Commit Graph

1102 Commits

Author SHA1 Message Date
Andrea Marchesini
310e7f246c Bug 1551798 - SameSite=lax by default and SameSite=none only if secure - tests, r=Ehsan
Differential Revision: https://phabricator.services.mozilla.com/D31216

--HG--
extra : moz-landing-system : lando
2019-05-24 15:19:34 +00:00
Cosmin Sabou
d2dc3fe4d7 Bug 1552477 - Add "=" to the skip-if syntax. r=bustage CLOSED TREE
--HG--
extra : amend_source : 4a979521cb075b7a265883d23c5a6c65149937ee
2019-05-29 14:04:23 +03:00
Frederik Braun
2ff0dff5c2 Bug 1552477 - Disallow System Principal to load remote documents in nightly/early beta r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D31763

--HG--
extra : moz-landing-system : lando
2019-05-29 10:06:15 +00:00
Ehsan Akhgari
70dba3be94 Bug 1547813 - Part 8: Introduce a CookieSettings API to query whether cookies from third-party trackers must be rejected and use it in Gecko; r=baku
Differential Revision: https://phabricator.services.mozilla.com/D30117

--HG--
extra : moz-landing-system : lando
2019-05-25 01:25:43 +00:00
Christoph Kerschbaumer
796a800303 Bug 965637: Move CSP from Principal into Client, part 4: test updates. r=mccr8,jkt
Differential Revision: https://phabricator.services.mozilla.com/D27657

--HG--
extra : moz-landing-system : lando
2019-05-21 23:15:08 +00:00
Christoph Kerschbaumer
b633427366 Bug 965637: Move CSP from Principal into Client, part 1: backend changes. r=mccr8
Differential Revision: https://phabricator.services.mozilla.com/D27654

--HG--
extra : moz-landing-system : lando
2019-05-21 23:14:27 +00:00
Andrea Marchesini
289365e128 Bug 1551821 - Get rid of pref network.cookie.same-site.enabled, r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D31217

--HG--
extra : moz-landing-system : lando
2019-05-15 13:33:45 +00:00
Christoph Kerschbaumer
e454783943 Bug 1548385: Test CSP blocks scripts correctly within template. r=jkt
Differential Revision: https://phabricator.services.mozilla.com/D30480

--HG--
extra : moz-landing-system : lando
2019-05-13 20:20:58 +00:00
Sebastian Streich
99e0852267 Bug 1402530 - Use IsOriginPotentiallyTrustworthy in ShouldLoad r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D30917

--HG--
extra : moz-landing-system : lando
2019-05-13 14:40:40 +00:00
Jonathan Kingston
ad11ea7746 Bug 1549754 - Prevent external protocol handlers from being considered insecure. r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D30247

--HG--
extra : moz-landing-system : lando
2019-05-10 14:17:40 +00:00
Noemi Erli
6430d23336 Backed out 12 changesets (bug 1547813) for failures in browser_partitionedIndexedDB.js CLOSED TREE
Backed out changeset 98989127264b (bug 1547813)
Backed out changeset f9d790139a26 (bug 1547813)
Backed out changeset a29f58cef022 (bug 1547813)
Backed out changeset c1288949de1c (bug 1547813)
Backed out changeset 8cad4fd197b1 (bug 1547813)
Backed out changeset 807ce59e7e6e (bug 1547813)
Backed out changeset 06943593738c (bug 1547813)
Backed out changeset 4ced8d49ddc3 (bug 1547813)
Backed out changeset 77a040f527e9 (bug 1547813)
Backed out changeset b4651cfaff30 (bug 1547813)
Backed out changeset 279c140a4d71 (bug 1547813)
Backed out changeset 0e0241f3d366 (bug 1547813)
2019-05-09 20:04:16 +03:00
Ehsan Akhgari
c7cb5521d1 Bug 1547813 - Part 8: Introduce a CookieSettings API to query whether cookies from third-party trackers must be rejected and use it in Gecko; r=baku
Differential Revision: https://phabricator.services.mozilla.com/D30117

--HG--
extra : moz-landing-system : lando
2019-05-08 20:22:18 +00:00
Noemi Erli
1c65279044 Backed out changeset 38ce182f68ea (bug 1402530) for build bustages in nsMixedContentBlocker.cpp CLOSED TREE 2019-05-09 17:29:38 +03:00
Sebastian Streich
db1660661f Bug 1402530 - Use IsOriginPotentiallyTrustworthy in ShouldLoad r=ckerschb,jkt
Differential Revision: https://phabricator.services.mozilla.com/D28870

--HG--
extra : moz-landing-system : lando
2019-05-07 18:08:19 +00:00
Chris Pearce
00a43a7a06 Bug 1540573 - p7. Modify CSP tests to use preload=2 on (emulated) cellular connections. r=jya
The Content Security Policy tests were handling the smaller android preload
values that were #defined on Android by setting media.preload.default=2.  Now
that we're detecting whether we're on cellular or not, and the android
emulators that our tests run on emulate a cellular connection, just setting
media.preload.default is no longer enough.

So set media.preload.default.cellular=2 in the CSP mochitests instead of
media.preload.default, to make the CSP mochitests pass in the Android
emulators.

Differential Revision: https://phabricator.services.mozilla.com/D29617

--HG--
extra : moz-landing-system : lando
2019-05-06 22:43:18 +00:00
Andreea Pavel
e2388edd9f Backed out 7 changesets (bug 1540573) for causing bug 1548441
Backed out changeset dd882b8cd73e (bug 1540573)
Backed out changeset b10d2cae45f2 (bug 1540573)
Backed out changeset 270a8917377f (bug 1540573)
Backed out changeset 3db059b34e40 (bug 1540573)
Backed out changeset fe196b2dfc62 (bug 1540573)
Backed out changeset 1bde5042e507 (bug 1540573)
Backed out changeset 4ff116b9d729 (bug 1540573)
2019-05-03 20:35:27 +03:00
Chris Pearce
fb8bc549b9 Bug 1540573 - p7. Modify CSP tests to use preload=2 on (emulated) cellular connections. r=jya
The Content Security Policy tests were handling the smaller android preload
values that were #defined on Android by setting media.preload.default=2.  Now
that we're detecting whether we're on cellular or not, and the android
emulators that our tests run on emulate a cellular connection, just setting
media.preload.default is no longer enough.

So set media.preload.default.cellular=2 in the CSP mochitests instead of
media.preload.default, to make the CSP mochitests pass in the Android
emulators.

Differential Revision: https://phabricator.services.mozilla.com/D29617

--HG--
extra : moz-landing-system : lando
2019-05-03 02:45:06 +00:00
Thomas Nguyen
23e61a2595 Bug 1532318 - part 1: use ReferrerInfo class in nsIHttpChannel instead of referrer and referrer policy r=valentin,ckerschb,michal
Differential Revision: https://phabricator.services.mozilla.com/D22783

--HG--
extra : moz-landing-system : lando
2019-05-02 12:34:52 +00:00
Sylvestre Ledru
e226046cb8 Bug 1547143 - Format the tree: Be prescriptive with the pointer style (left) r=Ehsan
# ignore-this-changeset

Depends on D28954

Differential Revision: https://phabricator.services.mozilla.com/D28956

--HG--
extra : moz-landing-system : lando
2019-05-01 08:47:10 +00:00
Dana Keeler
c90cfeaf74 bug 1441989 - remove ContentVerifier r=baku,mayhemer
ContentVerifier has been dead code since bug 1355166 (which, incidentally, means
it has no tests). Its presence is preventing improvements to
ContentSignatureVerifier (see e.g. bug 1534600), so this patch removes it.
As a result, the nsILoadInfo attributes verifySignedContent and enforceSRI are
also unused, so this patch removes those as well.

Differential Revision: https://phabricator.services.mozilla.com/D28885

--HG--
extra : moz-landing-system : lando
2019-04-26 22:21:36 +00:00
Honza Bambas
5f945421d4 Bug 1493599 - Expose reason of security blocking on nsILoadInfo and add new http observer notification for failed asyncOpens, r=Honza,dragana
Differential Revision: https://phabricator.services.mozilla.com/D23150

--HG--
extra : moz-landing-system : lando
2019-04-26 10:59:41 +00:00
Ryan Hunt
d6509bb237 Bug 1534395 - Rename TabChild to BrowserChild. r=nika
This commit renames TabChild to BrowserChild.

Differential Revision: https://phabricator.services.mozilla.com/D28135

--HG--
rename : dom/base/InProcessTabChildMessageManager.cpp => dom/base/InProcessBrowserChildMessageManager.cpp
rename : dom/base/InProcessTabChildMessageManager.h => dom/base/InProcessBrowserChildMessageManager.h
rename : dom/ipc/TabChild.cpp => dom/ipc/BrowserChild.cpp
rename : dom/ipc/TabChild.h => dom/ipc/BrowserChild.h
extra : rebase_source : e7fcfb845a971a2760e73d517e24da18ce2551b5
extra : histedit_source : d1991334ccb107fe56e478865f22fd97b041a317
2019-04-09 17:39:01 -05:00
Ryan Hunt
e9e7d608be Bug 1534395 - Rename nsITabChild to nsIBrowserChild. r=nika,mconley
Similarly to nsITabParent, TabChild is exposed to frontend code via nsITabChild. It's not clear what the future of this interface will be, but for now we can just rename it to nsIBrowserChild.

Differential Revision: https://phabricator.services.mozilla.com/D28134

--HG--
rename : dom/interfaces/base/nsITabChild.idl => dom/interfaces/base/nsIBrowserChild.idl
extra : rebase_source : a6c42a661e35b19e46c60f6f6a6f3dab64c0a1bc
extra : histedit_source : 1eb475bd840bf37a3f86294685c9b3c250684e79
2019-04-09 18:15:02 -05:00
Jonas Allmann
adabaeabe2 Bug 1541858, AssertEvalNotUsingSystemPrincipal into the ContentSecurityManager and also call it for worker code r=ckerschb
Bug 1541858 - Extended eval()-Assertion whitelist, r=ckerschb

Differential Revision: https://phabricator.services.mozilla.com/D28052

--HG--
extra : moz-landing-system : lando
2019-04-18 13:54:43 +00:00
Brian Grinstead
c4fa4cfc0c Bug 1544322 - Part 4 - Remove the [type] attribute for multiline <script> tags loading files in /tests/SimpleTest/ r=bzbarsky
This is an autogenerated commit to handle scripts loading mochitest harness files, in
the case where the script src is on the line below the script tag.

This was generated with https://bug1544322.bmoattachments.org/attachment.cgi?id=9058170
using the `--part 4` argument.

Differential Revision: https://phabricator.services.mozilla.com/D27459

--HG--
extra : moz-landing-system : lando
2019-04-16 04:01:46 +00:00
Brian Grinstead
911776d674 Bug 1544322 - Part 3 - Remove the [type] attribute for multiline <script> tags loading files in chrome://mochikit/content/ r=bzbarsky
This is an autogenerated commit to handle scripts loading mochitest harness files, in
the case where the script src is on the line below the script tag.

This was generated with https://bug1544322.bmoattachments.org/attachment.cgi?id=9058170
using the `--part 3` argument.

Differential Revision: https://phabricator.services.mozilla.com/D27458

--HG--
extra : moz-landing-system : lando
2019-04-16 03:59:25 +00:00
Brian Grinstead
0d460e3432 Bug 1544322 - Part 2.2 - Remove the [type] attribute for one-liner <script> tags loading files in /tests/SimpleTest/ in dom/ r=bzbarsky
This is split from the previous changeset since if we include dom/ the file size is too
large for phabricator to handle.

This is an autogenerated commit to handle scripts loading mochitest harness files, in
the simple case where the script src is on the same line as the tag.

This was generated with https://bug1544322.bmoattachments.org/attachment.cgi?id=9058170
using the `--part 2` argument.

Differential Revision: https://phabricator.services.mozilla.com/D27457

--HG--
extra : moz-landing-system : lando
2019-04-16 03:53:28 +00:00
Frederik Braun
8a6f82023e Bug 1544008: follow-up: clang-format. CLOSED TREE
Differential Revision: https://phabricator.services.mozilla.com//D27479

--HG--
extra : amend_source : e791c1ed730aaaecba4253980ba6f9a71af5cbd4
2019-04-15 11:10:00 +02:00
Frederik Braun
0c5c6ee474 Bug 1544008 - re-allow systemprincipal load for discovery pane r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D27291

--HG--
extra : moz-landing-system : lando
2019-04-15 08:03:58 +00:00
Masayuki Nakano
fdbbccd877 Bug 1542664 - Make TabChild use mozilla::PresShell directly rather than via nsIPresShell r=nika
This patch makes `TabChild` use `mozilla::PresShell` directly.

Then, renames `TabChild::GetPresShell()` and `TabChild::GetDocument()` to
`TabChild::GetTopLevelPresShell()` and `TabChild::GetTopLevelDocument()` to
make what they do clearer (e.g., see the change in `PresShell.cpp`).

Differential Revision: https://phabricator.services.mozilla.com/D26455

--HG--
extra : moz-landing-system : lando
2019-04-13 01:53:10 +00:00
Narcis Beleuzu
bbf97a2497 Backed out changeset 4cf10c7b68ad (bug 1544008) for XPCShell crashes on test_csp_upgrade_insecure_request_header.js. CLOSED TREE 2019-04-12 18:52:39 +03:00
Frederik Braun
d372b94f5f Bug 1544008 - re-allow systemprincipal load for discovery pane r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D27291

--HG--
extra : moz-landing-system : lando
2019-04-12 15:06:13 +00:00
Frederik Braun
23a6ba351f Bug 1513445: add tests r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D26681

--HG--
extra : moz-landing-system : lando
2019-04-10 14:20:21 +00:00
Frederik Braun
e3dae73936 Bug 1513445 - Disallow web documents loaded with the SystemPrincipal r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D26680

--HG--
extra : moz-landing-system : lando
2019-04-10 14:20:12 +00:00
Ciure Andrei
f19457b73f Backed out 2 changesets (bug 1513445) for causing xpc perma fails CLOSED TREE
Backed out changeset 499f5b4d205d (bug 1513445)
Backed out changeset 568de07e5c40 (bug 1513445)
2019-04-09 05:04:45 +03:00
Frederik Braun
49337094ec Bug 1513445: add tests r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D19351

--HG--
extra : moz-landing-system : lando
2019-04-08 14:58:27 +00:00
Frederik Braun
9252b11f49 Bug 1513445 - Disallow web documents loaded with the SystemPrincipal r=ckerschb
Differential Revision: https://phabricator.services.mozilla.com/D19350

--HG--
extra : moz-landing-system : lando
2019-04-08 14:58:20 +00:00
Sylvestre Ledru
03fc65347c Bug 1542146 - Apply the change with the option StatementMacros from clang-format-8 r=andi
# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D26280

--HG--
extra : moz-landing-system : lando
2019-04-05 21:42:17 +00:00
Csoregi Natalia
ba58e936bd Backed out changeset 4ad80127f89f (bug 1519636) for bustage on MarkupMap.h and nsAccessibilityService.cpp. CLOSED TREE 2019-04-05 09:48:19 +03:00
Sylvestre Ledru
d1c1878603 Bug 1519636 - clang-format-8: Reformat recent changes to the Google coding style r=Ehsan
clang-format-8 upstream had some improvements wrt macros
See: https://reviews.llvm.org/D33440
This is why the diff is bigger than usual

# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D26098

--HG--
extra : moz-landing-system : lando
2019-04-04 21:36:16 +00:00
Narcis Beleuzu
24dbe577a5 Backed out changeset 389b6bbd76db (bug 1519636) for bustages on MarkupMap.h . CLOSED TREE 2019-04-05 00:27:56 +03:00
Sylvestre Ledru
399dbd28fe Bug 1519636 - clang-format-8: Reformat recent changes to the Google coding style r=Ehsan
clang-format-8 upstream had some improvements wrt macros
See: https://reviews.llvm.org/D33440
This is why the diff is bigger than usual

# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D26098

--HG--
extra : moz-landing-system : lando
2019-04-04 20:12:23 +00:00
Thomas Wisniewski
78b73b590c Bug 1538456 - Don't fire an XHR HEADERS_RECEIVED event in the event of a network error; r=baku
Don't fire an XHR HEADERS_RECEIVED event in the event of a network error

Differential Revision: https://phabricator.services.mozilla.com/D25831

--HG--
extra : moz-landing-system : lando
2019-04-03 05:19:06 +00:00
Eden Chuang
72b79c6fbd Bug 1442778 - Add "chromeContext" parameter to console API and console service messages. r=smaug
1. Adding a new attribute chromeContext in ConsoleEvent
2. Adding a new boolean attribute isFromChromeContext in nsIConsoleMessage
3. Sending IsFromChromeContext to the parent process

Differential Revision: https://phabricator.services.mozilla.com/D23330

--HG--
extra : moz-landing-system : lando
2019-04-01 22:42:34 +00:00
Christoph Kerschbaumer
118fc8a930 Bug 1529893: Set correct CSP within nsWindowWatcher. r=bzbarsky
Differential Revision: https://phabricator.services.mozilla.com/D25260

--HG--
extra : moz-landing-system : lando
2019-03-28 19:20:00 +00:00
Mark Banner
dba6983e75 Bug 1415265 - Remove now unnecessary .eslintrc.js files or entries. r=mossop
Differential Revision: https://phabricator.services.mozilla.com/D23850

--HG--
extra : moz-landing-system : lando
2019-03-28 09:38:14 +00:00
Sebastian Streich
82fb5d3ddf Bug 1386214 - Remove require-sri from the CSP-Module r=ckerschb,qdot
Differential Revision: https://phabricator.services.mozilla.com/D24880

--HG--
extra : moz-landing-system : lando
2019-03-26 21:58:48 +00:00
Cosmin Sabou
78fc71e3c3 Backed out changeset 7fa7d6e6dedc (bug 1442778) for devtools failures on browser_webconsole_check_stubs_console_api.js CLOSED TREE 2019-03-26 20:27:55 +02:00
Eden Chuang
5e4df764d9 Bug 1442778 - Add "chromeContext" parameter to console API and console service messages. r=smaug
1. Adding a new attribute chromeContext in ConsoleEvent
2. Adding a new boolean attribute isFromChromeContext in nsIConsoleMessage
3. Sending IsFromChromeContext to the parent process

Differential Revision: https://phabricator.services.mozilla.com/D23330

--HG--
extra : moz-landing-system : lando
2019-03-26 15:18:20 +00:00
dlee
9878ae650d Bug 1522412 - P2. Remove nsIChannel.LOAD_CLASSIFY_URI flag. r=Ehsan
nsIChannel.LOAD_CLASSIFY_URI is no longer required so we can remove it from
the codebase.
In the mean time, we add a new LOAD_BYPASS_URL_CLASSIFIER load flag for
channel creator to be able to force channel to bypass URL classifier check.
The use of the new LOAD_BYPASS_URL_CLASSIFIER flag will be addressed in
the other patches.

Differential Revision: https://phabricator.services.mozilla.com/D22111

--HG--
extra : moz-landing-system : lando
2019-03-25 12:47:57 +00:00