Backed out changeset a5a35a205a44 (bug 1220810) for causing test_dns_offline and fontface-override-descriptor-getter-setter failures. CLOSED TREE

docshell/test/browser/browser_badCertDomainFixup.js

@@ -9,8 +9,6 @@
 
 const PREF_BAD_CERT_DOMAIN_FIX_ENABLED =
   "security.bad_cert_domain_error.url_fix_enabled";
-const PREF_ALLOW_HIJACKING_LOCALHOST =
-  "network.proxy.allow_hijacking_localhost";
 
 const BAD_CERT_DOMAIN_ERROR_URL = "https://badcertdomain.example.com:443";
 const FIXED_URL = "https://www.badcertdomain.example.com/";
@@ -79,9 +77,7 @@ add_task(async function ignoreBadCertDomain() {
   info("Certificate error was shown as expected");
 
   // Test that urls with IP addresses are not fixed.
-  Services.prefs.setBoolPref(PREF_ALLOW_HIJACKING_LOCALHOST, true);
   await verifyErrorPage(IPV4_ADDRESS);
-  Services.prefs.clearUserPref(PREF_ALLOW_HIJACKING_LOCALHOST);
   info("Certificate error was shown as expected for an IP address");
 
   // Test that urls with ports are not fixed.

dom/base/test/unit/test_error_codes.js

@@ -38,8 +38,6 @@ function run_test_pt1() {
   } catch (e) {}
   Services.io.offline = true;
   prefs.setBoolPref("network.dns.offline-localhost", false);
-  // We always resolve localhost as it's hardcoded without the following pref:
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 
   gExpectedStatus = Cr.NS_ERROR_OFFLINE;
   gNextTestFunc = run_test_pt2;
@@ -51,7 +49,6 @@ function run_test_pt1() {
 function run_test_pt2() {
   Services.io.offline = false;
   prefs.clearUserPref("network.dns.offline-localhost");
-  prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
 
   gExpectedStatus = Cr.NS_ERROR_CONNECTION_REFUSED;
   gNextTestFunc = end_test;

dom/media/webrtc/tests/mochitests/mochitest.ini

@@ -27,9 +27,7 @@ support-files =
   !/dom/media/test/bug461281.ogg
   !/dom/media/test/seek.webm
   !/dom/media/test/gizmo.mp4
-prefs =
-  privacy.partition.network_state=false
-  network.proxy.allow_hijacking_localhost=true
+prefs = privacy.partition.network_state=false
 
 [test_1488832.html]
 [test_a_noOp.html]

dom/security/nsMixedContentBlocker.cpp

@@ -229,7 +229,8 @@ nsMixedContentBlocker::ShouldLoad(nsIURI* aContentLocation,
 
 bool nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackHost(
     const nsACString& aAsciiHost) {
-  if (mozilla::net::IsLoopbackHostname(aAsciiHost)) {
+  if (aAsciiHost.EqualsLiteral("::1") ||
+      aAsciiHost.EqualsLiteral("localhost")) {
     return true;
   }
 
@@ -248,8 +249,9 @@ bool nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackHost(
   // https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy says
   // we should only consider [::1]/128 as a potentially trustworthy IPv6
   // address, whereas for IPv4 127.0.0.1/8 are considered as potentially
-  // trustworthy.
-  return addr.IsLoopBackAddressWithoutIPv6Mapping();
+  // trustworthy.  We already handled "[::1]" above, so all that's remained to
+  // handle here are IPv4 loopback addresses.
+  return addr.IsIPAddrV4() && addr.IsLoopbackAddr();
 }
 
 bool nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackURL(nsIURI* aURL) {

dom/security/nsMixedContentBlocker.h

@@ -34,11 +34,6 @@ enum MixedContentTypes {
 using mozilla::OriginAttributes;
 
 class nsILoadInfo;  // forward declaration
-namespace mozilla {
-namespace net {
-class nsProtocolProxyService;  // forward declaration
-}
-}  // namespace mozilla
 
 class nsMixedContentBlocker : public nsIContentPolicy,
                               public nsIChannelEventSink {

dom/security/test/gtest/TestSecureContext.cpp

@@ -24,29 +24,12 @@ struct TestExpectations {
   bool expectedResult;
 };
 
-class MOZ_RAII AutoRestoreBoolPref final {
- public:
-  AutoRestoreBoolPref(const char* aPref, bool aValue) : mPref(aPref) {
-    Preferences::GetBool(mPref, &mOldValue);
-    Preferences::SetBool(mPref, aValue);
-  }
-
-  ~AutoRestoreBoolPref() { Preferences::SetBool(mPref, mOldValue); }
-
- private:
-  const char* mPref = nullptr;
-  bool mOldValue = false;
-};
-
 // ============================= TestDirectives ========================
 
 TEST(SecureContext, IsOriginPotentiallyTrustworthyWithContentPrincipal)
 {
   // boolean isOriginPotentiallyTrustworthy(in nsIPrincipal aPrincipal);
 
-  AutoRestoreBoolPref savedPref("network.proxy.allow_hijacking_localhost",
-                                false);
-
   static const TestExpectations uris[] = {
       {"http://example.com/", false},
       {"https://example.com/", true},
@@ -56,9 +39,7 @@ TEST(SecureContext, IsOriginPotentiallyTrustworthyWithContentPrincipal)
       {"ftp://example.com", false},
       {"about:config", false},
       {"http://localhost", true},
-      {"http://localhost.localhost", true},
-      {"http://a.b.c.d.e.localhost", true},
-      {"http://xyzzy.localhost", true},
+      {"http://xyzzy.localhost", false},
       {"http://127.0.0.1", true},
       {"http://127.0.0.2", true},
       {"http://127.1.0.1", true},
@@ -90,8 +71,7 @@ TEST(SecureContext, IsOriginPotentiallyTrustworthyWithContentPrincipal)
              ->CreateContentPrincipalFromOrigin(uri, getter_AddRefs(prin));
     ASSERT_EQ(rv, NS_OK);
     bool isPotentiallyTrustworthy = prin->GetIsOriginPotentiallyTrustworthy();
-    ASSERT_EQ(isPotentiallyTrustworthy, uris[i].expectedResult)
-        << uris[i].uri << uris[i].expectedResult;
+    ASSERT_EQ(isPotentiallyTrustworthy, uris[i].expectedResult);
   }
 }
 

dom/security/test/unit/test_isOriginPotentiallyTrustworthy.js

@@ -38,7 +38,6 @@ add_task(async function test_isOriginPotentiallyTrustworthy() {
     ["http://example.com/", false],
     ["https://example.com/", true],
     ["http://localhost/", true],
-    ["http://localhost.localhost/", true],
     ["http://127.0.0.1/", true],
     ["file:///", true],
     ["resource:///", true],

dom/webauthn/tests/browser/browser_webauthn_ipaddress.js

@@ -21,7 +21,6 @@ add_task(function test_setup() {
     "security.webauth.webauthn_enable_usbtoken",
     false
   );
-  Services.prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 });
 
 registerCleanupFunction(async function() {
@@ -32,7 +31,6 @@ registerCleanupFunction(async function() {
   );
   Services.prefs.clearUserPref("security.webauth.webauthn_enable_softtoken");
   Services.prefs.clearUserPref("security.webauth.webauthn_enable_usbtoken");
-  Services.prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
 });
 
 add_task(async function test_appid() {

modules/libpref/init/StaticPrefList.yaml

@@ -8218,12 +8218,6 @@
   value: true
   mirror: always
 
-# Set true to allow resolving proxy for localhost
-- name: network.proxy.allow_hijacking_localhost
-  type: RelaxedAtomicBool
-  value: false
-  mirror: always
-
 # Allow CookieJarSettings to be unblocked for channels without a document.
 # This is for testing only.
 - name: network.cookieJarSettings.unblocked_for_testing

modules/libpref/init/all.js

@@ -1947,6 +1947,8 @@ pref("network.proxy.socks_port",            0);
 pref("network.proxy.socks_version",         5);
 pref("network.proxy.proxy_over_tls",        true);
 pref("network.proxy.no_proxies_on",         "");
+// Set true to allow resolving proxy for localhost
+pref("network.proxy.allow_hijacking_localhost", false);
 pref("network.proxy.failover_timeout",      1800); // 30 minutes
 pref("network.online",                      true); //online/offline
 

netwerk/base/nsProtocolProxyService.cpp

@@ -36,9 +36,7 @@
 #include "nsISystemProxySettings.h"
 #include "nsINetworkLinkService.h"
 #include "nsIHttpChannelInternal.h"
-#include "mozilla/dom/nsMixedContentBlocker.h"
 #include "mozilla/Logging.h"
-#include "mozilla/StaticPrefs_network.h"
 #include "mozilla/Tokenizer.h"
 #include "mozilla/Unused.h"
 
@@ -773,6 +771,7 @@ nsProtocolProxyService::nsProtocolProxyService()
       mSOCKSProxyRemoteDNS(false),
       mProxyOverTLS(true),
       mWPADOverDHCPEnabled(false),
+      mAllowHijackingLocalhost(false),
       mPACMan(nullptr),
       mSessionStart(PR_Now()),
       mFailedProxyTimeout(30 * 60)  // 30 minute default
@@ -1020,6 +1019,11 @@ void nsProtocolProxyService::PrefsChanged(nsIPrefBranch* prefBranch,
     reloadPAC = reloadPAC || mProxyConfig == PROXYCONFIG_WPAD;
   }
 
+  if (!pref || !strcmp(pref, PROXY_PREF("allow_hijacking_localhost"))) {
+    proxy_GetBoolPref(prefBranch, PROXY_PREF("allow_hijacking_localhost"),
+                      mAllowHijackingLocalhost);
+  }
+
   if (!pref || !strcmp(pref, PROXY_PREF("failover_timeout")))
     proxy_GetIntPref(prefBranch, PROXY_PREF("failover_timeout"),
                      mFailedProxyTimeout);
@@ -1093,12 +1097,9 @@ bool nsProtocolProxyService::CanUseProxy(nsIURI* aURI, int32_t defaultPort) {
 
   // Don't use proxy for local hosts (plain hostname, no dots)
   if ((!is_ipaddr && mFilterLocalHosts && !host.Contains('.')) ||
-      // This method detects if we have network.proxy.allow_hijacking_localhost
-      // pref enabled. If it's true then this method will always return false
-      // otherwise it returns true if the host matches an address that's
-      // hardcoded to the loopback address.
-      (!StaticPrefs::network_proxy_allow_hijacking_localhost() &&
-       nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackHost(host))) {
+      (!mAllowHijackingLocalhost &&
+       (host.EqualsLiteral("127.0.0.1") || host.EqualsLiteral("::1") ||
+        host.EqualsLiteral("localhost")))) {
     LOG(("Not using proxy for this local host [%s]!\n", host.get()));
     return false;  // don't allow proxying
   }

netwerk/base/nsProtocolProxyService.h

@@ -388,6 +388,7 @@ class nsProtocolProxyService final : public nsIProtocolProxyService2,
   bool mSOCKSProxyRemoteDNS;
   bool mProxyOverTLS;
   bool mWPADOverDHCPEnabled;
+  bool mAllowHijackingLocalhost;
 
   RefPtr<nsPACMan> mPACMan;  // non-null if we are using PAC
   nsCOMPtr<nsISystemProxySettings> mSystemProxySettings;

netwerk/dns/DNS.cpp

@@ -6,11 +6,9 @@
 
 #include "mozilla/net/DNS.h"
 
-#include "mozilla/ArrayUtils.h"
 #include "mozilla/Assertions.h"
 #include "mozilla/mozalloc.h"
-#include "mozilla/StaticPrefs_network.h"
-#include "nsContentUtils.h"
+#include "mozilla/ArrayUtils.h"
 #include "nsString.h"
 #include <string.h>
 
@@ -142,43 +140,25 @@ bool NetAddr::ToStringBuffer(char* buf, uint32_t bufSize) const {
 }
 
 bool NetAddr::IsLoopbackAddr() const {
-  if (IsLoopBackAddressWithoutIPv6Mapping()) {
-    return true;
-  }
-  const NetAddr* addr = this;
-  if (addr->raw.family != AF_INET6) {
-    return false;
-  }
-
-  return IPv6ADDR_IS_V4MAPPED(&addr->inet6.ip) &&
-         IPv6ADDR_V4MAPPED_TO_IPADDR(&addr->inet6.ip) == htonl(INADDR_LOOPBACK);
-}
-
-bool NetAddr::IsLoopBackAddressWithoutIPv6Mapping() const {
   const NetAddr* addr = this;
   if (addr->raw.family == AF_INET) {
     // Consider 127.0.0.1/8 as loopback
     uint32_t ipv4Addr = ntohl(addr->inet.ip);
     return (ipv4Addr >> 24) == 127;
   }
-
-  return addr->raw.family == AF_INET6 && IPv6ADDR_IS_LOOPBACK(&addr->inet6.ip);
+  if (addr->raw.family == AF_INET6) {
+    if (IPv6ADDR_IS_LOOPBACK(&addr->inet6.ip)) {
+      return true;
+    }
+    if (IPv6ADDR_IS_V4MAPPED(&addr->inet6.ip) &&
+        IPv6ADDR_V4MAPPED_TO_IPADDR(&addr->inet6.ip) ==
+            htonl(INADDR_LOOPBACK)) {
+      return true;
+    }
   }
-
-bool IsLoopbackHostname(const nsACString& aAsciiHost) {
-  // If the user has configured to proxy localhost addresses don't consider them
-  // to be secure
-  if (StaticPrefs::network_proxy_allow_hijacking_localhost()) {
   return false;
 }
 
-  nsAutoCString host;
-  nsContentUtils::ASCIIToLower(aAsciiHost, host);
-
-  return host.EqualsLiteral("localhost") ||
-         StringEndsWith(host, ".localhost"_ns);
-}
-
 bool NetAddr::IsIPAddrAny() const {
   if (this->raw.family == AF_INET) {
     if (this->inet.ip == htonl(INADDR_ANY)) {

netwerk/dns/DNS.h

@@ -137,7 +137,6 @@ union NetAddr {
 
   bool IsIPAddrAny() const;
   bool IsLoopbackAddr() const;
-  bool IsLoopBackAddressWithoutIPv6Mapping() const;
   bool IsIPAddrV4() const;
   bool IsIPAddrV4Mapped() const;
   bool IsIPAddrLocal() const;
@@ -234,8 +233,6 @@ void PRNetAddrToNetAddr(const PRNetAddr* prAddr, NetAddr* addr);
 // Does not do a ptr safety check!
 void NetAddrToPRNetAddr(const NetAddr* addr, PRNetAddr* prAddr);
 
-bool IsLoopbackHostname(const nsACString& aAsciiHost);
-
 }  // namespace net
 }  // namespace mozilla
 

netwerk/dns/nsHostResolver.cpp

@@ -916,7 +916,11 @@ nsresult nsHostResolver::GetHostRecord(const nsACString& host,
 
   RefPtr<nsHostRecord>& entry = mRecordDB.GetOrInsert(key);
   if (!entry) {
-    entry = InitRecord(key);
+    if (IS_ADDR_TYPE(type)) {
+      entry = new AddrHostRecord(key);
+    } else {
+      entry = new TypeHostRecord(key);
+    }
   }
 
   RefPtr<nsHostRecord> rec = entry;
@@ -935,48 +939,6 @@ nsresult nsHostResolver::GetHostRecord(const nsACString& host,
   return NS_OK;
 }
 
-nsHostRecord* nsHostResolver::InitRecord(const nsHostKey& key) {
-  if (IS_ADDR_TYPE(key.type)) {
-    return new AddrHostRecord(key);
-  }
-  return new TypeHostRecord(key);
-}
-
-already_AddRefed<nsHostRecord> nsHostResolver::InitLoopbackRecord(
-    const nsHostKey& key, nsresult* aRv) {
-  MOZ_ASSERT(aRv);
-  MOZ_ASSERT(IS_ADDR_TYPE(key.type));
-
-  *aRv = NS_ERROR_FAILURE;
-  RefPtr<nsHostRecord> rec = InitRecord(key);
-
-  RefPtr<AddrHostRecord> addrRec = do_QueryObject(rec);
-  MutexAutoLock lock(addrRec->addr_info_lock);
-
-  PRNetAddr prAddr;
-
-  if (key.af == PR_AF_INET) {
-    MOZ_RELEASE_ASSERT(PR_StringToNetAddr("127.0.0.1", &prAddr) == PR_SUCCESS);
-  } else {
-    MOZ_RELEASE_ASSERT(PR_StringToNetAddr("::1", &prAddr) == PR_SUCCESS);
-  }
-
-  RefPtr<AddrInfo> ai;
-  *aRv = GetAddrInfo(rec->host, rec->af, addrRec->flags, getter_AddRefs(ai),
-                     addrRec->mGetTtl);
-  if (NS_WARN_IF(NS_FAILED(*aRv))) {
-    return nullptr;
-  }
-
-  addrRec->addr_info = ai;
-  addrRec->SetExpiration(TimeStamp::NowLoRes(), mDefaultCacheLifetime,
-                         mDefaultGracePeriod);
-  addrRec->negative = false;
-
-  *aRv = NS_OK;
-  return rec.forget();
-}
-
 nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
                                      const nsACString& aTrrServer,
                                      uint16_t type,
@@ -1026,9 +988,8 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
     MutexAutoLock lock(mLock);
 
     if (mShutdown) {
-      return NS_ERROR_NOT_INITIALIZED;
-    }
-
+      rv = NS_ERROR_NOT_INITIALIZED;
+    } else {
       // check to see if there is already an entry for this |host|
       // in the hash table.  if so, then check to see if we can't
       // just reuse the lookup result.  otherwise, if there are
@@ -1037,7 +998,6 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
       // callback, and proceed to do the lookup.
 
       bool excludedFromTRR = false;
-
       if (gTRRService && gTRRService->IsExcludedFromTRR(host)) {
         flags |= RES_DISABLE_TRR;
         excludedFromTRR = true;
@@ -1049,22 +1009,13 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
 
       nsHostKey key(host, aTrrServer, type, flags, af,
                     (aOriginAttributes.mPrivateBrowsingId > 0), originSuffix);
-
-    // Check if we have a localhost domain, if so hardcode to loopback
-    if (IS_ADDR_TYPE(type) && IsLoopbackHostname(host)) {
-      nsresult rv;
-      RefPtr<nsHostRecord> result = InitLoopbackRecord(key, &rv);
-      if (NS_WARN_IF(NS_FAILED(rv))) {
-        return rv;
-      }
-      MOZ_ASSERT(result);
-      aCallback->OnResolveHostComplete(this, result, NS_OK);
-      return NS_OK;
-    }
-
       RefPtr<nsHostRecord>& entry = mRecordDB.GetOrInsert(key);
       if (!entry) {
-      entry = InitRecord(key);
+        if (IS_ADDR_TYPE(type)) {
+          entry = new AddrHostRecord(key);
+        } else {
+          entry = new TypeHostRecord(key);
+        }
       }
 
       RefPtr<nsHostRecord> rec = entry;
@@ -1077,6 +1028,7 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
         rec->RecordReason(nsHostRecord::TRR_EXCLUDED);
       }
 
+      // Check if the entry is vaild.
       if (!(flags & RES_BYPASS_CACHE) &&
           rec->HasUsableResult(TimeStamp::NowLoRes(), flags)) {
         LOG(("  Using cached record for host [%s].\n", host.get()));
@@ -1118,8 +1070,7 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
 
         // ok, just copy the result into the host record, and be
         // done with it! ;-)
-      addrRec->addr = MakeUnique<NetAddr>();
-      PRNetAddrToNetAddr(&tempAddr, addrRec->addr.get());
+        addrRec->addr = MakeUnique<NetAddr>(&tempAddr);
         // put reference to host record on stack...
         Telemetry::Accumulate(Telemetry::DNS_LOOKUP_METHOD2, METHOD_LITERAL);
         result = rec;
@@ -1179,7 +1130,7 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
             if (unspecRec->negative) {
               rec->negative = unspecRec->negative;
               rec->CopyExpirationTimesAndFlagsFrom(unspecRec);
-          } else if (addrUnspecRec->addr_info) {
+            } else {
               MutexAutoLock lock(addrUnspecRec->addr_info_lock);
               if (addrUnspecRec->addr_info) {
                 // Search for any valid address in the AF_UNSPEC entry
@@ -1305,6 +1256,7 @@ nsresult nsHostResolver::ResolveHost(const nsACString& aHost,
           }
         }
       }
+    }
 
     if (result && callback->isInList()) {
       callback->remove();

netwerk/dns/nsHostResolver.h

@@ -494,14 +494,6 @@ class nsHostResolver : public nsISupports, public AHostResolver {
                        uint16_t flags, uint16_t af,
                        nsResolveHostCallback* callback);
 
-  nsHostRecord* InitRecord(const nsHostKey& key);
-
-  /**
-   * return a resolved hard coded loopback dns record for the specified key
-   */
-  already_AddRefed<nsHostRecord> InitLoopbackRecord(const nsHostKey& key,
-                                                    nsresult* aRv);
-
   /**
    * removes the specified callback from the nsHostRecord for the given
    * hostname, originAttributes, flags, and address family.  these parameters

netwerk/test/unit/test_about_networking.js

@@ -98,9 +98,6 @@ function run_test() {
     true
   );
 
-  // We always resolve localhost as it's hardcoded without the following pref:
-  Services.prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
-
   let ioService = Cc["@mozilla.org/network/io-service;1"].getService(
     Ci.nsIIOService
   );
@@ -115,7 +112,6 @@ function run_test() {
   channel.open();
 
   gServerSocket.init(-1, true, -1);
-  Services.prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
 
   run_next_test();
 }

netwerk/test/unit/test_dns_offline.js

@@ -47,8 +47,6 @@ const defaultOriginAttributes = {};
 function run_test() {
   do_test_pending();
   prefs.setBoolPref("network.dns.offline-localhost", false);
-  // We always resolve localhost as it's hardcoded without the following pref:
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
   ioService.offline = true;
   try {
     dns.asyncResolve(
@@ -109,5 +107,4 @@ function test3Continued() {
 
 function cleanup() {
   prefs.clearUserPref("network.dns.offline-localhost");
-  prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
 }

netwerk/test/unit/test_dns_originAttributes.js

@@ -4,9 +4,6 @@ var dns = Cc["@mozilla.org/network/dns-service;1"].getService(Ci.nsIDNSService);
 var threadManager = Cc["@mozilla.org/thread-manager;1"].getService(
   Ci.nsIThreadManager
 );
-var prefs = Cc["@mozilla.org/preferences-service;1"].getService(
-  Ci.nsIPrefBranch
-);
 var mainThread = threadManager.currentThread;
 
 var listener1 = {
@@ -75,7 +72,6 @@ function test2() {
 // for this originAttributes.
 function test3() {
   do_test_pending();
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
   try {
     dns.asyncResolve(
       "localhost",
@@ -88,7 +84,6 @@ function test3() {
     );
   } catch (e) {
     Assert.equal(e.result, Cr.NS_ERROR_OFFLINE);
-    prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
     do_test_finished();
   }
 }

netwerk/test/unit/test_http3.js

@@ -71,9 +71,6 @@ function run_test() {
 
   prefs.setBoolPref("network.http.http3.enabled", true);
   prefs.setCharPref("network.dns.localDomains", "foo.example.com");
-  // We always resolve elements of localDomains as it's hardcoded without the
-  // following pref:
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 
   // The certificate for the http3server server is for foo.example.com and
   // is signed by http2-ca.pem so add that cert to the trust list as a
@@ -556,7 +553,6 @@ function test_version_fallback() {
 function testsDone() {
   prefs.clearUserPref("network.http.http3.enabled");
   prefs.clearUserPref("network.dns.localDomains");
-  prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
   dump("testDone\n");
   do_test_pending();
   h1Server.stop(do_test_finished);

netwerk/test/unit/test_http3_421.js

@@ -34,9 +34,6 @@ function run_test() {
 
   prefs.setBoolPref("network.http.http3.enabled", true);
   prefs.setCharPref("network.dns.localDomains", "foo.example.com");
-  // We always resolve elements of localDomains as it's hardcoded without the
-  // following pref:
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 
   // The certificate for the http3server server is for foo.example.com and
   // is signed by http2-ca.pem so add that cert to the trust list as a
@@ -168,7 +165,6 @@ function test_response_421() {
 function testsDone() {
   prefs.clearUserPref("network.http.http3.enabled");
   prefs.clearUserPref("network.dns.localDomains");
-  prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
   dump("testDone\n");
   do_test_pending();
   do_test_finished();

netwerk/test/unit/test_http3_alt_svc.js

@@ -36,9 +36,6 @@ function run_test() {
 
   prefs.setBoolPref("network.http.http3.enabled", true);
   prefs.setCharPref("network.dns.localDomains", "foo.example.com");
-  // We always resolve elements of localDomains as it's hardcoded without the
-  // following pref:
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 
   // The certificate for the http3server server is for foo.example.com and
   // is signed by http2-ca.pem so add that cert to the trust list as a
@@ -124,6 +121,5 @@ function test_https_alt_svc() {
 function testsDone() {
   prefs.clearUserPref("network.http.http3.enabled");
   prefs.clearUserPref("network.dns.localDomains");
-  prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
   dump("testDone\n");
 }

netwerk/test/unit/test_http3_perf.js

@@ -76,9 +76,6 @@ function run_test() {
 
   prefs.setBoolPref("network.http.http3.enabled", true);
   prefs.setCharPref("network.dns.localDomains", "foo.example.com");
-  // We always resolve elements of localDomains as it's hardcoded without the
-  // following pref:
-  prefs.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 
   // The certificate for the http3server server is for foo.example.com and
   // is signed by http2-ca.pem so add that cert to the trust list as a
@@ -255,7 +252,6 @@ function test_download() {
 function testsDone() {
   prefs.clearUserPref("network.http.http3.enabled");
   prefs.clearUserPref("network.dns.localDomains");
-  prefs.clearUserPref("network.proxy.allow_hijacking_localhost");
   dump("testDone\n");
   do_test_pending();
   do_test_finished();

netwerk/test/unit/test_ping_aboutnetworking.js

@@ -58,12 +58,9 @@ function run_test() {
   // disable network changed events to avoid the the risk of having the dns
   // cache getting flushed behind our back
   ps.setBoolPref("network.notify.changed", false);
-  // Localhost is hardcoded to loopback and isn't cached, disable that with this pref
-  ps.setBoolPref("network.proxy.allow_hijacking_localhost", true);
 
   registerCleanupFunction(function() {
     ps.clearUserPref("network.notify.changed");
-    ps.clearUserPref("network.proxy.allow_hijacking_localhost");
   });
 
   let serverSocket = Cc["@mozilla.org/network/server-socket;1"].createInstance(