Граф коммитов

11186 Коммитов

Автор SHA1 Сообщение Дата
Phil Ringnalda ea85356f95 Merge m-c to m-i 2017-02-12 15:33:29 -08:00
David Major 66f98480ef Bug 1335294: Remove const from data tables under security/ for better codegen on Windows. r=keeler
MozReview-Commit-ID: 3k1Gpm0ugY2
2017-02-13 09:41:20 +13:00
ffxbld 9057f0c449 No bug, Automated HPKP preload list update from host bld-linux64-spot-031 - a=hpkp-update 2017-02-12 07:27:38 -08:00
ffxbld dfb75b1bd9 No bug, Automated HSTS preload list update from host bld-linux64-spot-031 - a=hsts-update 2017-02-12 07:27:36 -08:00
ffxbld 3f38ad8e9c No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-02-11 07:51:02 -08:00
ffxbld f27f804b88 No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-02-11 07:50:59 -08:00
Wes Kocher 71842da0e8 Merge autoland to central, a=merge
MozReview-Commit-ID: 8GR9XTMPAjp

--HG--
rename : netwerk/base/security-prefs.js => security/manager/ssl/security-prefs.js
2017-02-10 14:32:26 -08:00
ffxbld 7de3f46c87 No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-02-10 07:05:40 -08:00
ffxbld 7f6d91a361 No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-02-10 07:05:38 -08:00
Iris Hsiao 24ddf955dd Backed out changeset e887fb5d5d06 (bug 1337748) for eslint failure
--HG--
rename : security/manager/ssl/security-prefs.js => netwerk/base/security-prefs.js
2017-02-10 14:00:02 +08:00
Masatoshi Kimura 2154e8d95a Bug 1337748 - Move security-prefs.js from netwerk/ to security/manager/. r=keeler,mcmanus
MozReview-Commit-ID: 2TOJG6tRWJZ

--HG--
rename : netwerk/base/security-prefs.js => security/manager/ssl/security-prefs.js
extra : rebase_source : 4127a5c9676f24d17a0f38efed8e9ad558044b07
2017-02-08 21:16:27 +09:00
Phil Ringnalda b5acb9b812 Backed out 2 changesets (bug 1336867) for (at least) eslint failures
CLOSED TREE

Backed out changeset 0a4f283638cb (bug 1336867)
Backed out changeset 837766805d75 (bug 1336867)

--HG--
rename : security/manager/ssl/tests/unit/test_sts_parser.js => security/manager/ssl/tests/gtest/STSParserTest.cpp
2017-02-09 19:02:32 -08:00
Jonathan Hao e28cb314a8 Bug 1336867 - Remove unsafeProcessHeader and isSecureHost in nsISiteSecurityService r=keeler,mgoodwin,past
--HG--
extra : rebase_source : 3b14ddfcb4107eeeb15ba5498d0b516310847c58
2017-02-08 11:17:29 +08:00
Jonathan Hao 8b8bdd6f07 Bug 1336867 - Move STSParserTest.cpp to test_sts_parser.js r=keeler
--HG--
rename : security/manager/ssl/tests/gtest/STSParserTest.cpp => security/manager/ssl/tests/unit/test_sts_parser.js
extra : rebase_source : dfadaa8f9f0030e07a4ea7bf64e36a7b4d959521
2017-02-07 10:23:45 +08:00
Wes Kocher e27ab18a24 Merge autoland to central, a=merge
MozReview-Commit-ID: Cu9iXbDAS7t
2017-02-09 16:36:11 -08:00
ffxbld 7d72c6ef47 No bug, Automated HPKP preload list update from host bld-linux64-spot-387 - a=hpkp-update 2017-02-09 07:37:08 -08:00
ffxbld 7efff53231 No bug, Automated HSTS preload list update from host bld-linux64-spot-387 - a=hsts-update 2017-02-09 07:37:04 -08:00
Cykesiopka 35ac12c63d Bug 1331983 - Avoid non-smart string IDL types in nsIX509CertDB.idl. r=gcp,keeler,nwgh
Smart string classes like nsCString are safer to use than raw |char*| strings,
and are typically easier to deal with as well.

MozReview-Commit-ID: 2PdrCa6cbpe

--HG--
extra : rebase_source : a8730dd48e954f4947534a0d4d524848061dac98
2017-02-09 23:11:29 +08:00
Masatoshi Kimura 448874c0f1 Bug 1337748 - Move security-prefs.js from netwerk/ to security/manager/. r=keeler,mcmanus
MozReview-Commit-ID: 2TOJG6tRWJZ

--HG--
rename : netwerk/base/security-prefs.js => security/manager/ssl/security-prefs.js
extra : rebase_source : e11ef6fa7264edd41e77d65512a2183c737f34dd
2017-02-08 21:16:27 +09:00
ffxbld 166c51d181 No bug, Automated HPKP preload list update from host bld-linux64-spot-013 - a=hpkp-update 2017-02-08 07:19:15 -08:00
ffxbld 8a301bbd0d No bug, Automated HSTS preload list update from host bld-linux64-spot-013 - a=hsts-update 2017-02-08 07:19:13 -08:00
Franziskus Kiefer 78e9074835 Bug 1334127 - land NSS e3bca65235d5, r=me 2017-02-08 06:00:53 +01:00
Wes Kocher 672c83ed65 Merge inbound to central, a=merge
MozReview-Commit-ID: 5H1ZxSV0XuM
2017-02-07 16:33:31 -08:00
Wes Kocher eba276a4fb Merge autoland to central, a=merge
MozReview-Commit-ID: 8yDHss0OAAq
2017-02-07 15:56:57 -08:00
ffxbld 5586217f34 No bug, Automated HPKP preload list update from host bld-linux64-spot-055 - a=hpkp-update 2017-02-07 07:33:06 -08:00
ffxbld 3139a8b47f No bug, Automated HSTS preload list update from host bld-linux64-spot-055 - a=hsts-update 2017-02-07 07:33:04 -08:00
Cykesiopka fa71c479fc Bug 1332636 - Remove PSM support for Firefox Marketplace apps and Trusted Hosted Apps. r=keeler
THA was removed in Bug 1196988.

After Bug 1235869 and Bug 1238079, Firefox Marketplace apps are at most
supported by B2G, and B2G only code doesn't need to be in m-c anymore.

MozReview-Commit-ID: DAx5lRdYQo0

--HG--
extra : rebase_source : e7fc32195def3acda2d53a6e3cb969f1e8a9a9a1
2017-02-06 23:43:38 +08:00
Haik Aftandilian fe1e99cceb Bug 1333681 - Part 2 - Adds tests for reading of the profile dir; r=bobowen,gcp
Adds additional tests that try to read files and get directory listings from
both a web content process and a file content process.

Tests include attempting to read the profile directory and cookies file from
a web content process and validating that this is prevented by the sandbox
when the sandbox level (security.sandbox.content.level) is set high enough.
Only Mac (for now) uses a level that includes read access blocking of the
profile directory.

Tests also attempt to read the profile and cookies file from a file content
process which should be allowed.

MozReview-Commit-ID: KfyT9ohsuuG

--HG--
extra : rebase_source : f1c5aa2fef58a6bb859623072770ea918f8f4df1
2017-02-01 21:26:23 -08:00
Wes Kocher 848c29538a Merge inbound to central, a=merge
MozReview-Commit-ID: 2yQjOIMCCiO
2017-02-06 17:45:21 -08:00
Wes Kocher e88bb6a257 Merge autoland to m-c a=merge
MozReview-Commit-ID: EcBWp8VLx1x
2017-02-06 17:37:51 -08:00
ffxbld e53176272b No bug, Automated HPKP preload list update from host bld-linux64-spot-1037 - a=hpkp-update 2017-02-06 08:13:57 -08:00
ffxbld 07ad576454 No bug, Automated HSTS preload list update from host bld-linux64-spot-1037 - a=hsts-update 2017-02-06 08:13:55 -08:00
David Keeler c7118bb741 bug 1335576 - stop passing nsINSSComponent around everywhere in nsNSSCertHelper.cpp r=Cykesiopka
MozReview-Commit-ID: LW4JEnvh1tR

--HG--
extra : rebase_source : fd8bfc7343419ff5412b32042ce98d27eea7c350
2017-01-31 14:08:56 -08:00
David Keeler 6cb15d5fe6 bug 1335576 - run clang-format on nsNSSCertHelper.cpp r=Cykesiopka
MozReview-Commit-ID: 61ocKUdur9G

--HG--
extra : rebase_source : 34fffd66e627f9ab8a38a4c779da2abfd3bef954
2017-01-31 13:23:55 -08:00
Carsten "Tomcat" Book 775c0b6d2b Merge mozilla-central to mozilla-inbound 2017-02-07 14:14:38 +01:00
Bob Owen 0b173d4f36 Bug 1321724: Change USER_NON_ADMIN access token level from whitelist to blacklist containing Admin SIDs. r=jimm
MozReview-Commit-ID: 9cx2R6kMUwa
2017-02-07 10:59:43 +00:00
Carsten "Tomcat" Book ac8a2fb906 Backed out changeset a608c5cc4ff8 (bug 1321725) for landing with wrong bug number
--HG--
extra : rebase_source : 1d7b5b836c1e67507c6592c11d1bfe50623eee84
2017-02-07 11:50:54 +01:00
Bob Owen 2ca65ce116 Bug 1321725: Change USER_NON_ADMIN access token level from whitelist to blacklist containing Admin SIDs. r=jimm
MozReview-Commit-ID: 9cx2R6kMUwa
2017-02-07 10:38:24 +00:00
Jed Davis 467786d86a Bug 1335329 - Improve handling of mkdir() on preexisting directories in Linux sandbox file broker. r=gcp
If the path given doesn't have write+create permissions in the broker
policy, but does have MAY_ACCESS (i.e., if checking for its existence
with lstat() or access() would be allowed), then check for its existence
and fail with EEXIST the way the the real mkdir() would.

Note that mkdir() fails with EEXIST even the existing file isn't a
directory, including if it's a broken symlink.

MozReview-Commit-ID: 13Cwnq1nRrw

--HG--
extra : rebase_source : c37caa091583fa85a0a72ed62fa9f12a3523e8f4
2017-02-02 11:56:21 -07:00
Franziskus Kiefer 2b1b7ba92f Bug 1334127 - land NSS 0750d7a0402b, r=me
--HG--
extra : rebase_source : db118d989a2dd5a964230369bfe27297cf073ca4
2017-02-06 06:02:12 +01:00
ffxbld 24209083be No bug, Automated HPKP preload list update from host bld-linux64-spot-018 - a=hpkp-update 2017-02-05 07:38:32 -08:00
ffxbld 7b0a9b6ebf No bug, Automated HSTS preload list update from host bld-linux64-spot-018 - a=hsts-update 2017-02-05 07:38:30 -08:00
Phil Ringnalda 56e8c0db4a Merge autoland to m-c, a=merge 2017-02-04 16:36:35 -08:00
ffxbld 80fd210dd6 No bug, Automated HPKP preload list update from host bld-linux64-spot-017 - a=hpkp-update 2017-02-04 07:26:25 -08:00
ffxbld 933525c585 No bug, Automated HSTS preload list update from host bld-linux64-spot-017 - a=hsts-update 2017-02-04 07:26:23 -08:00
ffxbld a643925da8 No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update 2017-02-03 07:17:03 -08:00
ffxbld b0c736bd73 No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update 2017-02-03 07:17:01 -08:00
Franziskus Kiefer 0f7202f3c2 Bug 1334127 - land NSS 0a7ba014dbb3, r=me 2017-02-03 06:00:56 +01:00
Wes Kocher 9df4609d47 Merge autoland to central, a=merge
MozReview-Commit-ID: 2YFPzTIzJeU
2017-02-02 15:55:40 -08:00
ffxbld 6f0eb0ec8e No bug, Automated HPKP preload list update from host bld-linux64-spot-018 - a=hpkp-update 2017-02-02 07:29:08 -08:00