11 Коммитов

Автор	SHA1	Сообщение	Дата
jdunn%netscape.com	cb0c532e85	Fix base class specifiers, since be default if they aren't specified it is Private ... # 23237 r= warren@netscape.com, ftang@netscape.com, jband@netscape.com	2000-01-11 01:45:34 +00:00
norris%netscape.com	7cd400a26f	* Fix the following bugs by tightening the default security policy. ... 17977 [DOGFOOD] Reading documents using document.body 17538 document.lastModified is exposed 17537 document.images vulnerabilities 16036 [DOGFOOD] document.Element exposes the DOM of documents from 15757 [DOGFOOD] Injecting JS code using setAttribute and getElemen 15550 Injecting text in documents from any domain using createText 15067 [DOGFOOD] getElementsByTagName() allows reading of arbitrary * Create an array of dom property policy types and initialize it when the script security manager is created. * Move some implementation code to a new shared implementation base class. * Implement privilege enabling, disabling and reverting * Implement stack walking for checking privileges. r=mstoltz@netscape.com * Modify nsIPref to support security policy work. r=neeti@netscape.com	1999-11-11 22:10:36 +00:00
dmose%mozilla.org	142ac52eaf	updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org	1999-11-06 03:43:54 +00:00
norris%netscape.com	0865f1cdaa	Create preferences for security checks. ... Add new methods on nsIScriptSecurityManager for capabilities. Fix 13739 MLK: nsScriptSecurityManager::CreateCodebasePrincipal Fix 11666 Eliminate plvector (was: [infinite loop] bugs - plvector.c)	1999-09-15 04:05:43 +00:00
norris%netscape.com	ec9d253f50	Add all-powerful system principals. Remove some dead code from the build.	1999-09-01 00:54:35 +00:00
mccabe%netscape.com	84982717ce	Spam caps subtree to replace declarations of IDL-defined interface methods in implementation classes with xpidl-generated NS_DECL_NSIFOO macro.	1999-08-21 20:22:27 +00:00
arielb%netscape.com	1b252b2e3b	includes updates to codbase matching security checks currently turned off ... but in place. redefined the script security manager in caps and it is now generating codebase principals.	1999-08-20 09:51:02 +00:00
arielb%netscape.com	a1d83223f4	added a new and improved factory to caps module. fixed some bugs and ... cleared some warnings. also move some methods of privilege manager to principal manager.	1999-08-06 22:44:35 +00:00
arielb%netscape.com	0d16b83058	add a principal manager to caps api. everything is now xpidled so ... i removed the public directory from the module.	1999-08-01 21:26:02 +00:00
arielb%netscape.com	8dad60d09d	Fix to the caps security module. I removed the nsPrincipal struct, from now ... on you can access principals by their xpcomed interface nsIPrincipal.	1999-07-24 03:58:23 +00:00
arielb%netscape.com	587d04c222	idled principals interfaces and some fixes to caps manager...	1999-07-16 20:31:18 +00:00