norris%netscape.com
7cd400a26f
* Fix the following bugs by tightening the default security policy.
...
17977 [DOGFOOD] Reading documents using document.body
17538 document.lastModified is exposed
17537 document.images vulnerabilities
16036 [DOGFOOD] document.Element exposes the DOM of documents from
15757 [DOGFOOD] Injecting JS code using setAttribute and getElemen
15550 Injecting text in documents from any domain using createText
15067 [DOGFOOD] getElementsByTagName() allows reading of arbitrary
* Create an array of dom property policy types and initialize it when the script security manager is created.
* Move some implementation code to a new shared implementation base class.
* Implement privilege enabling, disabling and reverting
* Implement stack walking for checking privileges.
r=mstoltz@netscape.com
* Modify nsIPref to support security policy work.
r=neeti@netscape.com
1999-11-11 22:10:36 +00:00
dmose%mozilla.org
142ac52eaf
updated xPL license boilerplate to v1.1, a=chofmann@netscape.com,r=endico@mozilla.org
1999-11-06 03:43:54 +00:00
tbogard%aol.net
10ded258a5
Changed NS_ENSURE_NOT to NS_ENSURE_FALSE to reflect API change. r=hyatt
1999-11-01 21:43:56 +00:00
norris%netscape.com
e5c170a049
work on bug 7270.
...
r=mstoltz.
Implement netscape.security.PrivilegeManager callbacks.
1999-10-28 22:09:03 +00:00
warren%netscape.com
f50d3df7c0
Added nsIChannel::GetOriginalURI so that we can get back to the original chrome file (bug#17144). r=rpotts,mscott
1999-10-26 09:16:24 +00:00
norris%netscape.com
4ad2862afa
Use NS_GET_IID, remove dead code, clean up error conditions for XPConnect security calls.
...
r=jband
1999-10-25 22:22:16 +00:00
law%netscape.com
bc2cea9398
Fixes for bug #16789 ; permit OpenDialog to work on hidden window even if document load has not completed yet; r=norris@netscape.com, r=danm@netscape.com
1999-10-20 01:25:41 +00:00
norris%netscape.com
24633793d5
Remove references to unsupported JVM_ calls. Needed for bug 16577.
...
r=shaver
1999-10-19 21:45:29 +00:00
norris%netscape.com
283946a4e4
Fix a Unix warning by removing an unused local variable
1999-10-14 23:49:36 +00:00
norris%netscape.com
822d5724d3
Work on 15824 bad refcounting in nsCodebasePrincipal
...
Attempt to discover problem with additional assertions
reviewed by mstoltz@netscape.com
1999-10-12 22:52:49 +00:00
norris%netscape.com
46bb0d4e8a
Fix part of 5403 Services improperly released: Use NS_WITH_SERVICE
...
reviewed by mstoltz@netscape.com
1999-10-12 22:51:54 +00:00
kipp%netscape.com
65f6ba5343
Cleanup moz-decl-counter usage and fix NS_LOG_ADDREF usage
1999-10-08 20:41:19 +00:00
norris%netscape.com
ef04da8809
Fix 15618 [CRASH] JS assertion on table regression test
...
Reviewed by rogerl@netscape.com .
1999-10-06 21:12:21 +00:00
norris%netscape.com
716e97dd9c
Fix 15458 "onLoadHandler does not work"
...
Reviewed by mstoltz.
1999-10-05 04:08:14 +00:00
waterson%netscape.com
2efd076b82
Bug 15367. Dump 'class' instead of 'file/line' for NS_LOG_REFCNT. r=shaver,dp
1999-10-05 00:07:54 +00:00
beard%netscape.com
9eae33066d
changed from directly using "MSL DropInRuntime.Lib" to using "NSComponentStartup.o" to enable GC leak detector. r=smfr
1999-10-03 20:46:23 +00:00
rjc%netscape.com
5f3ca2b087
Fix problem with nsSecurityManagerFactory conversion to be a nsIModule. Patch from peterl@netscape.com. Review: me.
1999-10-02 20:19:23 +00:00
rjc%netscape.com
f477d85f4b
Temporarily turning off the changes to nsSecurityManagerFactory to make it a nsIModule due to problem at startup.
1999-10-02 19:24:05 +00:00
norris%netscape.com
d21c5596fd
Fix the following bugs:
...
14443 "Same origin" security policy may be circumvented using docu
14820 Fixing up the relationship between nsCodeBasePrincipal and n
14919 Crash in JS MM code
Reviewed by mstoltz, approved by scc.
1999-10-02 03:41:37 +00:00
rjc%netscape.com
38e1d06d8d
Bug # 14034: Convert to nsIModule to prepare for memory leak fixing. Review: dp@netscape.com
1999-10-02 00:48:02 +00:00
sfraser%netscape.com
50971ff0c1
Bug 14877 -- lib/xp removal; removed unneeded files. r sdagley, a chofmann.
1999-09-26 00:41:31 +00:00
mscott%netscape.com
54e572a820
Bug #14815 --> fix some ref counting problems between nsJSPrincipal and nsCodebasePrincipal. nsCodeBasePrinciapl
...
was always getting leaked. And since it held onto the document's nsIURI, our uri's were getting leaked to.
r=brendan,a=chofmann.
1999-09-24 06:18:55 +00:00
norris%netscape.com
c99b609910
Add ability to disable JS. Fix 13978 shopping at webvan.com crashes
1999-09-17 20:13:52 +00:00
norris%netscape.com
2b35be101c
Remove nsPrincipalManager.h
1999-09-15 21:30:10 +00:00
norris%netscape.com
9acf604770
Add security support for javascript: uris.
1999-09-15 20:58:41 +00:00
norris%netscape.com
0865f1cdaa
Create preferences for security checks.
...
Add new methods on nsIScriptSecurityManager for capabilities.
Fix 13739 MLK: nsScriptSecurityManager::CreateCodebasePrincipal
Fix 11666 Eliminate plvector (was: [infinite loop] bugs - plvector.c)
1999-09-15 04:05:43 +00:00
norris%netscape.com
350b2d64a7
Fix arielb warnings.
1999-09-13 23:23:54 +00:00
norris%netscape.com
6ce2283719
Remove unused files.
1999-09-13 20:10:24 +00:00
briano%netscape.com
4f8c7d2d53
General cleanup.
1999-09-10 08:53:30 +00:00
norris%netscape.com
88708be24d
Makefile.in: remove unused file
...
nsScriptSecurityManager.cpp: Fix CheckURI problems (but still disabled)
nsSecurityManagerFactory.cpp: Make registration string match convention
1999-09-09 13:47:16 +00:00
alecf%netscape.com
ec49081f52
caps doesn't need libxp anymore
1999-09-09 06:29:32 +00:00
don%netscape.com
fe371d4b25
Temporarily disabled CheckURI so the Manage Bookmarks dialog and other windows work again. Norris will fix the window.open problem later.
1999-09-08 04:25:14 +00:00
norris%netscape.com
20a52a4fa4
disable XPConnect security check, perhaps related to test failure. Getting reports of failures on Mac at least.
1999-09-07 22:29:56 +00:00
norris%netscape.com
dcf88dfe3b
Fix build breakage: full #include needed.
1999-09-07 21:26:56 +00:00
norris%netscape.com
eb23e76298
Fix bug 13253.
...
Enable restrictions on use of Components array from web JavaScript.
1999-09-07 20:40:20 +00:00
norris%netscape.com
2d8e12375f
* Add checks on urls formed from web scripts
...
* Make nsScriptSecurityManager implement nsXPCSecurityManager
* Fix unix warnings
1999-09-07 02:54:19 +00:00
shaver%netscape.com
65115e55ff
quell assignment-as-boolean warning
1999-09-05 05:28:28 +00:00
bruce%cybersight.com
0ae97d3196
Use nsAllocator not new[] for char* data.
1999-09-03 14:15:03 +00:00
briano%netscape.com
51d59f6f69
Cleaned it up and eliminated the pointless #!gmake.
1999-09-01 23:27:16 +00:00
norris%netscape.com
3c9549d8f6
added files: mozilla/caps/idl/nsICodebasePrincipal.idl, mozilla/caps/idl/nsICertificatePrincipal.idl, removed files: mozilla/caps/idl/nsIPrivilege.idl, mozilla/caps/idl/nsICapsSecurityCallbacks.idl, mozilla/caps/idl/nsITarget.idl, mozilla/caps/idl/nsICapsManager.idl, mozilla/caps/idl/nsIPrincipalArray.idl, mozilla/caps/idl/nsIPrincipalManager.idl, mozilla/caps/idl/nsIPrivilegeManager.idl
1999-09-01 02:03:02 +00:00
kipp%netscape.com
b92bd76cbb
Make it build on unix
1999-09-01 01:50:01 +00:00
norris%netscape.com
91d105de8f
nsIPrincipalManager.idl removed.
1999-09-01 01:34:11 +00:00
norris%netscape.com
625666c042
added files: mozilla/caps/src/nsSystemPrincipal.cpp
1999-09-01 00:58:46 +00:00
norris%netscape.com
8bf9f20ccf
removed files: mozilla/caps/src/jpermission.c, mozilla/caps/src/nsPrivilege.cpp, mozilla/caps/src/nsPrivilegeManager.cpp, mozilla/caps/src/nsPrivilegeTable.cpp, mozilla/caps/src/nsSystemPrivilegeTable.cpp, mozilla/caps/src/nsTarget.cpp, mozilla/caps/src/nsUserDialogHelper.cpp, mozilla/caps/src/nsUserTarget.cpp, mozilla/caps/src/nsCaps.cpp, mozilla/caps/src/admin.cpp, mozilla/caps/src/nsCCapsManager.cpp, mozilla/caps/src/nsPrincipalArray.cpp, mozilla/caps/src/nsPrincipalManager.cpp
1999-09-01 00:56:22 +00:00
norris%netscape.com
ec9d253f50
Add all-powerful system principals. Remove some dead code from the build.
1999-09-01 00:54:35 +00:00
cyeh%netscape.com
9577b5cefa
Remove IGNORE_MANIFEST=1. It doesn't do anything and it confuses people.
1999-09-01 00:54:34 +00:00
joki%netscape.com
155255be20
Adding new flag to the security check calls out of the DOM generated JS files.
1999-08-31 14:23:55 +00:00
norris%netscape.com
d8507f844e
* clean up nsScriptSecurityManager
...
* remove nsJSSecurityManager
* save principals in nsIChannels and nsIDocuments
1999-08-29 21:58:42 +00:00
beard%netscape.com
eb5fd8e5f0
Removed a potentially dangerous cast.
1999-08-28 03:00:19 +00:00
beard%netscape.com
ae4c1402d3
wasn't calling __intialize/__terminate.
1999-08-28 02:58:35 +00:00
gagan%netscape.com
b82db954ce
Fixed some memory leaks showing up on bruce's log-
...
http://www.cybersight.com/~bruce/apprunner.mongo.19990827.log .
1999-08-27 08:36:49 +00:00
alecf%netscape.com
6c2881ae30
remove libcaps dependancy on libxp by using PL/PR routines instead of XP_*
1999-08-27 04:09:41 +00:00
mccabe%netscape.com
84982717ce
Spam caps subtree to replace declarations of IDL-defined interface methods in implementation classes with xpidl-generated NS_DECL_NSIFOO macro.
1999-08-21 20:22:27 +00:00
ramiro%netscape.com
e5dfc2a7eb
Ignore generated files.
1999-08-21 12:14:23 +00:00
arielb%netscape.com
8a722e90a6
this should be it, sorry, again
1999-08-20 11:44:52 +00:00
arielb%netscape.com
a4fcc9277b
this should be it, sorry
1999-08-20 10:59:55 +00:00
arielb%netscape.com
238f8f3fb4
this may do it, reset the project paths, if anyone has any other ideas why this is breaking, please let me know
1999-08-20 10:39:12 +00:00
arielb%netscape.com
01b27fef0d
i may have screwed up adding the files through camelot, this should be more thorough
1999-08-20 09:57:40 +00:00
arielb%netscape.com
627f62a46d
added files: mozilla/caps/src/nsJSPrincipals.cpp, mozilla/caps/src/nsScriptSecurityManager.cpp
1999-08-20 09:53:15 +00:00
arielb%netscape.com
1b252b2e3b
includes updates to codbase matching security checks currently turned off
...
but in place. redefined the script security manager in caps and it is
now generating codebase principals.
1999-08-20 09:51:02 +00:00
arielb%netscape.com
624deb671b
added JavaScript shlbs to target paths
1999-08-20 09:44:41 +00:00
sspitzer%netscape.com
2696a2a86b
ignore generated Makefile
1999-08-10 05:16:39 +00:00
arielb%netscape.com
4e0fc6ab1e
adding functionality to security
1999-08-08 22:29:02 +00:00
arielb%netscape.com
1125dac5c8
removing public directory for good. fixed up nsPrivilegeManager.cpp
1999-08-08 21:04:16 +00:00
arielb%netscape.com
c1d32349e1
removed files: mozilla/caps/src/nsZip.c, mozilla/caps/src/nsZig.cpp, mozilla/caps/src/nsLoadZig.c
1999-08-07 21:42:47 +00:00
arielb%netscape.com
4b06750b30
removed zip support from caps module. from now on all that stuff will
...
be used by libjar. should also remove a lot of memory leaks reported on
nsZip
1999-08-07 21:40:33 +00:00
arielb%netscape.com
9655521b0f
Fix to bug 11330 and some changes to reduce warnings in linux builds
1999-08-07 19:59:31 +00:00
briano%netscape.com
a47d75cc4c
Fixed the missing EOF newline problem.
1999-08-07 03:01:30 +00:00
sspitzer%netscape.com
18ee1a3dd5
fix the port bustages. use ZLIB_LIBS and not -lz. r=briano.
1999-08-07 02:15:37 +00:00
sspitzer%netscape.com
e6cfae8c46
fix for run time bustage. r=briano
1999-08-07 00:10:14 +00:00
arielb%netscape.com
775e8eb4d0
added files: mozilla/caps/src/nsSecurityManagerFactory.cpp
1999-08-06 22:56:57 +00:00
norris%netscape.com
9ebf4455ac
didn't go through on windows, this is arielb's checkin
1999-08-06 22:50:11 +00:00
arielb%netscape.com
a1d83223f4
added a new and improved factory to caps module. fixed some bugs and
...
cleared some warnings. also move some methods of privilege manager to
principal manager.
1999-08-06 22:44:35 +00:00
sspitzer%netscape.com
0fc6c99e2d
fix warnings
1999-08-05 19:47:10 +00:00
briano%netscape.com
e9e0a60caa
Added a newline to the EOF to fix the Unix native compiler builds.
1999-08-02 06:40:28 +00:00
briano%netscape.com
39e329f8ae
Cleaned it up.
1999-08-02 06:40:06 +00:00
briano%netscape.com
7047e55c1e
Added a newline to the EOF to fix the Unix native compiler builds.
1999-08-02 06:33:08 +00:00
jband%netscape.com
9b59237936
fixing runtime crash for arielb - was shadowing a member with a local in the ctor
1999-08-02 01:44:18 +00:00
arielb%netscape.com
d12fd4aaf3
i guess the removal of the dir didn't go through, hope this doesn't mean
...
the build will bust
1999-08-01 21:49:06 +00:00
arielb%netscape.com
0d16b83058
add a principal manager to caps api. everything is now xpidled so
...
i removed the public directory from the module.
1999-08-01 21:26:02 +00:00
briano%netscape.com
25ce386224
Added a newline the the end of file to make the native Unix compilers happy.
1999-07-28 21:55:50 +00:00
arielb%netscape.com
387cbc374e
xpidling and updating nsTarget object. should resolve build errors on
...
SeaMonkey Ports
1999-07-28 05:43:26 +00:00
briano%netscape.com
007ea62765
Cleaned it up and changed the name of libreg.{a,so} to libmozreg.{a,so} to fix the conflict reported in bug 8568.
1999-07-27 23:27:44 +00:00
bruce%cybersight.com
49f92f70e7
Add newlines for unix compilers.
1999-07-27 20:31:21 +00:00
arielb%netscape.com
d00edf950d
removed some enums and migrated them into nsPrivilege, nsIPrivilege and
...
nsPrivilegemanager. cleaning up some old code from the security module
and refining their api's and such like.
1999-07-27 00:50:59 +00:00
briano%netscape.com
5923fce74f
Some compilers also object to #endif's with any non-comment tokens after them. Fixed.
1999-07-26 21:08:51 +00:00
briano%netscape.com
076494e4cb
Added a newline to the end of the file to fix the native-compiler Unix builds (HP-UX, Solaris, etc.).
1999-07-26 21:06:59 +00:00
arielb%netscape.com
3cc6d68ad6
i think i may have broken linux build with a tab at the end of a line in
...
the makefile, hope this was all for the bustage.
1999-07-24 04:18:22 +00:00
arielb%netscape.com
8dad60d09d
Fix to the caps security module. I removed the nsPrincipal struct, from now
...
on you can access principals by their xpcomed interface nsIPrincipal.
1999-07-24 03:58:23 +00:00
briano%netscape.com
c38045d303
Added a newline at the EOF to make the Unix native compilers happy.
1999-07-19 21:05:56 +00:00
sspitzer%netscape.com
9ba33ac20b
add new line to end of file
1999-07-18 01:13:25 +00:00
sspitzer%netscape.com
0fe0bc29cd
ignore the generated Makefile
1999-07-18 00:26:01 +00:00
beard%netscape.com
47d73e8a3f
removed NSPR20Debug.shlb from optimized build
1999-07-16 22:16:43 +00:00
norris%netscape.com
815b4fa27f
Fix Mac build bustage by including references to the NSPR20.shlb for the optimized build.
1999-07-16 21:35:17 +00:00
arielb%netscape.com
587d04c222
idled principals interfaces and some fixes to caps manager...
1999-07-16 20:31:18 +00:00
beard%netscape.com
415fed0da9
Added nsIPricincipal.idl
1999-07-16 01:56:33 +00:00
norris%netscape.com
f19bc1200f
should fix the the missing nsICapsSecuritycallbacks error.(arielb)
1999-07-16 00:32:44 +00:00
norris%netscape.com
8405ed1949
Remove nsIPrincipal.h
1999-07-16 00:20:25 +00:00
norris%netscape.com
f64740e501
Move several security files into idl. (Create idl directory in caps module.)
...
Implement methods of nsIXPCSecurityManager.
Fix random errors in DOM JS security.
1999-07-15 23:23:16 +00:00
mcafee%netscape.com
3f213d6ba1
Exporting nsICapsSecurityCallbacks.h
1999-07-07 08:12:54 +00:00