13 Коммитов

Автор	SHA1	Сообщение	Дата
gerv%gerv.net	2a80f3fea9	Oops.	2001-09-20 00:02:59 +00:00
scc%mozilla.org	63e86dc84f	bug #98089: ripped new license	2001-09-19 20:09:47 +00:00
brendan%mozilla.org	8c7c819206	FASTLOAD_20010703_BRANCH landing, r=dbaron, sr=shaver.	2001-07-31 19:05:34 +00:00
mstoltz%netscape.com	ecc9b44676	Fixes for 32878, 37739. Added PR_CALLBACK macros. Changed security.principal pref syntax to a nicer syntax. Removed "security.checkxpconnect" hack.	2000-05-16 03:40:51 +00:00
mstoltz%netscape.com	4794c651b5	Fixes for 27010, 32878, and 32948.	2000-04-26 03:50:07 +00:00
mstoltz%netscape.com	200b920525	Backing out changes until I can figure out why it's crashing on startup.	2000-04-23 21:25:39 +00:00
mstoltz%netscape.com	9ac7780368	Fixes for bugs 27010, 32878, 32948.	2000-04-23 20:30:29 +00:00
norris%netscape.com	1d3c4cb5e3	Fix 31998 nsScriptSecurityManager not thread safe breaks table regress	2000-03-21 23:12:16 +00:00
norris%netscape.com	c19429e137	Adding nsAggregatePrincipal support. r=norris	2000-03-21 04:05:35 +00:00
norris%netscape.com	80d944693e	Fix 25062 Reload vulnerability ... 25206 Reload vulnerability #2 Implement grant dialogs and persistence for capabilities. most r=mstoltz, some code from morse w/ r=norris	2000-02-10 04:56:56 +00:00
mstoltz%netscape.com	184058eaaf	Implemented the reading of capabilities data from prefs. Reads codebase and certificate principal data and populates ScriptSecurityManager's principals table. bug= 18122 r=norris, rginda	2000-01-18 21:54:01 +00:00
warren%netscape.com	26c830d785	Fix for leak/bloat stats going negative. a=jar	1999-12-10 04:27:52 +00:00
norris%netscape.com	6ba76593b3	* Fix the following bugs by tightening the default security policy. ... 17977 [DOGFOOD] Reading documents using document.body 17538 document.lastModified is exposed 17537 document.images vulnerabilities 16036 [DOGFOOD] document.Element exposes the DOM of documents from 15757 [DOGFOOD] Injecting JS code using setAttribute and getElemen 15550 Injecting text in documents from any domain using createText 15067 [DOGFOOD] getElementsByTagName() allows reading of arbitrary * Create an array of dom property policy types and initialize it when the script security manager is created. * Move some implementation code to a new shared implementation base class. * Implement privilege enabling, disabling and reverting * Implement stack walking for checking privileges. r=mstoltz@netscape.com * Modify nsIPref to support security policy work. r=neeti@netscape.com	1999-11-11 22:10:36 +00:00