-07 14:28:21 +02:00
3d5afc4e42
Bug 754202 - Pull subject principals directly off the compartment. r=mrbkap
...
It would be nice to check these principals against the principals acquired
using the old mechanism. Unfortunately, they often differ. Because CAPS uses
JS stack frames, any time we enter a compartment and do an operation (even
throwing an Access-Denied exception) without running any JS code, we'll end
up with a different principal.
Our security story is pretty darn tied to compartments at this point, so let's
just pull the trigger.
2012-06-07 14:28:21 +02:00
ddbdb6b79b
Bug 754202 - Pull object principals directly off the compartment, and assert that behavior doesn't change. r=bz
2012-06-07 14:28:21 +02:00
809a53856c
Bug 761707 part 2. Drop the vestigial jsclass argument to UnwrapDOMObject. r=bholley
2012-06-06 15:59:46 -04:00
82ff7027aa
Bug 716478 - update licence to MPL 2.
2012-05-21 12:12:37 +01:00
d55ff730fa
Use handles in API object hooks where possible, bug 750733. r=billm
2012-05-19 15:03:45 -07:00
66d81d0a7e
Backed out changeset 5fc7462dd394 for android orange.
2012-05-19 11:52:55 -07:00
7235558c07
Use handles in API object hooks where possible, bug 750733. r=billm
2012-05-19 09:48:09 -07:00
ba51dd062a
Bug 754968 - Part c: Make BindingUtils.h not require private xpconnect headers; r=bholley
2012-05-18 10:29:40 +02:00
448c19e69b
Bug 752226 - Remove any use of JSVAL_IS_OBJECT. r=luke,Ms2ger
2012-05-11 17:46:26 +02:00
94067f98cb
Backout 9b0fcaacb788 & bf3fef257e68 (bug 752226) for mochitest-other orange
2012-05-11 18:25:52 +01:00
a5e74fc12b
Bug 752226 - Remove any use of JSVAL_IS_OBJECT. r=luke,Ms2ger
...
--HG--
extra : rebase_source : edf2077f8b8bad1970eab6ebe9996e761d4e596c
2012-05-11 17:46:26 +02:00
a147767a14
Bug 741245 - Remove nsresult return value from nsXPConnect::GetSafeJSContext(); r=bholley
2012-05-05 11:00:05 +02:00
2299a42041
Bug 742217. Reduce the use of nested namespaces in our binding code. r=peterv,bent
...
In the new setup, all per-interface DOM binding files are exported into
mozilla/dom. General files not specific to an interface are also exported into
mozilla/dom.
In terms of namespaces, most things now live in mozilla::dom. Each interface
Foo that has generated code has a mozilla::dom::FooBinding namespace for said
generated code (and possibly a mozilla::bindings::FooBinding_workers if there's
separate codegen for workers).
IDL enums are a bit weird: since the name of the enum and the names of its
entries all end up in the same namespace, we still generate a C++ namespace
with the name of the IDL enum type with "Values" appended to it, with a
::valuelist inside for the actual C++ enum. We then typedef
EnumFooValues::valuelist to EnumFoo. That makes it a bit more difficult to
refer to the values, but means that values from different enums don't collide
with each other.
The enums with the proto and constructor IDs in them now live under the
mozilla::dom::prototypes and mozilla::dom::constructors namespaces respectively.
Again, this lets us deal sanely with the whole "enum value names are flattened
into the namespace the enum is in" deal.
The main benefit of this setup (and the reason "Binding" got appended to the
per-interface namespaces) is that this way "using mozilla::dom" should Just
Work for consumers and still allow C++ code to sanely use the IDL interface
names for concrete classes, which is fairly desirable.
--HG--
rename : dom/bindings/Utils.cpp => dom/bindings/BindingUtils.cpp
rename : dom/bindings/Utils.h => dom/bindings/BindingUtils.h
2012-05-03 00:35:38 -04:00
710c5cfdb0
Bug 750859 - Remove {Disable,Revert}Capability. r=bz, PGO helper on CLOSED TREE
2012-05-02 23:57:43 +02:00
e6e34db54d
Bug 750859 - Remove (most of) SetCanEnableCapability. r=bz
2012-05-02 23:57:34 +02:00
c532e2d4c3
Bug 750859 - Kill the CAPS confirm dialog. r=bz
...
This will break addons using enablePrivilege, but that's going away too. We've been warning for many releases now, so it's time to bite the bullet.
2012-05-02 23:57:34 +02:00
26ec731b76
Bug 750859 - remove unused (or seldom-used) PrivilegeManager functions. r=bz
2012-05-02 23:57:34 +02:00
729109dc65
Bug 735280 - Part 3: Components object specific wrapper. r=bholley
2012-04-28 09:12:28 -04:00
848ce91be4
Backout a0b3af4ac9f5 (bug 735280) due to Android jsreftest orange.
2012-04-25 21:59:36 -04:00
e342225871
Bug 735280 - Part 3: Components object specific wrapper. r=bholley
2012-04-25 20:12:33 -04:00
41b2438cb3
Backout 0b170d1f5d10 (bug 735280) due to red.
2012-04-24 22:09:23 -04:00
8870c5fe96
Bug 735280 - Part 3: Components object specific wrapper. r=bholley
2012-04-24 21:48:02 -04:00
94ccb204aa
Remove simple JS_FrameIterator use from content, DOM, and caps (bug 744617, r=mrbkap).
...
--HG--
extra : rebase_source : 003a5285b549845d47c9298606d737620db5bb3d
2012-04-16 12:30:00 -07:00
77ca860259
Backing out bf0a78471e5e:dc7022e2d807 for inexplicable windows crashes.
2012-04-14 17:52:34 +02:00
5a2d0a8476
Bug 741245 - Remove nsresult return value from nsXPConnect::GetSafeJSContext(); r=bholley
2012-04-14 15:05:01 +02:00
bb0cb90d39
Bug 740688 - Use uintptr_t instead of PRUword, and intptr_t instead of PRWord. r=jwalden
...
--HG--
extra : rebase_source : 648a581323d2c2893df780f71fe34dadcc4bbaab
2012-04-11 17:17:44 -07:00
403f8c3812
Bug 739825 - Push principals when entering compartments in structured clone. r=mrbkap
2012-04-05 14:02:34 -07:00
ed510d3506
Fix for bug 740069 (Generate JS bindings in C++ with a python script for DOM objects on the main thread and in workers. Infrastructure and new bindings for XMLHttpRequest). Patch by bent/bz/bholley/jst/khuey/peterv, r=bent/bz/bholley/jlebar/khuey/peterv/sicking/smaug.
...
--HG--
rename : js/xpconnect/tests/mochitest/test_bug462428.html => dom/bindings/test/test_lookupGetter.html
2012-03-30 21:42:20 -07:00
Bobby Holley
Luke Wagner
Aryeh Gregor
Justin Lebar
Peter Van der Beken
Ms2ger
Ian Melven
Gabor Krizsanits
Fabrice Desré
Eric Faust
Mike Hommey
Mounir Lamouri
William Chen
Joshua Cranmer
Jonas Sicking
Ed Morley
Steve Fink
Nathan Froyd
Makoto Kato
Ehsan Akhgari
Ryan VanderMeulen
L. David Baron
Boris Zbarsky
Gervase Markham
Brian Hackett
Tom Schuster
David Anderson
Mark Capella