gecko-dev/dom
Birunthan Mohanathas 5e41427024 Bug 903966 - Stop blocking 'http://127.0.0.1/' as mixed content. r=ckerschb,kmckinley
According to the spec, content from loopback addresses should no longer
be treated as mixed content even in secure origins. See:
- 349501cdaa
- https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy

Note that we only whitelist '127.0.0.1' and '::1' to match Chrome 53 and
later. See:
- 130ee686fa

It is unclear if HTTPS origins should be able to use workers and WebSocket
connections through a loopback HTTP address. They are not supported in Chrome
(whether this is intentional or not is uncertain) so lets just ignore them for
now.

See also: https://github.com/w3c/web-platform-tests/pull/5304
2017-05-10 20:50:00 +03:00
..
animation Bug 1293495 - Wrote a test for mutation observer when iterationComposite is changed. r=boris 2017-05-04 20:27:02 -04:00
asmjscache
audiochannel Bug 1339537 - Part 6: Pass std::function values tree by const reference instead of by value, r=ehsan 2017-04-27 12:44:57 -04:00
base Bug 1340477 - Support feature detection for autocomplete attribute. r=smaug 2017-05-09 22:57:00 -04:00
battery
bindings Bug 1338059 - Part 1: Generate cycle collection related code for WebIDL type Promise, r=bz 2017-05-05 10:12:40 +08:00
broadcastchannel Bug 1353629 - PBlob refactoring - part 4 - IPCBlobInputStream, r=smaug 2017-04-24 12:09:40 +02:00
browser-element Bug 1358876 - Autophone - disable additional perma orange tests on Android 5.1, r=jmaher 2017-05-03 04:13:03 -07:00
cache Bug 1362444 P3 Add a mochitest verifying accessing self.caches does not block idle Worker shutdown. r=baku 2017-05-10 09:27:10 -07:00
canvas Backed out 9 changesets (bug 1340627) for graphical glitches a=backout 2017-05-10 10:01:18 -07:00
commandhandler Bug 1361745 - Part 2: Avoid a double hashtable lookup for insertions in nsControllerCommandGroup::AddCommandToGroup; r=mystor 2017-05-08 10:02:04 -04:00
console Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
crypto Bug 1363560 - Name more runnables (r=mccr8) 2017-05-09 21:53:25 -07:00
encoding Bug 1351548 - Remove reftest-stylo.lists. r=bholley 2017-04-28 11:15:58 +08:00
events Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
fetch Bug 1348050 - Part 1: Mark channel as urgent-start when the Fetch and XHR are triggered by user input events. r=baku,mayhemer 2017-04-21 13:29:31 +08:00
file Bug 1359087 - Use IPCBlob in FileHandle - part 1 - PPendingIPCBlob protocol, r=janv 2017-05-09 22:35:27 +02:00
filehandle Bug 1359087 - Use IPCBlob in FileHandle - part 2 - FileHandle and IPCBlob, r=janv 2017-05-09 22:35:42 +02:00
filesystem Bug 1361511 - change ownership assertion mechanism for various DOM classes; r=baku 2017-05-03 11:48:54 -04:00
flyweb
gamepad Bug 1362284 - Assign the background thread before flushing pending events at GamepadEventChannelParent; r=Lenzak 2017-05-05 01:21:39 +08:00
geolocation
grid
html Bug 903966 - Stop blocking 'http://127.0.0.1/' as mixed content. r=ckerschb,kmckinley 2017-05-10 20:50:00 +03:00
imptests Bug 1317383 - Part 5: Update expected results for wpt typedarray and wasm tests. r=bbouvier 2017-05-02 14:21:04 -07:00
indexedDB Bug 1359087 - Use IPCBlob in FileHandle - part 4 - FileHelper::SyncCopy must work with asyncInputStream, r=asuth 2017-05-09 22:35:43 +02:00
interfaces Bug 1362003 - nsGlobalWindow::GetLocation doesn't need to receive an ErrorResult param, r=bz 2017-05-08 15:49:31 +02:00
ipc merge mozilla-inbound to mozilla-central a=merge 2017-05-10 15:07:28 +02:00
json
jsurl Bug 1363560 - Name more runnables (r=mccr8) 2017-05-09 21:53:25 -07:00
locales Backed out changeset c733f9dbec85 (bug 1361000) for -werror bustage 2017-05-01 23:02:40 -07:00
manifest Bug 1355056 - replace (function(args) { /* do stuff using this */ }).bind(this) with arrow functions, r=jaws. 2017-04-27 00:25:45 +02:00
mathml Bug 1359556 - Optimize cloneNode by preinitializing attribute and child arrays r=bz 2017-04-20 12:57:48 -07:00
media merge mozilla-inbound to mozilla-central a=merge 2017-05-10 15:07:28 +02:00
messagechannel Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
network Bug 1352176 - Part4: Pass a null event target in nsInputStreamPump::Init, r=jdm 2017-05-09 20:06:00 +02:00
notification Bug 1351034 - Remove WEB_NOTIFICATION_PERMISSION_REMOVED. f=chutten; r=kitcambridge 2017-05-09 09:24:01 -07:00
offline
performance Bug 1123754 (part 1) - Rename ProfilerMarkers.{h,cpp} as ProfilerMarkerPayload.{h,cpp}. r=mstange. 2017-04-27 07:36:19 +10:00
permission
plugins Backed out changeset d6516a10c808 (bug 1322650) 2017-05-05 18:53:40 +02:00
power
presentation Bug 1352176 - Part5: Pass a null event target, r=schien 2017-05-09 20:07:00 +02:00
promise Bug 1358879 - Optimize handling of internally-created Promise objects. r=bz 2017-05-03 12:46:00 +02:00
push
quota Merge inbound to m-c a=merge 2017-05-03 13:40:24 -07:00
res
script Bug 1362119 - part 2 - Fixing the code style in dom/script, r=ehsan 2017-05-08 08:25:03 +02:00
secureelement
security Bug 903966 - Stop blocking 'http://127.0.0.1/' as mixed content. r=ckerschb,kmckinley 2017-05-10 20:50:00 +03:00
smil Bug 1359343 - annotate svg related crashtests to enable stylo for SVG documents. r=heycam 2017-05-05 09:58:56 +00:00
storage Bug 1361974 - Add nsIDOMWindowUtils API to check usage of a given storage r=mayhemer 2017-05-04 14:29:36 +02:00
svg Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
system Bug 1361087 - Loading osfile_shared_allthreads.jsm should not initialize the system-info service (as it does main thread IO on Windows), r=Yoric. 2017-05-03 10:45:15 +02:00
tests Bug 1361975 Fixing tests in order to support window.location not nullable, r=me 2017-05-08 15:53:03 +02:00
time
u2f
url Backed out changeset a180e3f4de16 (bug 1358114) 2017-04-24 15:43:05 +02:00
vr Bug 1351547 - Part 1: Add WebVR Canvas2D mochitest for detecting crash; r=kip 2017-04-26 07:00:04 +02:00
webauthn Bug 1323339 - Modify WebAuthn mochitests to work with IPC API; r=jcj r=baku 2017-05-09 13:21:24 -07:00
webbrowserpersist
webidl merge mozilla-inbound to mozilla-central a=merge 2017-05-10 15:07:28 +02:00
workers Bug 1290951 - Part 3.2: Tolerate missing imported scripts. r=bkelly. 2017-05-04 01:38:52 +08:00
worklet Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
xbl Bug 1359384: Check for display: contents on nsXBLResourceLoader::NotifyBoundElements. r=bz 2017-04-27 23:35:32 +02:00
xhr Backed out 3 changesets (bug 469228) for being a possible cause of frequent test_animSVGImage.html failures a=backout 2017-05-10 10:13:54 -07:00
xml Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
xslt Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
xul Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00
jar.mn
moz.build Bug 1362119 - part 1 - Moving dom/base/Script{Loader,Element}.* in dom/script, r=ehsan 2017-05-08 08:24:22 +02:00