gecko-dev/docshell/base
Yoshi Huang 94d1d69dc1 Bug 1373513 - Part 1: data:image, data:css, and data:fonts should be same origin. r=smaug
For font-face
https://drafts.csswg.org/css-fonts-3/#font-fetching-requirements

/* data url's with no redirects are treated as same origin */
src: url("data:application/font-woff;base64,...");

For image
https://html.spec.whatwg.org/multipage/images.html#updating-the-image-data
Step 12
 Fetch request. Let this instance of the fetching algorithm be
associated with image request.

This will go to Fetch spec then.

For <link rel="stylesheet" href="data:text/css" ...>
https://html.spec.whatwg.org/multipage/semantics.html#obtaining-a-resource-from-a-link-element
Step 10
Fetch request.

This will also go to Fetch spec then.

[Fetch] specification,
https://fetch.spec.whatwg.org/#main-fetch, step 12,
request’s current url’s scheme is "data"
1. Set request’s response tainting to "basic".

And from
https://html.spec.whatwg.org/multipage/urls-and-fetching.html#terminology-3
A response whose type is "basic", "cors", or "default" is
CORS-same-origin.

For subresource loading using data: URI, it should be treated as same
origin.
2017-07-12 11:00:13 +08:00
..
crashtests Bug 1362903 - Use reftest-wait to ensure this test finishes. r=smaug 2017-06-19 11:34:15 +09:00
timeline Bug 1371457 - Change restyle marker data to animation state. r=bholley,gregtatum 2017-06-28 11:59:28 -07:00
IHistory.h
LoadContext.cpp Bug 1316683 - Part 5: Avoid going into SpiderMonkey for retrieving origin attributes; r=baku 2017-04-12 11:32:19 -04:00
LoadContext.h Bug 1316683 - Part 1: Make nsILoadContext non-scriptable. r=ehsan 2017-04-12 11:32:05 -04:00
PendingGlobalHistoryEntry.cpp Bug 1338548 - Check the return value from aHistory->SetURITitle when applying pending global history entries, r=smaug 2017-02-10 17:53:12 -05:00
PendingGlobalHistoryEntry.h Bug 1330332 - Add support for handling global history changes with PendingGlobalHistoryEntry for prerendering, r=smaug 2017-01-19 15:26:17 -05:00
SerializedLoadContext.cpp Bug 1316683 - Part 5: Avoid going into SpiderMonkey for retrieving origin attributes; r=baku 2017-04-12 11:32:19 -04:00
SerializedLoadContext.h Bug 1322576 - [1.2] Add tracking protection attribute to nsILoadContext to allow for overriding of the global preference setting for individual DocShells. r=smaug 2017-02-22 14:57:37 +01:00
moz.build Bug 1373513 - Part 1: data:image, data:css, and data:fonts should be same origin. r=smaug 2017-07-12 11:00:13 +08:00
nsAboutRedirector.cpp Bug 1319111 - Expose 'result principal URI' on LoadInfo as a source for NS_GetFinalChannelURI (removes some use of LOAD_REPLACE flag). r=bz, r=mikedeboer 2017-05-30 18:07:59 +02:00
nsAboutRedirector.h
nsCDefaultURIFixup.idl
nsCTooltipTextProvider.h Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsContextMenuInfo.cpp Bug 1348050 - Part 3: Mark channel as urgent-start for loading image. r=baku,mayhemer 2017-04-25 09:17:38 +08:00
nsContextMenuInfo.h Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsDSURIContentListener.cpp Bug 1370788 - Move XFO out of nsDSURIContentListener.cpp into dom/security. r=smaug 2017-06-19 06:59:44 +02:00
nsDSURIContentListener.h Bug 1370788 - Move XFO out of nsDSURIContentListener.cpp into dom/security. r=smaug 2017-06-19 06:59:44 +02:00
nsDefaultURIFixup.cpp Bug 1087380 - avoid alternate (www....com) URI fixup for localhost and items with ports, r=bz 2017-05-06 19:59:24 +01:00
nsDefaultURIFixup.h Bug 1332892 - Remove obsolete hackaround from nsDefaultURIFixup.cpp. r=bz 2017-01-22 14:32:37 +09:00
nsDocShell.cpp Bug 1373513 - Part 1: data:image, data:css, and data:fonts should be same origin. r=smaug 2017-07-12 11:00:13 +08:00
nsDocShell.h merge mozilla-inbound to mozilla-central a=merge 2017-06-27 10:56:41 +02:00
nsDocShellEditorData.cpp
nsDocShellEditorData.h
nsDocShellEnumerator.cpp
nsDocShellEnumerator.h
nsDocShellLoadInfo.cpp Bug 1319111 - Expose 'result principal URI' on LoadInfo as a source for NS_GetFinalChannelURI (removes some use of LOAD_REPLACE flag). r=bz, r=mikedeboer 2017-05-30 18:07:59 +02:00
nsDocShellLoadInfo.h Bug 1319111 - Expose 'result principal URI' on LoadInfo as a source for NS_GetFinalChannelURI (removes some use of LOAD_REPLACE flag). r=bz, r=mikedeboer 2017-05-30 18:07:59 +02:00
nsDocShellLoadTypes.h
nsDocShellTransferableHooks.cpp
nsDocShellTransferableHooks.h
nsDocShellTreeOwner.cpp Bug 1372405 - Provide names for all runnables in the tree (r=froydnj) 2017-06-26 14:19:58 -07:00
nsDocShellTreeOwner.h Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsDownloadHistory.cpp
nsDownloadHistory.h
nsIClipboardCommands.idl
nsIContentViewer.idl Bug 1376164 - Turn nsDocumentViewer::mHintCharset and mForceCharacterSet into const mozilla::Encoding*. r=hsivonen 2017-06-25 22:46:08 +09:00
nsIContentViewerContainer.idl
nsIContentViewerEdit.idl
nsIContentViewerFile.idl
nsIContextMenuListener.idl Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsIContextMenuListener2.idl Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsIDocCharset.idl
nsIDocShell.idl Bug 1373984 - Turn nsIDocument::mCharacterSet into mozilla::NotNull<const mozilla::Encoding*>. r=hsivonen 2017-06-18 20:37:50 +09:00
nsIDocShellLoadInfo.idl Bug 1319111 - Expose 'result principal URI' on LoadInfo as a source for NS_GetFinalChannelURI (removes some use of LOAD_REPLACE flag). r=bz, r=mikedeboer 2017-05-30 18:07:59 +02:00
nsIDocShellTreeItem.idl Bug 1337537 - Remove the need for TabGroup to be an nsISupports for DocShell::FindItemWithName (r=mystor) 2017-02-13 17:02:47 -08:00
nsIDocShellTreeOwner.idl Bug 1322414 - part 1 - remove GetContentShellById and id passing, r=bz 2016-12-08 11:12:36 -10:00
nsIDocumentLoaderFactory.idl
nsIDownloadHistory.idl
nsIGlobalHistory2.idl
nsILinkHandler.h Bug 1182569 - Skip security check for plugins using newstream attribute. r=smaug 2017-01-03 20:59:54 +01:00
nsILoadContext.idl Bug 1316683 - Part 5: Avoid going into SpiderMonkey for retrieving origin attributes; r=baku 2017-04-12 11:32:19 -04:00
nsIPrivacyTransitionObserver.idl
nsIReflowObserver.idl
nsIRefreshURI.idl
nsIScrollObserver.h
nsIScrollable.idl
nsITextScroll.idl
nsITooltipListener.idl Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsITooltipTextProvider.idl Bug 1309049 - move embedding/ files out of that directory, r=jst,mossop 2017-01-12 13:47:27 -08:00
nsIURIFixup.idl
nsIWebNavigation.idl Bug 1359092 - Extend loadURI within nsIWebNavigation.idl by a triggeringPrincipal argument. r=bz 2017-04-25 12:22:25 +02:00
nsIWebNavigationInfo.idl
nsIWebPageDescriptor.idl
nsIWebShellServices.h
nsWebNavigationInfo.cpp Bug 1351490 - Only run plugin finding on flash mime types/extensions; r=bsmedberg 2017-04-11 13:53:58 -07:00
nsWebNavigationInfo.h