Read-only Git mirror of the Mercurial gecko repositories at https://hg.mozilla.org. How to contribute: https://firefox-source-docs.mozilla.org/contributing/contribution_quickref.html
Перейти к файлу
norris%netscape.com 51842ef45e Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes
Add checks to nsScriptSecurityManager::CheckCanListenTo that take
a principal and ensure that the currently executing script code
either is from the same origin as that principal or has the
UniversalBrowserRead privilege enabled. (chrome code has all
privileges enabled by default.) It's okay for the principal passed in
to be null. That just signifies a privileged window/document that only
can be listened to with privileges.

I added GetPrincipal/SetPrincipal methods to nsIEventListenerManager.
nsDocument::GetNewListenerManager sets a principal on the listener
manager when it creates one. Obviously there are other places that
create listener managers, but scripts seem to go through this one.

Another change is to save some memory usage. Currently I allocate an
array of PolicyType that is NS_DOM_PROP_MAX elements long.
Unfortunately, compilers appear to allocate four bytes for each
PolicyType, so the array takes around 2400 bytes. I've added changes
to use two bit vectors that should consume about 1/16 that space.

r=joki

There are also changes that push nsnull onto the JSContext stack when
entering a nested event loop.

r=jband
1999-11-25 05:28:18 +00:00
README/mozilla remove unused images 1999-10-20 00:15:50 +00:00
apache/gzip/src Add the source and Makefile for the new mod_gzip_content module. 1998-09-15 20:17:13 +00:00
build Get search locale DTDs from proper location. 1999-11-24 10:15:53 +00:00
calendar updating license boilerplate 1999-11-02 06:13:48 +00:00
caps Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes 1999-11-25 05:28:18 +00:00
cck third party components fix for bug#7173 1999-11-22 23:11:38 +00:00
chrome Closer to refresh of chrome on a skin switch. r=gimpy 1999-11-24 07:37:38 +00:00
cmd updated license boilerplate to xPL v1.1 1999-11-02 22:43:10 +00:00
config update xterm-titler to only show the relative directory 1999-11-22 22:21:07 +00:00
content Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes 1999-11-25 05:28:18 +00:00
db readme from Daniel Howard 1999-11-25 00:29:45 +00:00
dbm updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:40:37 +00:00
directory Updated ldapjdk 4.05 1999-11-12 06:34:14 +00:00
docshell Removed the set and get of the URLDispatcher. Changed a QI to using the Interface maps. 1999-11-24 09:40:56 +00:00
dom Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes 1999-11-25 05:28:18 +00:00
editor Clean up editor key bindings -- saari says they don't need disabled=false. r=jfrancis 1999-11-25 04:13:03 +00:00
ef updating license boilerplate to xPL v1.1 1999-11-02 06:38:29 +00:00
embedding Renamed nsIWebBrowserApp with nsIWebBrowserChrome. Added some additional methods and more fully specified the ones that were there. Changed the interfaces to forward declare referenced interfaces rather than including them all. Added topLevelWindow to nsIWebBrowser. Provided implementation for these changes. 1999-11-18 09:17:07 +00:00
expat updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
extensions Added preliminary DocumentHandler.h 1999-11-25 03:03:07 +00:00
gc/boehm bug #15906: added symbol_name parameter to GC_address_to_source, instead of relying on traceback table. 1999-11-15 03:26:03 +00:00
gconfig updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
gfx *** empty log message *** 1999-11-24 03:49:11 +00:00
grendel updated license boilerplate 1999-11-02 01:51:54 +00:00
htmlparser 20062: following Naoki's advice on which flag to use for entity conversion 1999-11-24 22:59:34 +00:00
include Removing use of unneeded dbm module from win32 build 1999-11-14 00:52:48 +00:00
intl Changed conversion between posix and xp locale to handle extra locale info correctly, bug 18338, r=tao. 1999-11-23 21:51:26 +00:00
java 19583 r=akhil.arora@sun.com fix=Igor Nekrestyanov <nis@sparc.spb.su> 1999-11-25 00:39:38 +00:00
jpeg Fix for 18903 -- remove an unecessary JPEG shared lib. Make two new static lib targets. r=sdagley 1999-11-15 22:41:54 +00:00
js Eliminate Closure per ECMA ed. 3, fix brutal sharing of lambdas (20076, r=rogerl,shaver). 1999-11-25 03:25:30 +00:00
js2/semantics Fixed MCL incompatibility 1999-11-20 04:34:42 +00:00
l10n updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
layout Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes 1999-11-25 05:28:18 +00:00
lib Fix the embedding stuff to no longer explicitly create an image manager, now that it is a service. r=neeti. 1999-11-24 03:57:32 +00:00
mailnews First Checked In. 1999-11-24 23:01:13 +00:00
modules Added nsIInterfaceRequestor.h to keep nsCOMPtr happy. 1999-11-24 08:31:06 +00:00
msgsdk updating license boilerplate to xPL v1.1 1999-11-02 06:20:05 +00:00
nav-java updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:40:37 +00:00
netwerk bug #18651. Explicitly cancel te transport to make it go away even if it is blocked waiting for the consumer to empty the pipe... 1999-11-24 23:51:09 +00:00
network updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 02:47:15 +00:00
nsprpub BugZilla: 19448. Back out disable call to _PR_MD_GetRandomNoise() 1999-11-23 19:15:32 +00:00
nunet updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 02:47:15 +00:00
parser 20062: following Naoki's advice on which flag to use for entity conversion 1999-11-24 22:59:34 +00:00
plugin/oji/MRJ Added support for Proxies in the MRJ Plugin via getProxyForURL. Reviewed 1999-11-13 00:37:48 +00:00
privacy updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:40:37 +00:00
profile 11818: Rename the special XUL key from "command" to "xulkey" so it won't 1999-11-23 23:24:57 +00:00
rdf Changed signature of AddScriptEventListener. Event handlers that are attributes of XUL elements are now compiled only when first invoked. R=joki 1999-11-25 00:06:10 +00:00
silentdl updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
string/obsolete Changed ifdefs to this stuff is off for debug builds too. 1999-11-20 07:28:45 +00:00
suite Speed up reading in of HTML results by reading in as many bytes in one chunk as possible, instead of 256 bytes at a time. 1999-11-24 21:04:52 +00:00
sun-java updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:40:37 +00:00
timer updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
tools Renamed smoke test #1 to alive test; some comment cleanup; default display is now :0.0. 1999-11-25 00:07:55 +00:00
tripledb updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 02:47:15 +00:00
uriloader force uri dispatching to always be on if the url we are trying to load 1999-11-23 07:14:45 +00:00
view Changed nsIPresContext& to nsIPresContext*. Changed nsEventStatus& to nsEventStatus*. 1999-11-24 06:03:10 +00:00
wallet updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
webshell Doh. Didn't check other consequences of double-registration; it busted on the doubly-declared static CID. 1999-11-25 02:27:14 +00:00
webtools for nsI*.idl files, add deoxygen link and image 1999-11-23 21:59:13 +00:00
widget bug #13331, implemented nsWindow::InvalidateRegion(). r=mcafee 1999-11-25 02:06:16 +00:00
xpcom AbortIfFalse should abort on all platforms -- that's the whole point. r=shaver 1999-11-24 21:58:20 +00:00
xpfc updated license boilerplate to xPL 1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 02:47:15 +00:00
xpfe Fix 18553 [DOGFOOD] addEventListener allows sniffing keystrokes 1999-11-25 05:28:18 +00:00
xpinstall fixed NSPR log file name ('NSPR Logging') 1999-11-24 22:16:17 +00:00
.cvsignore ignore a.out as well 1999-04-10 21:22:55 +00:00
LEGAL Add Y2K disclaimer. 1999-07-06 23:00:05 +00:00
LICENSE new version of LICENSE; not part of the build 1999-10-06 02:14:51 +00:00
Makefile.in Make uriloader part of the build on Unix!! 1999-11-18 06:03:27 +00:00
aclocal.m4 oops, forgot to include these files for libIDL detection 1999-04-10 00:54:58 +00:00
allmakefiles.sh Removed listing of win32 Makefile I accidentally checked in. 1999-11-20 23:48:14 +00:00
client.mak Adding support for MOZ_CVS_FLAGS (useful for specifying -z3) r=leaf 1999-11-22 22:33:40 +00:00
client.mk updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
configure Automated update 1999-11-24 00:45:26 +00:00
configure.in Add -DULTRA_SPARC to CFLAGS as well, needed for jslock.c/WS5.0/Solaris. r=slamm 1999-11-24 00:43:58 +00:00
makefile.win Make uriloader part of the build on windows!! 1999-11-18 06:02:51 +00:00
nglayout.mac updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
nglayout.mk updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
trex.mak updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00
trex.mk updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org 1999-11-06 03:43:54 +00:00