1179 Commits

Author	SHA1	Message	Date
Benjamin Smedberg	a73308ef4b	Bug 568691 - Add CID data back to classinfo because it's required for fastload to work correctly.	2010-06-22 12:59:57 -04:00
Benjamin Smedberg	a7e67d32ad	Bug 568691 part B - mechanical changes to in-tree binary modules needed to get them building and registering correctly. After this patch, xpcshell appears to work.	2010-06-10 14:11:40 -04:00
Ehsan Akhgari	3e874ca35e	Bug 519928 - IFRAME inside designMode disables JavaScript, breaking current clickjacking defenses; r=Olli.Pettay ... --HG-- extra : rebase_source : 7d01d90f59e60b63e64b96bb655937fe0d0c879a	2010-06-04 17:03:50 -04:00
Dão Gottwald	0978149cf3	Backed out changeset db6f8068e9a5	2010-06-29 17:49:21 +02:00
Saint Wesonga	c81affe35c	Bug 562387 - Convert NS_NEWXPCOM/NS_DELETEXPCOM to new/delete. r=bsmedgerg	2010-06-29 17:14:36 +02:00
Ehsan Akhgari	c06468921a	Backed out changeset d1cbe16de6bf to fix oranges	2010-06-28 15:29:30 -04:00
Ehsan Akhgari	741c672888	Bug 519928 - IFRAME inside designMode disables JavaScript, breaking current clickjacking defenses; r=Olli.Pettay	2010-06-04 17:03:50 -04:00
Dan Witte	7c610ca8ac	Bug 564048 - Nix security checks in nsPrefBranch. r=sicking, sr=jst	2010-06-08 16:43:54 -07:00
Robert Sayre	2a3fb0fb81	Merge mozilla-central to tracemonkey.	2010-05-24 09:05:39 -07:00
Robert Sayre	5da1b58f01	Merge mozilla-central to tracemonkey	2010-05-17 13:55:37 -04:00
Olli Pettay	927111fb28	Bug 549682 - Port the message-manager API to mozilla-central, r=jst	2010-05-18 15:28:37 +03:00
Olli Pettay	1c104f5606	Backout Bug 549682	2010-05-18 13:10:47 +03:00
Olli Pettay	c719bc6e84	Bug 549682 - Port the message-manager API to mozilla-central, r=jst ... --HG-- extra : rebase_source : 45b28a7762428193873a636fa7d5108607f9e4a3	2010-05-18 11:52:24 +03:00
Jason Orendorff	1e779602f9	Bug 560643 - Add a special jsval type to XPIDL. Part 1, rename JSVal -> jsval in existing IDL. r+sr=jst. ... --HG-- extra : rebase_source : 3d50f7468277883a26790df13a639ce37757a257	2010-05-12 08:18:51 -05:00
Taras Glek	49db2378ea	Bug 516085 - replace the most frequent IOService getter with an efficient one r=biesi	2010-04-12 08:44:28 -07:00
Mitchell Field	0fd15d94da	Bug 564950 - Make more use of mozilla::services, r=surkov, jst, neil, smontagu, roc, joshmoz, gavin, shaver	2010-05-14 18:24:41 +09:00
Michael Kohler	6c0f59f4a6	Bug 506041 Part 2: Correct misspellings in source code ... r=timeless	2010-05-13 14:19:50 +02:00
Peter Van der Beken	df91a46a76	Fix for bug 560199 (Link XPConnect and caps into layout). r=jst. ... --HG-- extra : rebase_source : 5141822e9d560019ffc1e0cb0264782aa8aa7a99	2010-04-11 15:55:24 +02:00
Robert Sayre	66f3f0f7a3	Merge tracemonkey to mozilla-central.	2010-03-26 15:53:14 -07:00
Igor Bukanov	382035ba66	bug 549010 - folowup to replace PROTO access macros with the inlne function	2010-03-04 23:52:52 -08:00
Jonas Sicking	893023f46a	Bug 543696: Remove unused nsIScriptSecurityManager::CheckConnect. r/sr=mrbkap	2010-02-02 02:29:15 -08:00
Blake Kaplan	9c71e872ce	Bug 371694 - Protect ourselves against null values. r=dveditz	2010-03-22 15:50:04 -07:00
Ben Newman	81a89a0871	Bug 553448 - nsScriptSecurityManager::ContentSecurityPolicyPermitsJSAction should return JS_TRUE when no subjectPrincipal exists. r=mrbkap sr=dveditz ... --HG-- extra : rebase_source : c47d6d55063c115921ee89114c4439444883c37d	2010-03-18 17:27:39 -07:00
timeless@mozdev.org	7923ac31c7	Bug 504423 ReadAnnotationEntry leaks key if nsCStringKey sets rv to failure ... r=dveditz --HG-- extra : rebase_source : 07b5d1d19d7533f1a620ab8a83f19b20f33ec6fc	2010-03-12 07:50:11 +01:00
Sid Stamm	1090529f8c	bug 515443 CSP no-eval support. r=mrbkap,brendan	2010-03-08 00:24:50 -08:00
Makoto Kato	340544f021	Bug 346010 - Decom nsIJAR by merging it into nsIZipReader. r=tglek, sr=bsmedberg	2010-03-07 22:56:45 +09:00
Jonas Sicking	6f0a0d424e	Bug 543870: Implement File.url. r=bz sr=jst	2010-03-02 23:51:09 -08:00
Sid Stamm	7252ce7760	Bug 515437 CSP connection code, r=jst,dveditz sr=jst	2010-01-22 13:38:21 -08:00
Daniel Veditz	153553d9b6	Backed out changeset a6ce37b09cf5 because of possible Tp4 perf hit	2010-01-14 17:19:11 -08:00
Sid Stamm ext:(%2C%20Brandon%20Sterne%20%3Cbsterne%40mozilla.com%3E)	f2cab6a506	bug 515433, bug 515437: Content Security Policy (CSP) core	2010-01-13 14:18:24 -08:00
Peter Van der Beken	f93aeceb40	Fix for bug 517196 (The JSClass of wrappers shouldn't change when morphing from slim to XPCWrappedNative). r=mrbkap. ... --HG-- extra : rebase_source : 4f7978e3ed1335fc4f58478afc038fb63576581b	2009-09-18 12:43:48 +02:00
Taras Glek	1d126be6cd	Bug 515777 - move css files, hiddenWindow.html to jar r=bsmedberg sr=bz ... --HG-- extra : rebase_source : c6ba6e900ceed210620d47f70c9b962a808a29fe	2009-10-12 12:31:50 -07:00
Taras Glek	d33c6f1c4a	bug 521191: backed out e22bef491d84	2009-10-08 16:44:44 -07:00
Taras Glek	387de8cf2e	Backed out changeset e22bef491d84	2009-10-08 16:43:55 -07:00
Peter Van der Beken	056df67f8f	Backed out changeset 542fa9413bd0, fix for bug 517196 (The JSClass of wrappers shouldn't change when morphing from slim to XPCWrappedNative), to try to fix orange.	2009-10-08 13:42:07 -07:00
Peter Van der Beken	5da982514b	Backed out changeset 542fa9413bd0, fix for bug 517196 (The JSClass of wrappers shouldn't change when morphing from slim to XPCWrappedNative), to try to fix orange.	2009-10-08 13:41:44 -07:00
Taras Glek	d07c55d805	Bug 515777 - move css files, hiddenWindow.html to jar r=bsmedberg sr=bz	2009-10-08 11:22:50 -07:00
Peter Van der Beken	61f49bf3ac	Fix for bug 517196 (The JSClass of wrappers shouldn't change when morphing from slim to XPCWrappedNative). r=mrbkap. ... --HG-- extra : rebase_source : 95898b5ab53d60200058374c52cdb8161aabf78b	2009-09-18 12:43:48 +02:00
Blake Kaplan	7050590b13	Bug 504021 - Add an API to the script security manager to clamp principals for a given context. r=jst/bzbarsky sr=dveditz	2009-08-21 18:20:20 -07:00
Igor Bukanov	8c03c81096	bug 513190 - avoiding jsint tagging of the private slot data. r=jorendorff	2009-09-05 19:59:11 +04:00
Benjamin Smedberg	ba372f3a4c	Followup to bug 398573 - remove REQUIRES from the tree since it is no longer used... automatically generated patch, rs=ted	2009-08-25 08:59:31 -07:00
Taras Glek	d331cb9b8d	Bug 468011 - Combine all chrome into browser+toolkit jars. r=bsmedberg	2009-08-14 09:32:40 -07:00
Blake Kaplan	27e754d4d0	Bug 502959 - Restore code to make caps allow wrapping same-origin wrappedjs objects. r=jst sr=bzbarsky	2009-08-06 20:26:33 -07:00
Boris Zbarsky	ba4bfdba03	Bug 495176. Improve security error reporting when document.domain is involved. r=jst,pike sr=jst	2009-07-26 21:27:33 -04:00
David Zbarsky	e5c3359049	Bug 392526. Some callers of nsID::ToString use a mismatched allocator to free the string. r=bsmedberg	2009-07-29 13:54:44 -04:00
Boris Zbarsky	79debaf781	Backed out changeset b55e7e3c0bfb to see whether bug 495176 might be causing the WinXP Txul regression ... --HG-- extra : rebase_source : c854c6a8afad67c583ff08e23bbac27cbf99c0cd	2009-07-28 14:34:01 -04:00
Boris Zbarsky	1785137905	Backed out changeset 9d5e247b5052 to see whether bug 495176 might be causing ... the WinXP Txul regression. --HG-- extra : rebase_source : 41a0fe73ec43dff97ada391db29dc121fb677403	2009-07-28 14:32:45 -04:00
Boris Zbarsky	123cf2cf60	Fixing crashes during tests by null-checking the principal URI as appropriate. Bug 495176	2009-07-26 23:21:01 -04:00
Boris Zbarsky	57fdf8c806	Bug 495176. Improve security error reporting when document.domain is involved. r=jst,pike sr=jst	2009-07-26 21:27:33 -04:00
Peter Van der Beken	88bc7e0eed	Fix for bug 482788 (Lightweight DOM wrappers). r=jst, sr=mrbkap.	2009-05-12 22:20:42 +02:00
Johnny Stenback	ac0964e5c0	Fixing bug 442399. Remove LiveConnect from the tree. r=joshmoz@gmail.com, bclary@bclary.com, sr=brendan@mozilla.org	2009-06-30 15:55:16 -07:00
Arpad Borsos	9c8455122d	Back out b8e531a6c961 (Bug 474369), it really did cause the windows dhtml regression ... --HG-- extra : rebase_source : 568114bcfc5a7710d9e2c2fe5e234fa190bebba1	2009-06-16 14:38:51 +02:00
Olli Pettay	9a08c869f6	Bug 489561 - nsPrincipal should cache nsIPrefBranch and codebase_principal_support pref, r+sr=dveditz, +comments from bz	2009-06-16 14:00:06 +03:00
Arpad Borsos	21896afffc	Bug 474369 - get rid of nsVoidArray, remaining parts; r=bz, sr=dbaron	2009-05-07 17:15:26 +02:00
Phil Ringnalda	50afa4b02b	Bug 495021 - CAPS unconditionally builds tests, r=shaver	2009-06-13 11:53:38 -07:00
Blake Kaplan	eccda2d175	Bug 441714 - Protect caps against SJOWs. r+sr=dveditz	2009-06-12 14:38:05 -07:00
Arpad Borsos	118ee75268	Back out bug 474369, suspected of causing dhtml and tp3 regression	2009-06-12 23:20:55 +02:00
Arpad Borsos	990fceee6e	Bug 474369 - get rid of nsVoidArray, remaining parts; r=bz, sr=dbaron ... --HG-- extra : rebase_source : 2f40cba97555521222512c7cd793c2a2adcca333	2009-05-07 17:15:26 +02:00
Boris Zbarsky	0cccd6dadc	Bug 493495 followup. Just cut off the recursion if it gets too deep. r+sr=mrbkap	2009-05-21 15:46:05 -04:00
Boris Zbarsky	9f358b989d	Bug 493495. Protect against recursive attempts to report a security exception in cases when the URI objects involved can't be accessed due to being implemented as a JS component. r+sr=mrbkap	2009-05-20 21:49:42 -04:00
Boris Zbarsky	a45c2d01f1	Bug 410486. Fix test failures due to the exception message getting truncated.	2009-05-20 00:57:37 -04:00
timeless@mozdev.org	b0af4b46b6	Bug 410486. Make sure to be in a request when reporting a pending exception. r=dveditz, sr=mrbkap.	2009-05-19 22:11:01 -04:00
Dave Townsend	dd2848c629	Backed out changeset 461d728271d1	2009-05-19 13:51:18 +01:00
Arpad Borsos	6a70c37113	Bug 474369 - get rid of nsVoidArray, remaining parts; r=bz, sr=dbaron	2009-05-07 17:15:26 +02:00
Blake Kaplan	79905bec13	Bug 493074 - Compute fewer things to try to clear up a performance regression. r+sr=jst	2009-05-14 15:17:56 -07:00
Blake Kaplan	1942f8e50b	Bug 483672 - Give regular JS objects that have been reflected into C++ a security policy that follows the same-origin model. Also teach caps about "same origin" for these cases. r=jst sr=bzbarsky	2009-05-13 15:01:01 -07:00
L. David Baron	f0c43ecb3d	Switch HTML mochitests from using MochiKit.js to packed.js. (Bug 490955) r=sayrer	2009-05-06 13:46:04 -07:00
Blake Kaplan	737c9a5565	Bug 475864 - Move native anonymous content checks into a wrapper so that quickstubs don't sidestep them. r=jst sr=bzbarsky	2009-04-23 00:21:22 -07:00
Mook	fa1eb8e272	Bug 472032 - [win64] sizeof(long) != sizeof(void*) assertion in nsScriptSecurityManager.cpp; changed SecurityLevel to use PRWord, clarified assertion on the protected code; r+sr=dveditz	2009-02-26 18:31:17 +01:00
Dan Mosedale	e4aa8b0d67	Remove MailNews special casing from nsScriptSecurityManager (bug 374577), r+sr=bzbarsky	2009-02-17 20:32:57 -08:00
Daniel Holbert	4301671b45	Bug 473236 - Remove executable bit from files that don't need it. (Only changes file mode -- no code changes.) r=bsmedberg	2009-01-21 22:55:08 -08:00
timeless@mozdev.org	a09492561f	Bug 412743 nsScriptSecurityManager::Init shouldn't treat failure of InitPrefs as fatal ... r=mrbkap sr=dveditz	2009-01-07 20:42:15 -08:00
timeless@mozdev.org	95f9cbd69c	Bug 470804 crash [@ NS_GetInnermostURI - nsScriptSecurityManager::CheckLoadURIWithPrincipal], r=bz, sr=dveditz	2009-01-01 15:45:23 -08:00
Phil Ringnalda	37206afaf5	Crashtest for Bug 470804 crash [@ NS_GetInnermostURI - nsScriptSecurityManager::CheckLoadURIWithPrincipal], r=bz	2009-01-01 15:45:23 -08:00
Tyler Downer	b768fb620d	Bug 471146 - remove old CAPS readme (already on devmo); r=brendan	2009-01-01 14:56:44 +01:00
Boris Zbarsky	402f7a9c31	Bug 460425. Do better security checks during redirection. r=sicking,biesi, sr=sicking	2008-11-25 20:50:04 -05:00
Phil Ringnalda	538c9fb42a	Bug 461888 - Remove unused PACKAGE_FILE and PACKAGE_VARS and .pkg files, mozilla-central part, r=bsmedberg	2008-11-03 19:46:28 -08:00
Blake Kaplan	d897bc426d	Bug 396851 - Check to see if we're UniversalXPConnect-enabled to allow privileged web pages to unwrap XOWs. r+sr=bzbarsky	2008-10-22 13:15:22 -07:00
Ben Newman	d98d55982b	Bug 460124. Remove no-longer-needed code, since now we calculate hash values for nsPrincipals in a sane way. r+sr=bzbarsky	2008-10-16 10:56:51 -04:00
Igor Bukanov	4ecbd37ca7	Bug 459656 - Implementing nsIThreadJSContextStack in nsXPConnect. r+sr=mrbkap	2008-10-14 16:16:25 +02:00
Arpad Borsos	c72ef7d248	Bug 456388 - Remove PR_STATIC_CALLBACK and PR_CALLBACK(_DECL) from the tree; r+sr=brendan	2008-10-10 17:04:34 +02:00
Blake Kaplan	77100affc1	Bug 457299 - nsScriptSecurityManager doesn't suspend the request on the current context when it starts using the safe context. r+sr=bzbarsky	2008-10-08 15:05:25 -07:00
Terrence Cole	aed2094b1c	Bug 787580 - Root all jsval at the API surface; r=sfink sr=dmandelin ... --HG-- rename : layout/reftests/text-decoration/underline-select-2-ref.html => layout/reftests/text-decoration/underline-button-1-ref.html rename : layout/reftests/text-decoration/underline-select-2.html => layout/reftests/text-decoration/underline-button-1.html extra : rebase_source : 008f2bab76a005947a4c0bd10b6d9ea8531ea6d0	2012-09-04 16:40:12 -07:00
Ben Newman	97433a48ab	Bug 454850. Make sure that whenever nsPrincipal::Equals would return true for a pair of principals their nsPrincipal::GetHashValue returns are also equal. r+sr=bzbarsky	2008-10-08 09:16:27 -04:00
David Bienvenu	1438cc375a	bug 453943, always disable js for mailnews for 3.0 b1, don't load pref, r=bz, sr=dmose	2008-09-21 15:21:07 -07:00
David Bienvenu	112c5625ca	temporarily disable js in mailnews for 3.0 b1, r=bz, sr=dmose 453943	2008-09-20 08:14:14 -07:00
Arpad Borsos	5a19e3346c	Bug 398946 - Remove JS_STATIC_DLL_CALLBACK and JS_DLL_CALLBACK from the tree; r=(benjamin + bent.mozilla)	2008-09-07 00:21:43 +02:00
Ben Turner	8afd9f92cd	Bug 451731 - "Update caps, dom, xpconnect for Bug 451729 (checkObjectAccess moving to the JSContext)". r+sr=jst.	2008-09-05 16:26:04 -07:00
Ben Turner	83f49405ee	Bug 453720 - "Caps should assert when scripts do not contain principals". r+sr=mrbkap.	2008-09-04 15:52:20 -07:00
Jason Orendorff	25cba5d7a3	Bug 451571 - Delete SetExceptionWasThrown (r=dbradley, sr=jst)	2008-08-30 18:58:36 -05:00
Shawn Wilsher	eef2b5a677	Bug 452486 - Create components when we actually have a profile ... This changeset allows components to register for the profile-after-change category in the category manager such that they will be initialized when this topic would normally be dispatched. r=bsmedberg	2008-08-29 16:40:05 -04:00
Honza Bambas	bec376906f	Bug 442812: Implement the application cache selection algorithm. r+sr=bz	2008-08-27 18:15:32 -07:00
Shawn Wilsher	8d4a24aab4	Bug 450914 - Proxy nsSimpleURI for nsNullPrincipal to the main thread (was "ASSERTION: nsSimpleURI not thread-safe" during principal destruction) ... This changeset creates a threadsafe uri object for the null principal to use.	2008-08-27 18:11:02 -04:00
Dave Camp	92adf93276	Backed out changeset 1e3d4775197a (bug 442812)	2008-08-19 22:52:05 -07:00
Honza Bambas	8b179c6230	Bug 442812: Implement the application cache selection algorithm. r+sr=bz	2008-08-19 19:31:08 -07:00
Boris Zbarsky	5eedf39759	Bug 434522 follow-up bustage fix.	2008-07-28 23:37:58 -07:00
Boris Zbarsky	f61641d25e	Bug 437723. Make sure to look at the nested innermost URI when looking for the origin. r+sr=sicking	2008-07-28 23:10:05 -07:00
Boris Zbarsky	c941674d4d	Bug 434522. Make the "Permission denied to access Class.property" mesage more useful. r+sr=jst	2008-07-28 23:03:19 -07:00
jonas@sicking.cc	ab63fc8524	Followup patch to bug 425201. Make sure to throw if xhr.open is called with an illegal uri. Also restore the nsIScriptSecurityManager.CheckConnect API as soap still uses it	2008-04-18 10:35:55 -07:00
gavin@gavinsharp.com	7caae794f1	Rework test for bug 292789 to try and fix the timeout on qm-centos5-01	2008-04-14 01:50:51 -07:00
dveditz@cruzio.com	e9a165f03a	tests for bug 292789 -- forgot during checkin	2008-04-12 17:55:45 -07:00
dveditz@cruzio.com	8a2c640ed4	bug 292789 prevent use of chrome: URIs from <script>, <img> stylesheets, etc except for chrome packages explicitly marked contentaccessible. r=bzbarsky, sr=jst, a=beltzner	2008-04-12 14:26:19 -07:00
jonas@sicking.cc	ec7a19c8b9	Allow XMLHttpRequest and document.load load files from subdirectories. r/sr=dveditz	2008-04-08 17:38:12 -07:00
igor@mir2.org	e05006a6f0	[bug 423874] backing out as a simpler patch would do the job with less code.	2008-03-29 03:34:29 -07:00
igor@mir2.org	ec6b483779	[bug 424376] backing out - too much compatibility problems.	2008-03-28 15:27:36 -07:00
bzbarsky@mit.edu	d7fc979918	Fix bug 421228. r+sr=sicking	2008-03-27 20:46:15 -07:00
igor@mir2.org	8edd862903	bug=424376 r=brendan a1.9b5=beltzner Compile-time function objects are no longer exposed through SpiderMonkey API.	2008-03-23 03:16:40 -07:00
jst@mozilla.org	a4d3a2e2e3	Landing followup fix for bug 402983 and re-enabling the new stricter file URI security policies. r+sr=bzbarsky@mit.edu	2008-03-22 09:50:47 -07:00
igor@mir2.org	8c88d304f4	bug=423874 r=brendan a1.9b5=dsicore Allocating native functions together with JSObject	2008-03-21 01:19:23 -07:00
jst@mozilla.org	c7eb261ec3	Fixing orange from bug 402983. Make file:///foo and file:////foo#bar compare as equal URLs. r+sr=bzbarsky@mit.edu	2008-03-20 23:01:55 -07:00
jst@mozilla.org	29a96a03b8	Landing fix for bug 402983. Make security checks on file:// URIs symmetric. Patch by dveditz@cruzio.com, r=jonas@sicking.cc,bzbarsky@mit.edu. jst@mozilla.org	2008-03-20 21:39:08 -07:00
shaver@mozilla.org	ba5430c6e5	Bug 246699: report better errors (with stacks) for security denials. r+sr=jst, a=mconnor.	2008-03-20 01:19:15 -07:00
shaver@mozilla.org	f23b424aa7	Test for bug 423379 (content can load chrome and/or resource), r/sr=jst.	2008-03-19 15:14:51 -07:00
shaver@mozilla.org	4d79009864	(NPOTB, r=mrbkap, a=lumpy) Remove ancient caps test cruft in preparation for incoming mochitests. Also so that the tests listed in securetest.list will not mock me from beyond the NSCP grave.	2008-03-19 14:26:09 -07:00
jonas@sicking.cc	9552bd91fc	Bug 413161: Make nsIPrincipal::Origin ignore changes to document.domain. r/sr=dveditz	2008-03-18 17:27:56 -07:00
bzbarsky@mit.edu	94a044f0b1	Finally kill off CheckSameOriginPrincipal, fix remaining callers to do the checks they really want to be doing. Fix screw-up in nsPrincipal::Equals if one principal has a cert and the other does not. Bug 418996, r=mrbkap,dveditz, sr=jst	2008-03-18 14:14:49 -07:00
gavin@gavinsharp.com	0fa7ce606a	Back out bug 246699 to fix bug 423375, per shaver	2008-03-17 07:10:48 -07:00
timeless@mozdev.org	620272feeb	Bug 246699 CAPS security exceptions should throw richer exception info (not just raw string) r=shaver a=shaver	2008-03-11 10:30:23 -07:00
reed@reedloden.com	57ac4a582f	Bug 420081 - "Case mismatch between nsIURI and nsIUri in nsIPrincipal.idl" [p=mschroeder@mozilla.x-home.org (Martin Schröder [mschroeder]) r+sr=jst a1.9=beltzner]	2008-03-08 03:20:21 -08:00
jonas@sicking.cc	28ea51311b	Bug 416534: Clean up cross-site xmlhttprequest security checks. With fixes to tests this time. r/sr=peterv	2008-02-26 19:45:29 -08:00
myk@mozilla.org	7aff03fc46	backing out fix for bug 416534 as potential cause of mochitest failure	2008-02-26 19:23:36 -08:00
jonas@sicking.cc	42bbc8327e	Bug 416534: Clean up cross-site xmlhttprequest security checks. r/sr=peterv	2008-02-26 18:17:49 -08:00
Olli.Pettay@helsinki.fi	652c1e007c	Bug 411054, Audit IsNativeAnonymous()/GetBindingParent() uses, r+sr=sicking	2008-02-26 04:40:18 -08:00
reed@reedloden.com	5d4ef49dd4	Bug 417710 - "Use JS_GET_CLASS, not JS_GetClass" [p=gyuyoung.kim@samsung.com (gyu-young kim) r=jorendorff r=jst sr+a1.9=brendan]	2008-02-25 00:59:20 -08:00
jonas@sicking.cc	2c0141fcd9	Bug 397878: Send Referer-Root header when doing cross-site access requests. Also update domain pattern matching to spec. Patch by <suryaismail@gmail.com>. r=bent sr=sicking b3a=beltzner	2008-01-31 00:16:54 -08:00
jst@mozilla.org	31b04a892e	Fixing bustage.	2008-01-29 13:11:24 -08:00
jst@mozilla.org	892f0acecf	Fixing bug 413767. Make caps use faster JS class/parent/private/proto accessors. r=mrbkap@gmail.com, sr=brendan@mozilla.org	2008-01-29 12:51:01 -08:00
jst@mozilla.org	6fd0410f62	Fixing bug 317240. Re-enabling caps optimization now that a documents principal never changes. r+sr=bzbarsky@mit.edu	2008-01-28 09:51:38 -08:00
jst@mozilla.org	08983f83e3	Fixing bug 412691. Remove unnecessary nsCOMPtr's from performance critical code paths. r+sr=jonas@sicking.cc	2008-01-16 16:32:26 -08:00
benjamin@smedbergs.us	b3e87aa63b	Bug 411327 - nsIXPCNativeCallContext should not inherit from nsISupports, r=mrbkap, a=schrep	2008-01-15 07:50:57 -08:00
dwitte@stanford.edu	3f33f45d2a	thoroughly whack mallocfest in nsID/nsJSID and friends. b=410250, r+sr=jst, a=blocking1.9+	2008-01-11 20:30:42 -08:00
dwitte@stanford.edu	8d74b831d4	partial backout in an attempt to fix orange.	2008-01-11 02:08:58 -08:00
dwitte@stanford.edu	cc924d2d23	relanding bug 410250.	2008-01-11 01:13:04 -08:00
dwitte@stanford.edu	f300515e36	backing out to fix orange.	2008-01-10 20:59:44 -08:00
dwitte@stanford.edu	09217db711	thoroughly whack mallocfest in nsID/nsJSID and friends. b=410250, r+sr=jst, a=blocking1.9+	2008-01-10 19:56:00 -08:00
timeless@mozdev.org	1bd2741649	Bug 334306 useless null check in nsDestroyJSPrincipals r=dbaron sr=dveditz a=mtschrep	2008-01-06 06:53:24 -08:00
mrbkap@gmail.com	68ee3e9f08	Always throw an exception, even if we cannot reach a principal. bug 409514, r+sr+a=jst	2008-01-04 17:32:23 -08:00
jst@mozilla.org	f0f4a78cce	Fixing bug 410851. Expose a faster way of getting the subject principal, and use that from performance critical code. r+sr=mrbkap@gmail.com	2008-01-04 15:59:12 -08:00
mrbkap@gmail.com	2605476d7c	XPCNativeWrappers can confuse the short-circuiting code. bug 409291, r+sr=jst a=beltzner	2007-12-21 11:06:29 -08:00
jst@mozilla.org	b30b544b5f	Fixing bug 408009. Make doGetObjectPrincipal() faster. r+sr=bzbarsky@mit.edu, r+a=brendan@mozilla.org	2007-12-12 15:02:25 -08:00
philringnalda@gmail.com	57e4af9c93	Bug 400247 - remove XP_MAC deadcode in nsScriptSecurityManager.cpp, r+sr=bz, a=dsicore	2007-11-12 19:23:17 -08:00
tglek@mozilla.com	21a6a8dc26	Bug 398574:Prbool fixes r=bz a=release drivers	2007-11-12 13:47:11 -08:00
jonas@sicking.cc	4c1a3910ac	bug 394390: Don't report bogus warnings to the error console when using cross-site xmlhttprequest. Patch by Surya Ismail <suryaismail@gmail.com>, r/sr=sicking	2007-10-26 18:46:09 -07:00
bzbarsky@mit.edu	26d7ccd742	Make the "href" property of stylesheets reflect the original URI that was reflected to load the sheet. Bug 397427, r=dbaron,biesi, sr=dbaron, a=dsicore	2007-10-23 14:56:41 -07:00
bzbarsky@mit.edu	e252fc2b15	Somewhat reduce the amount of memory an nsPrincipal allocates in the common case. Bug 397733, r+sr+a=jst	2007-09-28 07:31:04 -07:00
bzbarsky@mit.edu	5983f838e4	Make the nsISerializable implementation of nsPrincipal actually work. This makes it possible to save principal objects to a stream and read them back. Bug 369566, r=dveditz+brendan, sr=jst, a=jst	2007-09-17 15:18:28 -07:00
dveditz@cruzio.com	2940b2f998	bugs 230606 and 209234: add options to restrict file: URI same-origin policies, r+sr=jst, blocking+=pavlov	2007-09-06 00:02:57 -07:00
bent.mozilla@gmail.com	c0215549f6	Bug 304048 - Backing out patch due to TXUL regression.	2007-08-30 17:52:58 -07:00
bent.mozilla@gmail.com	5f9effcd34	Bug 304048 - "xpconnect getters/setters don't have principals until after they pass or fail their security check." Patch by jst, sr=bzbarsky, a=jst.	2007-08-28 17:16:21 -07:00
bzbarsky@mit.edu	3c0f9ef02f	Add some sanity null-checks. Bug 387446, r=dveditz, sr+a=jst	2007-08-06 19:09:16 -07:00
sdwilsh@shawnwilsher.com	681c6747e8	Bustage fix	2007-07-11 14:20:11 -07:00
jwalden@mit.edu	6d7584839a	Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros.	2007-07-08 00:08:04 -07:00
bzbarsky@mit.edu	647cbff151	Make security manager API more useful from script. Make more things ... scriptable, and add a scriptable method for testing whether a given principal is the system principal. Bug 383783, r=dveditz, sr=jst	2007-06-18 08:12:09 -07:00
bzbarsky@mit.edu	434b4cf8db	Optimize immutability of codebase/domain a little bit. Bug 380475, r=dveditz, sr=biesi	2007-06-18 08:07:02 -07:00
bzbarsky@mit.edu	ec536a72cf	Make nsPrincipal::Equals compare codebases, not just certs, for certificate ... principals. Bug 369201, r=dveditz, sr=jst	2007-06-18 08:01:53 -07:00
benjamin@smedbergs.us	baab01ada6	Bug 376636 - Building with gcc 4.3 and -pendatic fails due to extra semicolons, patch by Art Haas <ahaas@airmail.net>, rs=me	2007-04-23 07:21:53 -07:00
dbaron@dbaron.org	e7bb1b1c38	Remove GetKeyPointer method from nsTHashtable key types. b=374906 r=bsmedberg	2007-03-27 08:34:59 -07:00
dbaron@dbaron.org	d98d9fdec5	Remove unused getKey callback from PLDHashTableOps/JSDHashTableOps. b=374906 r=bsmedberg	2007-03-27 08:33:38 -07:00
hg@mozilla.com	05e5d33a57	Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,	2007-03-22 10:30:00 -07:00
bzbarsky%mit.edu	d9f9d475bb	When getting codebase principals, install the passed-in codebase on them even ... if they come from the hashtable. Bug 269270, r=dveditz, sr=jst.	2007-02-09 04:52:44 +00:00
bzbarsky%mit.edu	382b095c94	Get the source scheme from the right URI object. Bug 368160, r+sr=dveditz	2007-01-26 04:33:02 +00:00
bzbarsky%mit.edu	8a1b6c5e34	Make the redirect check get principals the same way we get them elsewhere. ... Clean up some code to use the new security manager method. Bug 354693, r=dveditz, sr=sicking	2006-11-22 18:27:54 +00:00
gavin%gavinsharp.com	ad22de3c0c	Bug 202198: fix possible leak in nsScriptSecurityManager::InitPrefs(), patch by Ryan Jones <sciguyryan+bugzilla@gmail.com>, r+sr=dveditz	2006-11-22 17:22:40 +00:00
sayrer%gmail.com	6aa99d403b	Bug 360840. allocator mismatch in nsIScriptSecurityManager. r=timeless, sr=bz	2006-11-16 18:25:52 +00:00
bzbarsky%mit.edu	730516b0a1	Remove securityCompareURIs() from nsIScriptSecurityManager. Bug 327243, r+sr=jst	2006-11-14 22:46:45 +00:00
bzbarsky%mit.edu	0a3a624149	Make it possible for protocol handlers to configure how CheckLoadURI should ... treat them via their protocol flags. Remove the protocol list we used before. Bug 120373, r=dveditz, sr=darin	2006-11-10 23:49:08 +00:00
cbiesinger%web.de	74a2a1d30c	Bug 351876 Move nsICryptoHash into necko ... r=darin	2006-09-15 22:06:31 +00:00
bzbarsky%mit.edu	50e969de0c	Introduce CheckLoadURIStrWithPrincipal(). Bug 348559, r=dveditz, sr=jst	2006-08-21 22:15:20 +00:00
pkasting%google.com	dafdf0b1eb	Bug 337223: Don't expose moz-anno protocol to web pages. ... Patch by brettw r=jst sr=bzbarsky	2006-08-18 21:35:16 +00:00
bzbarsky%mit.edu	e9379f3679	Remove special-casing of about:blank for security purposes; give about:blank ... pages the principal of whoever is responsible for loading them, when possible. Bug 332182, r=mrbkap, sr=jst	2006-08-15 17:31:16 +00:00
dveditz%cruzio.com	d3379f18b5	bug 340107 save wasted cycles checking permissions if we're just going to deny access anyway. r=mrbkap, sr=sicking	2006-06-27 00:56:41 +00:00
bzbarsky%mit.edu	282ad6509b	Fiox the special-casing for about:blank to deal with it now being ... moz-safe-about:blank as far as the security manager is concerned. Bug 342108, r=darin, sr=jst	2006-06-22 02:21:06 +00:00
bzbarsky%mit.edu	8cd320ad22	Allow about: modules to just set a flag to force script execution to be allowed ... for particular about: URIs, instead of hardcoding checks in the security manager. Bug 341313, r=darin, sr=jst	2006-06-22 02:19:49 +00:00
bzbarsky%mit.edu	4b3cf6e788	Make the URIs of principals immutable. Bug 339822, r=dveditz, sr=darin	2006-06-20 03:17:41 +00:00
bzbarsky%mit.edu	9a60679a4c	Save the principal in the session history entry so that reloading a data: URL ... will do the right thing. Also, change CheckLoadURI to allow null principals to load things that anyone can load (e.g. http:// URIs). Bug 337260, r=dveditz, sr=jst	2006-06-19 21:08:45 +00:00
bzbarsky%mit.edu	9509962b32	Move the safe vs unsafe about: distinction out of the security manager and into ... nsIAboutModule implementations. Bug 337746, r=dveditz, sr=darin	2006-06-19 21:02:12 +00:00
mhammond%skippinet.com.au	0f241835df	Land DOM_AGNOSTIC3_BRANCH, bug 255942. r=a few people, sr=brendan.	2006-06-13 03:07:47 +00:00
mrbkap%gmail.com	98997f8669	Checking in Ben Turner <bent.mozilla@gmail.com> and timeless's patch to make Gecko use the JS engine's request model to help multithreaded embedders avoid GC races and crashes. bug 176182, r=mrbkap assumed-rs=brendan	2006-06-12 22:39:55 +00:00
igor%mir2.org	65028a8035	Bug 338678: For source compatibility fields "uint16 extra,spare" in JSFunctionSpec are replaced by singe "uint32 extra". In this way we do need to update the current sources that list just 5 fields to include the additional ",0" corresponding to "spare" field. To quell GCC warnings all sources that list less then 5 fields of JSFunctionSpec are updated to explicitly list all 5 fields. r=mrbkap, s=brendan	2006-05-22 22:58:31 +00:00
bzbarsky%mit.edu	f78182b042	Make GetOrigin dig into nested URIs. Bug 336303, r=dveditz, sr=jst	2006-05-12 00:05:40 +00:00
bzbarsky%mit.edu	6e7e8da8e6	Create our URIs by hand (since we have our own scheme), instead of going ... through the ioService. Also fixes some threadsafety stuff. Bug 337513, r=dveditz, sr=darin.	2006-05-11 16:06:35 +00:00
cbiesinger%web.de	51a89a8b1e	bug 335180 Remove win32.order, mozilla-bin.order, --enable-reorder, and ... associated code. These options do not really work anymore. r=bsmedberg	2006-05-06 17:53:51 +00:00
bzbarsky%mit.edu	3aaa1fe7df	Disable optimization that relies on invariants we don't maintain. Bug 317240 ... wallpaper, r+sr=jst	2006-05-04 15:23:43 +00:00
bzbarsky%mit.edu	a40420a6d3	Deal with null subject URIs in SecurityCompareURIs. Bug 336432, r=dveditz, sr=jst	2006-05-04 02:29:46 +00:00
darin%meer.net	4a94571cee	fixes bug 214672 "Further optimization and correctness improvements of libjar: streamlining nsJarInputStream" patch by Alfred Kayser <alfredkayser@nl.ibm.com>, r=jwalden, sr=darin	2006-05-02 19:33:09 +00:00
bzbarsky%mit.edu	722b5218b2	Add an interface for nested URIs (like jar:, view-source:, etc) to implement ... and use it in various places. Create null principals if asked for a codebase principal for a codebase that doesn't have an inherent security context (eg data: or javascript:). Bug 334407, r=biesi,dveditz, sr=darin	2006-05-02 18:54:19 +00:00
bzbarsky%mit.edu	000f1cb779	Deal with checkLoadURI better in the face of URI fixup. Bug 334341, r=biesi, sr=dveditz	2006-04-25 03:24:43 +00:00
bzbarsky%mit.edu	dffe9c89ad	Check rv before looking at port. Bug 334210, r+sr+branch181=jst	2006-04-17 23:19:44 +00:00
bzbarsky%mit.edu	f15a96ed13	Allow redirects to data: URIs. Bug 211999, r=dveditz, jruderman; sr=darin	2006-04-17 23:13:33 +00:00
bzbarsky%mit.edu	af73fbf542	Fix refcounting bug. Followup to bug 327176; reviews pending.	2006-04-05 16:48:51 +00:00
bzbarsky%mit.edu	c44462a922	Followup to bug 326506 -- this comment got lost somehow.	2006-04-02 22:00:08 +00:00
bzbarsky%mit.edu	40f15bd48c	Init the system principal singleton when we init the security manager -- no ... need for lazy init here. Bug 327176, r=mrbkap, sr=dveditz	2006-04-02 21:10:23 +00:00
bzbarsky%mit.edu	25ab5fffef	Create a powerless non-principal and start using it. Bug 326506, r=mrbkap, ... sr=dveditz	2006-04-02 20:58:26 +00:00
darin%meer.net	20837f71e1	fixes bug 328925 "Replace NS_WARN_IF_FALSE with NS_ASSERTION (where appropriate)" r=dbaron	2006-03-30 18:40:56 +00:00
martijn.martijn%gmail.com	9f0ff7ef3c	Bug 330037 - First check if script/data url's are allowed, r=dveditz, sr=bzbarsky	2006-03-15 11:03:25 +00:00
bryner%brianryner.com	4cd1e2b280	Remove dependency on nsIClassInfo.h from nsISupports.h (bug 330420). This adds a new nsIClassInfoImpl.h file which can be included to get the CI implementation macros. Also, removes unneeded inclusion of nsIProgrammingLanguage.h from nsIClassInfo.h. r=darin.	2006-03-15 04:59:42 +00:00
bzbarsky%mit.edu	7e4ec9da94	Followup fix for bug 307867 -- make sure to update our pointers to hashtable ... entries when the entries move. r=dveditz, sr=brendan	2006-02-24 04:38:46 +00:00
timeless%mozdev.org	1ce5986f6b	Bug 106386 Correct misspellings in source code ... r=bernd rs=brendan	2006-02-23 09:36:43 +00:00
bzbarsky%mit.edu	52c46b8f53	Make nsIPrincipal and some methods that use it scriptable. Bug 327242, r=jst, ... sr=dveditz	2006-02-17 16:12:17 +00:00
bzbarsky%mit.edu	18fc300f0b	Backing out since tree is closed.	2006-02-17 03:33:03 +00:00
bzbarsky%mit.edu	97bb5a58a9	Make nsIPrincipal and some methods that use it scriptable. Bug 327242, r=jst, ... sr=dveditz	2006-02-17 03:26:03 +00:00
bzbarsky%mit.edu	f8625ded52	Remove dead code. Bug 327171, r=mrbkap, sr=shaver	2006-02-14 21:08:15 +00:00
bzbarsky%mit.edu	36b98a62ac	Fix debug code to assert the right thing. r=timeless	2006-02-14 20:20:49 +00:00
bzbarsky%mit.edu	3b307aca09	Fix bug 325991 -- spinning event queues requires more care. r=jst, sr=shaver	2006-02-07 22:24:47 +00:00
cbiesinger%web.de	c2d981f764	bug 183156 remove *UCS2* functions, replacing them with *UTF16* ones ... r+sr=darin	2006-02-03 14:18:39 +00:00
jst%mozilla.jstenback.com	ded8422135	Fixing tinderbox orange. Make caps work right again when dealing with a script global object that's not a window. r+sr=bzbarsky@mit.edu	2005-11-29 06:00:36 +00:00
jst%mozilla.jstenback.com	8f1863159b	Fixing bug 316794. Moving HandleDOMEvent() and Get/SetDocShell from nsIScriptGlobalObject to nsPIDOMWindow. r=mrbkap@gmail.com, sr=peterv@propagandism.org	2005-11-28 23:56:44 +00:00
timeless%mozdev.org	db820cf720	Bug 106386 Correct misspellings in source code ... patch by unknown@simplemachines.org r=timeless rs=brendan	2005-11-25 08:16:51 +00:00
brettw%gmail.com	9b7c8dae03	Bug 316077, r=annie.sullivan, sr=darin ... Protocol handler allowing access to binary annotations.	2005-11-17 18:39:00 +00:00
bzbarsky%mit.edu	f02076fb6f	Get principals for XPConnect wrapped natives off their scope instead of walking ... their parent chain. Add some asserts to check that this actually does give the same result, which it should with splitwindow. Bug 289655, r=dbradley, sr=jst	2005-11-16 02:12:21 +00:00
cbiesinger%web.de	9efd50d7d5	Bug 248052 Add a contract ID for a global channeleventsink. Make the ... scriptsecuritymanager register for that and implement nsIChannelEventSink. Veto redirects if CheckLoadURI fails. Remove the explicit usage of nsIScriptSecurityManager from nsHttpChannel.cpp. This eliminates js and xpconnect from REQUIRES, and brings us closer to remove caps. r=darin sr=bz	2005-11-08 20:47:16 +00:00
bzbarsky%mit.edu	d44ad313ae	Remove nsIStyledContent. Bug 313968, r=sicking, r=dbaron on nsCSSStyleSheet ... changes, sr=jst	2005-11-02 00:41:51 +00:00
jst%mozilla.jstenback.com	44614095f4	Fixing bug 313373. Pass *vp through untouched to the checkAccess hook when checking for write access. r=mrbkap@gmail.com, sr=brendan@mozilla.org	2005-10-25 00:29:28 +00:00
bzbarsky%mit.edu	b29c3a80b9	Don't call nsIClassInfo::GetClassDescription unless we really have to. Bug ... 313157, r=dveditz, sr=jst	2005-10-20 23:49:59 +00:00
mrbkap%gmail.com	ca23c546c9	bug 312124: Make Subsume treat about:blank principals as being weaker than other, non-about:blank principals, since that's how other code treats them. r=caillon sr=brendan	2005-10-14 18:57:26 +00:00
bzbarsky%mit.edu	376ca84976	Make wildcards work for the default policy too. Bug 307867, r=caillon, sr=dveditz	2005-09-30 03:30:40 +00:00
dbaron%dbaron.org	b7065e027d	Improve consistency of conversion from about URI to about module. b=306261 r=darin sr=bzbarsky	2005-09-14 04:16:27 +00:00
bzbarsky%mit.edu	c48f061d3c	Remove the security.checkloaduri preference. Please to be using the ... checkloaduri CAPS policy instead, since that's less likely to let you shoot yourself in the foot. Bug 307382, r=caillon, sr=dveditz	2005-09-09 18:43:45 +00:00
dougt%meer.net	7c0ee6b9d3	Bug 302284. add xpi hash support to InstallTrigger.install(). r=dveditz, sr=shaver, a=asa	2005-08-26 06:46:21 +00:00
peterv%propagandism.org	72fafa8d29	Fix for bug 290100 (XMLHttpRequest affected by document.domain setting). r=caillon, sr=brendan.	2005-08-25 11:51:42 +00:00
mconnor%steelgryphon.com	da7005ed5c	bug 300830 - new error page (about:neterror) can load privileged about: urls, patch by dveditz, r=bsmedberg, sr=shaver	2005-08-22 05:09:11 +00:00
gavin%gavinsharp.com	743b627878	Bug 298823: JAR URIs (and other types missing the host part) are not properly handled by nsScriptSecurityManager::LookupPolicy(), patch by Giorgio Maone <g.maone@informaction.com>, r=caillon, sr=dveditz	2005-08-17 16:55:00 +00:00
timeless%mozdev.org	bc9ebac033	Bug 304085 crash [@ JS_ValueToString - JSValIDToString] with DEBUG_CAPS_HACKER ... r=caillon sr=dveditz	2005-08-17 07:40:39 +00:00
timeless%mozdev.org	29ac1ad7b9	Bug 304054 nsScriptSecurityManager.cpp doesn't build ifdef DEBUG_CAPS_HACKER unless defined DEBUG ... r=dveditz sr=dveditz	2005-08-12 23:13:46 +00:00
timeless%mozdev.org	9560fb68fc	Bug 304240 Make noAccess/allAccess/sameOrigin consistently intercaps in the source tree ... r=caillon sr=dveditz	2005-08-12 23:11:32 +00:00
bzbarsky%mit.edu	0392b3384b	Comment-only fixes I forgot to make. Bug 240661.	2005-07-22 20:49:12 +00:00
bzbarsky%mit.edu	10d1c576d9	Expose the subject name for the cert and an nsISupports pointer to the cert on ... nsIPrincipal that represents a certificate principal. Change preference storage to ensure matches in not only the fingerprint but also the subjectName before applying privileges from preferences to a certificate principal. Remove possibility for creating certificate principals without a useful identifying name and make sure that names don't get munged by being forced to ASCII. Bug 240661, r=caillon, sr=dveditz, a=bsmedberg	2005-07-22 19:05:42 +00:00
timeless%mozdev.org	831f32feaa	Bug 300853 Caps crash on cleanup [@ DomainPolicy::Drop] ... patch by g.maone@informaction.com r=caillon sr=dveditz a=bsmedberg	2005-07-19 21:55:36 +00:00
bsmedberg%covad.net	c70e951ba6	Bug 292624 - XUL error pages should not have chrome privileges, r=darin sr=dveditz a=asa	2005-07-14 17:46:55 +00:00
brendan%mozilla.org	deb9f0c764	Add a subsumes relation to principals so JS can handle all cases when checking indirect eval (and the like) calls (300008, r=caillon/dveditz, sr/a=shaver).	2005-07-08 23:26:36 +00:00
timeless%mozdev.org	2ad41d5c36	Bug 217967 FF104 crash [@ PL_DHashTableOperate ] changing caps access control prefs ... More consistent DomainPolicy lifecycle management avoids use of corrupted hashtable data patch by g.maone@informaction.com r=dveditz sr=shaver a=bsmedberg	2005-06-29 16:29:49 +00:00
mconnor%steelgryphon.com	6127d03f79	bug 293424 - block about: from content to remove a potential attack vector, r+sr=brendan, a=brendan/jay	2005-06-16 08:28:50 +00:00
jst%mozilla.jstenback.com	97d3abd829	Fixing part of bug 296397. Removing bogus assertion. r=shaver@mozilla.org, sr+a=brendan@mozilla.org	2005-06-09 01:11:21 +00:00
timeless%mozdev.org	9c0955251d	Bug 292588 shutdown crash !sXPConnect [@ nsScriptSecurityManager::CheckObjectAccess] ... store the runtime, unset the callback at shutdown r=dveditz sr=jst a=asa	2005-06-07 21:57:56 +00:00
dougt%meer.net	4c7f9052d3	Add a scriptable hash function API. basically what this does is moves the hashing function out of the nsISignatureVerifier.idl and creates a new interface nsICryptoHash which is scriptable. Because of this change, we needed to fix up all of the call sites. r=darin, sr=dveditz, a=shaver	2005-06-01 16:06:53 +00:00
dbaron%dbaron.org	f636ebe0de	Fix bug 293671. r=caillon sr=dveditz a=asa	2005-05-12 18:26:41 +00:00
dbaron%dbaron.org	8ca0c03467	Cleaner fix for bug 290036. b=290949 r=dveditz sr=darin a=asa	2005-05-12 18:20:07 +00:00
brendan%mozilla.org	eb7002903b	Fix comment from last night to match today's code.	2005-05-04 18:58:24 +00:00
brendan%mozilla.org	371b8140d2	Undo gist of last change for now, it breaks too much even though it's safer.	2005-05-04 16:19:31 +00:00
brendan%mozilla.org	ea9fd4132c	Find active native function principals when walking the JS stack, and beef up eval-ish native safeguards (281988, r=shaver/caillon, sr=jst, a=drivers).	2005-05-04 06:28:36 +00:00
bzbarsky%mit.edu	7b45a8e4ba	Fix crashes when privilegeManager methods are called by setting our our param ... on success return. Bug 289991 and bug 289925, r=caillon, sr=dbaron, a=dbaron	2005-04-12 05:13:26 +00:00
bzbarsky%mit.edu	6d36e81b66	Do less addrefing of principals in the script security manager. Bug 289643, ... r=caillon, sr=brendan, a=asa	2005-04-10 23:27:07 +00:00
brendan%mozilla.org	bb7b3cd85f	Revert kludge, want a general fix.	2005-04-07 19:48:57 +00:00
brendan%mozilla.org	b02c276f35	Stop evals and Script object calls/execs that cross trust domains (289074, r=shaver, sr=jst, a=drivers).	2005-04-07 02:22:24 +00:00
timeless%mozdev.org	4efd7a5f8a	Bug 239967 prototype for nsScriptSecurityManager::GetPrincipalFromContext is wrong ... r=dveditz sr=dveditz	2005-03-29 03:12:12 +00:00
bryner%brianryner.com	e171eaba9b	Inline access to XPCWrappedNative's nsISupports pointer, with do_QueryWrappedNative nsCOMPtr helper (bug 285404). r=jst, sr=darin.	2005-03-10 00:39:28 +00:00
gandalf%firefox.pl	06f479dff9	bug 279768: Bring build system to work with --enable-ui-locale; r=bsmedberg; a=doron on webservices move	2005-03-08 17:21:36 +00:00
bsmedberg%covad.net	361daac936	Bug 281414 - global s/nsIPrefBranchInternal/nsIPrefBranch2/ rs=darin (did not change backwards-compatible code in extensions/irc extensions/venkman or extensions/inspector)	2005-02-25 20:46:35 +00:00
bzbarsky%mit.edu	3a4edb10d6	Remove special-casing so non-chrome-principal pages, even with chrome: uris, ... can have script disabled as needed. Bug 280120, r=peterv, sr=neil	2005-02-22 21:18:31 +00:00
cbiesinger%web.de	92c940aa45	Bug 269661 make libpref not depend on caps ... r=caillon sr=dveditz	2005-02-06 12:39:31 +00:00
jshin%mailaps.org	d30a1bda05	bug 280613 : checkLoadURIStr of nsIScriptSecurityManager should accept AUTF8String istead of string (for IDN), r=dveditz, sr=darin	2005-02-02 07:17:53 +00:00
bzbarsky%mit.edu	d9f747cca2	Add about:license and about:licence and make about: link to them. Bug 256945, ... r=gerv, sr=darin	2005-01-23 21:02:36 +00:00
bsmedberg%covad.net	79241940e8	Bug 273876 - libxul step 2 (everything through widget, except spidermonkey) r=darin; again, this should not affect non-xulrunner trees.	2004-12-09 19:28:35 +00:00
timeless%mozdev.org	ffa869708f	Bug 261339 Setting capability.policy.default.Window.top to noAccess seems to crash mozilla ... r=caillon sr=dveditz	2004-11-05 16:54:09 +00:00
timeless%mozdev.org	b405b527b8	Bug 267311 netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect") in a XBL constructor make mozilla crash. [@ JS_FrameIterator] ... r=dveditz sr=jst	2004-11-05 15:25:04 +00:00
bzbarsky%mit.edu	1f629aef08	Make it possible to disable checkloaduri on a per-site basis instead of ... disabling it globally. Bug 233108, r=caillon, sr=jst	2004-11-03 15:45:52 +00:00
jst%mozilla.jstenback.com	f97343e1ac	Re-enabling the fix for bug 69070 and optimizing some string code in caps that was for sure part of the reason for the Tp regression, and use CheckLoadURIWithPrincipal() to be more correct. r+sr=bzbarsky@mit.edu	2004-10-15 16:53:35 +00:00
jst%mozilla.jstenback.com	08b3a16535	Re-enabling the fix for bug 69070 and optimizing some string code in caps that was for sure part of the reason for the Tp regression, and use CheckLoadURIWithPrincipal() to be more correct. r+sr=bzbarsky@mit.edu	2004-10-15 16:34:58 +00:00
dveditz%cruzio.com	e67c6e5dcf	Improve enablePrivilege confirmation dialog text and presentation, sanity-check ... privilege names (bug 253942, bug 253944) r=caillon,sr=brendan,a=chofmann,mkaply	2004-09-01 07:53:32 +00:00
cbiesinger%web.de	765d4043a5	removing myself from DEBUG_CAPS_HACKER list	2004-07-10 19:38:28 +00:00
roc+%cs.cmu.edu	0f4150a4e5	Bug 226439. Convert codebase to use AppendLiteral/AssignLiteral/LowerCaseEqualsLiteral. r+sr=darin	2004-06-17 00:13:25 +00:00
cbiesinger%web.de	914def148f	fix DEBUG_CAPS_HACKER bustage due to bug 240106 ... r=caillon sr=darin	2004-06-16 15:58:22 +00:00
dveditz%cruzio.com	e66742e59c	bug 162020 option to delay enabling confirmation buttons r=mkaply,sr=sspitzer	2004-06-05 09:26:01 +00:00
mkaply%us.ibm.com	348998da9e	#239580 ... r=danm, sr=dveditz Extend ConfirmEx to allow setting the default button - change default button for script security to no	2004-05-24 13:33:51 +00:00
roc+%cs.cmu.edu	0e3ff503fb	Bug 226439. Convert Seamonkey to EqualsLiteral. rs=darin	2004-05-22 22:15:22 +00:00
bzbarsky%mit.edu	4ede76717e	Add a version of CheckLoadURI that takes a source principal instead of a source ... URI. Update a bunch of callers to use it. Bug 233108, r=caillon, sr=dveditz	2004-04-25 16:55:27 +00:00
bryner%brianryner.com	642f7ede36	deCOMtaminate nsIScriptObjectPrincipal (bug 240745). This also fixes some code in nsCrypto.cpp that sems to have been mis-braced (I don't think it was working as intended). r+sr=jst.	2004-04-18 00:28:47 +00:00
gerv%gerv.net	9d2ee4928c	Bug 236613: change to MPL/LGPL/GPL tri-license.	2004-04-17 21:52:36 +00:00
cbiesinger%web.de	6ad20397bf	Bug 235504 Remove nsCString::EqualsWithConversion(const char*) ... r=darin sr=dbaron	2004-04-14 20:09:30 +00:00
jst%mozilla.jstenback.com	2ee27045ba	Backing out the fix for bug 235457 since it made typing URLs, and autocomplete in the the URL bar not work.	2004-03-16 19:06:10 +00:00
jst%mozilla.jstenback.com	e1913b1f1e	Fixing bug 235457. Make new windows opened through window.open be opened on the context of the opener, and make caps not lie about when capabilities are enabled. r=danm-moz@comcast.net, r=caillon@aillon.org, sr=brendan@mozilla.org, a=dbaron@dbaron.org	2004-03-16 06:57:54 +00:00
cbiesinger%web.de	2081246472	one more tweak, r=caillon	2004-03-06 20:54:47 +00:00
cbiesinger%web.de	344f084a76	making this sound less like it's PSM, rs=caillon	2004-03-06 20:47:21 +00:00
darin%meer.net	c380c59f65	landing dbaron's patch for bug 235735 "fix callers that cast away const on result of ns[C]String::get" r+sr=darin	2004-02-28 22:34:07 +00:00
darin%meer.net	f6875e2d3c	fixes bug 234916 "Remove global/static NS_NAMED_LITERAL_C?STRING usage [was: Firefox crashes on startup on Mac OS X]" r=jst sr=dbaron	2004-02-25 02:08:34 +00:00
jst%mozilla.jstenback.com	505c634885	Fixing bug 233307. deCOMtaminating nsIScript* and related interfaces. r+sr=bryner@brianryner.com.	2004-02-09 22:48:53 +00:00
bsmedberg%covad.net	d0f309943a	Continuing to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet.	2004-01-07 13:37:00 +00:00
bsmedberg%covad.net	274ef7cd49	Beginning to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet.	2004-01-07 01:22:31 +00:00
neil%parkwaycc.co.uk	6394a7f9f8	Bug 227758 make subjectPrincipalIsSystem unscriptable and checkSameOriginURI scriptable r=caillon sr=dveditz	2003-12-19 21:51:37 +00:00
pkw%us.ibm.com	56dbd77c06	Bug 228095 - AIX: 64-bit build error in nsScriptSecurityManager.cpp ... r=caillon@aillon.org, sr=brendan@mozilla.org, a=brendan@mozilla.org	2003-12-15 18:16:09 +00:00
caillon%returnzero.com	c8e5f51fe0	227079 - Mozilla asks for security privileges where it shouldn't ... Make sure we check signed.applets.codebase_principal_support and special urls before going further. r=jst sr=bzbarsky a=dbaron	2003-12-04 02:14:07 +00:00
brendan%mozilla.org	7809adca33	Fix missing cx param problem (223041, r=caillon, sr=dbaron).	2003-11-03 04:26:55 +00:00
dbaron%dbaron.org	6139d85dae	Work around bustage. Temporary fix. b=223041	2003-11-02 02:31:53 +00:00
caillon%returnzero.com	6ea484e8b7	Permit content to link to about:logo ... Bug 223293; r=timeless sr=jst	2003-10-30 01:35:09 +00:00
caillon%returnzero.com	66caced69a	Re-land patch for bug 83536, merging principal objects. ... Also includes fixes from bug 216041. r=bzbarsky sr=jst	2003-10-21 22:11:49 +00:00
brendan%mozilla.org	4878fd7a5e	Better version of last change, thanks to caillon for reminding me.	2003-09-28 04:55:50 +00:00
brendan%mozilla.org	3915f74063	Forgot to update calls to formerly-static SecurityCompareURI (r+sr=bz).	2003-09-28 04:44:33 +00:00
brendan%mozilla.org	4038563cd9	Expose nsIScriptSecurityManager::SecurityCompareURIs for use by nsGlobalWindow::SetNewDocument, to avoid spurious window.open same-origin violation errors (220421, r=caillon, sr=bzbarsky).	2003-09-28 04:22:01 +00:00
caillon%returnzero.com	a7aa61013a	about:about ... Bug 56061 r=bryner@brianryner.com sr=darin@meer.net	2003-09-13 19:35:59 +00:00
bryner%brianryner.com	06fe994577	Fix build on gcc 3.4 by removing extra semicolons (bug 218551). r/sr=dbaron, a=brendan.	2003-09-07 21:37:51 +00:00
caillon%returnzero.com	f8e8aed8a7	Backing out the patch to bug 83536. ... I will reland this when 1.6a re-opens. r+sr=jst@netscape.com a=chofmann	2003-08-22 03:06:53 +00:00
caillon%returnzero.com	ae4593bec0	Bug 216234 ... Calling operator delete on an nsAutoPtr isn't good. r+sr=dbaron@dbaron.org a=asa@mozilla.org	2003-08-20 00:40:13 +00:00
cls%seawood.org	1b51ba858c	Set MODULE in makefiles at the top of a heirarchy so that module-deps lists are more precise and builds will have the proper order if some subdirs contain other modules.	2003-08-16 00:42:35 +00:00
caillon%returnzero.com	c2d2462e51	Bug 214949 ... Make XUL error pages work again by making GetOrigin() return the full spec for chrome: URIs and preventing principal lookups when the principals hash is empty. r+sr=jst@netscape.com a=rjesup@wgate.com	2003-08-10 02:26:11 +00:00
brendan%mozilla.org	b7cdb7debb	Add shared DHashTableOps for [const] char *key use-cases, clean up dhash API abusages (214839, r=dougt, sr=dbaron).	2003-08-05 20:09:21 +00:00
caillon%returnzero.com	4572ef1a55	Adding comments, per bzbarsky. bug 214050.	2003-07-29 19:03:00 +00:00
caillon%returnzero.com	dac741004a	Don't let success of string bundle calls dictate the return value, continue to return errors. Still bug 214050.	2003-07-29 09:07:43 +00:00
caillon%returnzero.com	b6f6ad74ba	Bug 214050 ... Start to localize some of the more common user-visible error messages in caps. r+sr=bzbarsky@mit.edu	2003-07-29 05:28:00 +00:00
caillon%returnzero.com	25a56a0d4b	Init mSecurityPolicy. This somehow got lost in between the last two revisions of my patch to bug 83536. ... r=timeless,sr=bzbarsky on IRC.	2003-07-27 07:00:25 +00:00
caillon%returnzero.com	007e7d68ad	213796 - Crash In CAPS.DLL On Startup [@ nsPrincipal::GetHashValue] ... r+sr+caillonIsStupid=bzbarsky@mit.edu	2003-07-27 04:08:48 +00:00
caillon%returnzero.com	728cd6526c	Bug 213847. Prompt the user for what to do if we don't know whether we can grant a capability. ... r+sr=bzbarsky@mit.edu	2003-07-25 19:23:17 +00:00
mkaply%us.ibm.com	b7fd1c6840	Ports bustage - remove NS_COM per bsmedberg	2003-07-24 18:58:30 +00:00
caillon%returnzero.com	91b7c60bee	Bug 83536. ... Merge script principal implementations into one class. Should reduce footprint, speed up calls to caps a little bit, and fixes several memory leaks. Also fixes bugs 211174 and 211263 r=jst@netscape.com sr=bzbarsky@mit.edu moa=mstoltz@netscape.com (he looked at an earlier patch and said it looked fine, and will do a retroactive review when he returns from vacation as well)	2003-07-24 05:15:20 +00:00
seawood%netscape.com	beb45866ed	Removing extra ^M. Fixing Irix cc bustage	2003-06-28 05:15:41 +00:00
jst%netscape.com	524a20845d	Fixing bug 210730. ClassInfoData optimizations. r+sr=jaggernaut@netscape.com	2003-06-27 03:10:49 +00:00
timeless%mozdev.org	66730e2ca7	Bug 194872 CAPS vulnerability when doing cross-site-scripting with frames from different origins and different CAPS settings (allAccess, noAccess). ... bustage (const char*) sr=jst	2003-06-26 03:27:01 +00:00
mstoltz%netscape.com	ddc015e3b7	Bug 194872 - Cache zone-policy data on the subject principal instead of the callee. r=nisheeth, sr=jst.	2003-06-26 00:18:43 +00:00
jst%netscape.com	abefba9053	Fixing bug 209884. Writing an inline helper to safely get an nsIScriptContext from a JSContext and making direct callers of JS_GetContextPrivate() use the helper. r=caillon@aillon.org, sr=peterv@netscape.com	2003-06-24 21:43:01 +00:00
caillon%returnzero.com	b2badfa9f7	Bug 163645 - User defined properties of window.navigator are not remembered when a new page is loaded. ... Enable this for websites within the same domain only. Also, fixes CheckSameOriginPrincipal to just check the principals, and not care whether we have anything on the JS stack. r=mstoltz, sr=jst	2003-06-18 23:48:57 +00:00
harishd%netscape.com	85570db892	Grant access to SOAP response document's properties and also allow the document to be serializable. b=193953, r=heikki@netscape.com, sr=jst@netscape.com	2003-06-12 20:18:34 +00:00
seawood%netscape.com	97649bab86	Removing old cfm build files. Use the CFM_LAST_RITES tag to resurrect. r=macdev	2003-06-10 21:18:27 +00:00
seawood%netscape.com	b28ce0a530	Removing old cfm build files. Use the CFM_LAST_RITES tag to resurrect. r=macdev	2003-06-10 20:12:33 +00:00
dougt%meer.net	a069087dd4	Disallowing javascript or data schemes in a redirect. r=mstoltz, sr=brendan, a=rjesup, b=195201	2003-05-29 21:56:38 +00:00
dougt%meer.net	e3a6a4edfc	Disallowing javascript or data schemes in a redirect. r=mstoltz, sr=brendan, a=rjesup, b=195201	2003-05-29 21:51:34 +00:00
timeless%mozdev.org	fc043d1270	Bug 207328 @mozilla.org/scriptsecuritymanager;1 isn't registering itself correctly as an app-startup observer service ... r=mstoltz sr=alecf	2003-05-29 04:27:03 +00:00
mstoltz%netscape.com	11919bb299	Bug 163950 - allow opening connections for XML data transfer services when document.domain has been set. r=jst, sr=heikki.	2003-05-28 23:22:36 +00:00
dwitte%stanford.edu	270d3909ca	bug 100649: Length() being used where IsEmpty() is meant ... treewide changes to convert incorrect usages of string.Length() to string.IsEmpty(). thanks to afatecha@idea.com.py (Ariel Fatecha) for the patch. r=dwitte, sr=jst. got the ok from Asa to land into a closed tree.	2003-05-23 21:34:47 +00:00
dbradley%netscape.com	5761ad14e3	bug 205538 - Use hyphens instead of underscores in caps prefs for CID's. r=adamlock, sr=alecf, a=asa	2003-05-20 14:19:05 +00:00
jst%netscape.com	72ec343461	Fixing bug 202994. Make sure the proper security check is done when converting the result of a JS expression in a javascript: URL to a string. r=mstoltz@netscape.com, sr=brendan@mozilla.org, a=asa@mozilla.org	2003-05-12 22:23:52 +00:00
brendan%mozilla.org	710c694ac3	Fix overbroad getter/setter access check to apply only to scripted getters/setters; fix wrong object class name in error messages (198660, r=mstoltz, sr=jst, a=asa).	2003-05-09 00:40:50 +00:00
dbradley%netscape.com	fd606d2dcd	Another dummy change to cause beast to rebuild caps	2003-04-30 09:19:50 +00:00
mkaply%us.ibm.com	4c6419aa49	IRIX bustage	2003-04-23 04:28:41 +00:00
mstoltz%netscape.com	4edb1f430d	Bug 180749 - when remembering granted privileges for file://pages, grant privilege for that page only, not the whole local file system. r=jst, sr=heikki.	2003-04-23 00:21:02 +00:00
jst%netscape.com	690a8cef27	Fixing bug 201132. Always use the JSPrincipals from the target object when compiling event handlers, never use the principals of the global object in which the event handler is compiled. Also make sure we never use the principals that are precompiled into cloned Functions, always get the principal from the Function's scope in such cases. r=mstoltz@netscape.com (and heikki@netscape.com), sr=brendan@mozilla.org	2003-04-17 20:21:00 +00:00
bzbarsky%mit.edu	cbf70f5c05	Removing stray windows newline that causes build warning... No reviews, sorry.	2003-04-08 20:26:41 +00:00
locka%iol.ie	461f6c3964	Define XPC_IDISPATCH_SUPPORT when building caps if necessary. b=198117 r=dbradley@netscape.com sr=alec@netscape.com	2003-03-20 12:10:04 +00:00
rginda%netscape.com	2b3526ff2e	bug 170585, Scriptable streams are broken; r=darinf, sr=dougt ... update to readdata caller	2003-03-13 21:24:37 +00:00
mstoltz%netscape.com	44d264d6b0	Bug 188229 - adding new security check function that allows component instantiation by CID. r=dveditz, sr=heikki. *not part of build yet*	2003-03-12 02:17:37 +00:00
timeless%mozdev.org	b092996d3f	Bug 196340 Change NS_REINTERPRET_CAST(nsIScriptContext*, JS_GetContextPrivate(cx)) to use Static Cast ... r=mstoltz sr=heikki	2003-03-07 21:54:28 +00:00
brendan%mozilla.org	3c0c23b860	Generalize the JS_SetCheckObjectAccessCallback hook implemented here to deal with user-defined getters and setters (92773, r=mstoltz, sr=jst).	2003-03-06 19:40:14 +00:00
rginda%netscape.com	c1745c244e	bug 191773, r=mstoltz, a=dbaron@dbaron.org ... only allow x-jsd: urls from chrome: and resource:	2003-02-05 01:27:56 +00:00
seawood%netscape.com	5c6983cb86	Whitespace change to trigger rebuild of libs that depend upon zlib.	2003-01-30 05:53:29 +00:00
bryner%netscape.com	da1893e985	fixing IRIX bustage (^M's from mstoltz's checkin)	2003-01-25 03:58:38 +00:00
mstoltz%netscape.com	366a456693	Bug 189799 - Ignore username:password portion of URL when making URL comparisons for security. r=heikki, sr=jst, a=asa	2003-01-25 01:43:37 +00:00
sfraser%netscape.com	ba78e7bec4	Fix bug 127185: don't crash with a null JS context if running without XPT files. Fixes nsScriptSecurityManager to do more thorough error checking on initialization. r=mstoltz, sr=jst. Fixes bustage.	2003-01-17 02:00:01 +00:00
sfraser%netscape.com	1c574be034	Fix bug 127185: don't crash with a null JS context if running without XPT files. Fixes nsScriptSecurityManager to do more thorough error checking on initialization. r=mstoltz, sr=jst.	2003-01-17 01:00:15 +00:00
dbaron%dbaron.org	48544669f3	Bug 178643: Remove uses of NS_INIT_ISUPPORTS, since it's no longer needed. r=timeless sr=jag	2003-01-08 19:24:38 +00:00
caillon%returnzero.com	6d92f9bd32	184257 - Updating pref callers. r=timeless sr=bzbarsky	2003-01-08 08:40:41 +00:00
seawood%netscape.com	d5efcdfb6d	Start installing GRE libraries & components into a separate dist/gre directory as part of the default build. ... Bug #186241 r=dougt	2002-12-28 01:15:07 +00:00
alecf%netscape.com	df10f648b8	take two at fixing bug 177401 - convert nsIBinaryStream over to using nsAString/nsACString for string values, to speed up fastload ... sr=darin, r=dougt (the previous checkin had a typo which disabled fastload entirely!)	2002-11-14 18:16:31 +00:00
alecf%netscape.com	0a48c10053	argh, back out my last checkin because Ts went UP not down!	2002-11-09 01:31:32 +00:00
alecf%netscape.com	4721428275	fix for bug 177401 - use nsAString& classes instead of wstring in nsIBinaryInputStream, to speed up fastload startup ... sr=darin, r=dougt	2002-11-08 23:30:53 +00:00
mstoltz%netscape.com	d0f045a722	Bug 168316 - When calling from Java into JS, add a "dummy" JS stack frame with ... principal information for the security manager. r=dveditz, sr=jst, a=chofmann.	2002-10-30 03:15:59 +00:00
sspitzer%netscape.com	b7337fe62b	fix for #168136. r=mstoltz, sr=dveditz. ... for pref controlled schemes, allow access if source scheme is chrome or res. needed for the new "view filter log UI".	2002-09-12 20:27:07 +00:00
dougt%netscape.com	68faeb5241	166917. Clean up xpcom SDK includes. r=rpotts@netscape.com, sr=alecf@netscape.com, a=rjesup@wgate.com	2002-09-07 17:13:19 +00:00
jkeiser%netscape.com	32844f7719	Make anonymous content inaccessible to web content (bug 164086), r=sicking@bigfoot.com, sr=jst@netscape.com	2002-08-29 04:05:39 +00:00
bbaetz%student.usyd.edu.au	e1742b6500	Backing out jkeiser's checkin for bug 164086 (not bug 96537) because he ... left a file out, and the tree turned red....	2002-08-28 10:13:28 +00:00
jkeiser%netscape.com	8aa6968431	Make anonymous content inaccessible to web content (bug 96537), r=sicking@bigfoot.com, sr=jst@netscape.com	2002-08-28 08:19:43 +00:00
henry.jia%sun.com	227be5af9c	Fix bug 159889: replace the hardcode of "@mozilla.org/preferences;1" with NS_PREF_CONTRACTID ... Patch by leon.zhang@sun.com r=Henry, sr=alecf	2002-08-19 04:29:58 +00:00
seawood%netscape.com	322da773fb	Removing old nmake build makefiles. Bug #158528 r=pavlov	2002-08-10 07:55:43 +00:00
henry.jia%sun.com	bb349938fc	5th patch for bug 158080 ... Description: replace the hardcode of @mozilla.org/embedcomp/window-watcher;1 with NS_WINDOWWATCHER_CONTRACTID Patch by Henry.Jia@sun.com r=anto, sr=alecf	2002-08-06 06:32:02 +00:00
sicking%bigfoot.com	39c966dd38	Use principals instead of URIs for same-origin checks. ... b=159348, r=bz, sr=jst, a=asa	2002-07-30 21:26:32 +00:00
mstoltz%netscape.com	d0eab90dbb	Bug 154930 - If one page has explicitly set document.domain and another has not, ... do not consider them to be of the same origin for security checks. r=dveditz, sr=jst	2002-07-09 00:10:02 +00:00
harishd%netscape.com	23d9c4988e	Disable script on the requested docshell and the containing docshells. b=154647, r=mstoltz, sr=jst	2002-07-02 23:26:08 +00:00
mstoltz%netscape.com	6e12a5ca9f	Bug 152725 - Get URL passed to cookie module from document principal, not document URL. ... THis ensures that cookies set by javascript URL pages are set in the correct domain. r=morse, sr=dveditz.	2002-07-02 17:58:24 +00:00
harishd%netscape.com	0031d01a28	Backing out my checkin to see if it fixes the Txul breakage	2002-06-27 23:32:51 +00:00
harishd%netscape.com	5ce8f55dd0	** checking in for mstoltz ** ... Disable scripts on the requested docshell and containing docshells. Also, made setCurrentURI() scriptable ( approved by Adam Lock ). b=154647, r=harishd, sr=jst	2002-06-27 20:58:42 +00:00
mstoltz%netscape.com	6f5d99be4c	133170 - Need to re-check host for security on a redirect after a call to ... XMLHttpRequest.open(). For xmlextras, r=heikki, sr=jband. For caps, r=bzbarsky, sr=jst 147754 - Add same-origin check to XMLSerializer. Patch by jst. r=mstoltz, sr=jband 113351 - Add same-origin check to XSL Include. Patch by peterv and jst, r=mstoltz, sr=rpotts 135267 - Add same-origin check to stylesheets included via LINK tags. r=dveditz, sr=scc	2002-06-14 23:54:18 +00:00
dougt%netscape.com	c683a217ab	Fixes mozilla/strings requiring unfrozen nsCRT class. patch by scc, r=dougt, sr=jag, b=136756	2002-05-15 18:55:21 +00:00
darin%netscape.com	6fd5862e6e	fixes bug 142870 "nsIFile should use UCS-2 instead of UTF-8" ... r=dougt sr=alecf	2002-05-07 23:07:19 +00:00
ben%netscape.com	7d003ba281	[Chrome FastLoad] ... Ensure that principals are written as Compound Objects using |WriteCompoundObject|, not using |WriteObject| r=mstoltz, sr=brendan	2002-05-03 03:00:46 +00:00
darin%netscape.com	e554d83626	fixes bug 129279 "nsIFile unicode/utf8/ascii task" ... r=dougt sr=alecf	2002-04-27 05:33:09 +00:00
mstoltz%netscape.com	8b4ac18c14	Bug 136993 - Put the "trusted codebase principals" feature back in. ... r=harishd, sr=jst, a=valeski	2002-04-13 01:53:46 +00:00
darin%netscape.com	e73746ce67	fixes bug 134546 "Memory leak in nsScriptSecurityManager::GetBaseURIScheme()" ... patch=pj@ludd.luth.se, r=mstoltz, sr=darin, a=rjesup@wgate.com	2002-04-03 20:23:57 +00:00
mstoltz%netscape.com	03fe97372a	A bunch of fixes in caps: ... 128697 - Added a pref listener for changes to capability.policy prefs, removed profile-change listener 131025 - Removed insecure "trusted codebase principals" feature 131340 - Make nsCodebasePrincipal::Equals handle jar URLs correctly 131342 - Clean up privilege-grant dialog code 128861 - class policy hashtables allocated only when needed; avoids PLDHash memory-use warning Fixed comparison of -1 and 80 ports (Can't find the bug # right now) All r=harishd, sr=jst, a=asa.	2002-03-20 05:53:46 +00:00
timeless%mac.com	dec943eb10	Bug 106386 rid source of misspellings ... r=db48x sr=blake a=asa	2002-03-19 04:30:17 +00:00
alecf%netscape.com	e5d4028f9d	fix bug 129635 - write a destructor for DomainPolicy so that the hashtable is destroyed ... (and not leaked!) r=mstoltz, sr=vidur, a=asa	2002-03-10 00:41:08 +00:00
rginda%netscape.com	35fde24f6c	Bug 129503, "IsCapabilityEnabled should return PR_TRUE if no script on stack" ... sr=brendan, r=mstoltz, a=asa If the js stack has no principals on it, return PR_TRUE from IsCapabilityEnabled . Currently, the only time we'd have a stack devoid of principals is when all f unctions are native. If this assumption changes, this may need to be revisited (depending on what it would mean to be a compiled script without a principal.)	2002-03-08 02:20:55 +00:00
darin%netscape.com	f1a6738b6c	fixes bug 124042 "support internationalized URIs" r=dougt, sr=alecf, a=asa	2002-03-06 07:48:55 +00:00
jband%netscape.com	3ac1b33f9c	remove stale DEBUG_jband block. rs=jband a=dbaron	2002-03-05 08:02:05 +00:00
mstoltz%netscape.com	18c8067fae	Bug 127938 - chrome scripts should be exempt from the security check put in for ... bug 105050, on access to the opener property when the opener is a mail window. r=pavlov, sr=jst, a=leaf.	2002-02-28 00:22:59 +00:00
mstoltz%netscape.com	75f6bd3583	partially backing out my last change - weird dependency problem	2002-02-26 05:28:26 +00:00
mstoltz%netscape.com	82659b14ca	32571, present confirmation dialog before allowing scripts to close windows. ... 105050, pass null window.opener when opener is a mail window. both r=heikki, sr=jst, a=asa. Backed out previously because of tinderbox problem, which should be fixed now.	2002-02-26 04:50:21 +00:00
jst%netscape.com	beae4f7953	Fixing bug 111529. Optimizing out unnecessary QI calls from nsScriptSecurityManager::GetObjectPrincipal() and doing some other minor cleanups and speedups. r=nisheeth@netscape.com, sr=jband@netscape.com	2002-02-20 05:51:05 +00:00
cathleen%netscape.com	124339899e	eliminate nsCRT::strlen for char* strings (part 1), bug 124536 r=dp sr=brendan	2002-02-19 07:36:56 +00:00
mcafee%netscape.com	1a3a52cce7	Backing out mstoltz. r=dbaron,jrgm	2002-02-19 04:06:53 +00:00
mstoltz%netscape.com	cc94447571	Bug 105050 - return null window.opener to scripts if opener is a mail window. ... Bug 32571 - Prompt user before allowing scripts to close windows if opener is null. both r=heikki, sr=jst.	2002-02-19 01:09:45 +00:00
mkaply%us.ibm.com	cbcd4c677a	OS/2 bustage - callback needs to be in header	2002-02-13 13:30:06 +00:00
mstoltz%netscape.com	4756b7169c	Bug 119646 - Rewrite of the security manager policy database for improved ... performance. r=jst, sr=jband.	2002-02-13 04:20:46 +00:00
alecf%netscape.com	5483b6f627	one more part of fix for bug 107575, including the much coveted whitespace ... remove aIgnoreCase parameter from all nsString and nsCString consumers sr=jag, r=shaver	2002-02-01 01:53:09 +00:00
sfraser%netscape.com	d133d4956f	Making the nsModuleComponentInfo data const; bug 74803. r=dp, sr=waterson	2002-01-30 21:14:20 +00:00
seawood%netscape.com	45bfbf0658	Landing the rest of the win32 gmake changes: ... * Adds Makefile.ins to win32 specific dirs * Adds WINNT ifdefs to Makefile.ins * Causes NSPR to be compiled with --with-mozilla * Misc general Makefile.in cleanup Bug #58981 r=mcafee	2001-12-18 09:14:29 +00:00
jaggernaut%netscape.com	97b0530073	Bug 104158: Use NS_LITERAL_STRING instead of XXXWithConversion("..."). r=bryner, rs=alecf	2001-12-16 11:58:03 +00:00
mstoltz%netscape.com	cb9ae92896	Bug 107387 - rename security.properties to caps.properties. r=nhotta, rs=jst.	2001-12-12 04:43:35 +00:00
ccarlen%netscape.com	993cd4c06f	Bug 98349 - Convert Mac build to CW7 and XML projects. Removing obsolete .mcp files. r=pink/sr=sfraser	2001-12-11 04:54:47 +00:00
ccarlen%netscape.com	6d8ea78b52	Adding new files for conversion to CW7 and XML project files. Bug 98349 r=pink/sr=sfraser.	2001-12-10 20:25:12 +00:00
mstoltz%netscape.com	3c9f658ac2	Bug 109113 - misplaced #ifdef DEBUG caused fix not to work in opt builds. ... Moved #endif to exclude important call. r/sr=jst.	2001-11-27 00:29:20 +00:00
jband%netscape.com	ee23501c42	trivial patch to make what is supposed to be a warning really a warning instead of an assert. rs=jband	2001-11-22 23:26:34 +00:00
peterv%netscape.com	99fc30ce49	Fixing mac debug bustage. Patch suggested by jst, sr=jst.	2001-11-16 10:50:33 +00:00
mstoltz%netscape.com	25276e6b94	Bug 109113, second half of fix. r=jst, sr=brendan. Adding new CheckObjectAccess ... callback to enforce the same-origin policy on function.caller.	2001-11-16 06:17:24 +00:00
dbaron%fas.harvard.edu	8cd8d91750	Ensure that string literals are used as |const char*| rather than |char*|. r=jag sr=brendan b=107052	2001-11-07 06:24:10 +00:00
seawood%netscape.com	be10c3b1a8	Backing out fix for remote mach-o builds as it left mach-o builds fragile. ... Add TK_CFLAGS back to default CFLAGS/CXXFLAGS. Bug #107696	2001-11-03 03:29:05 +00:00
seawood%netscape.com	8a2a775382	Since '-framework Carbon' causes binaries to require console access to run, do not link using that flag by default. Otherwise, remote builds & non-console tinderboxes will break. Mac OSX Mach-O only. ... Bug #107696 r=mozbot	2001-11-01 00:54:48 +00:00
mstoltz%netscape.com	f634fa73d2	bug 106535, adding the ability to enable codebase principals for a single host ... instead of for all hosts. r=vidur, sr=jst.	2001-10-26 23:00:48 +00:00
jaggernaut%netscape.com	45107c0d97	Bug 53057: Fixing up users of implicit |CharT*| conversion operators for nsCString to use |.get()| instead, rr=dbaron, rs=scc	2001-10-25 06:13:52 +00:00
bnesse%netscape.com	73c9a1111f	Fix for bug 103883. Add weak ref support for prefs observers to help reduce MLK cycles with preferences. r=ccarlen, darin, gordon, hewitt, mstoltz, srilatha, sspitzer. sr=alecf.	2001-10-22 20:54:48 +00:00
dougt%netscape.com	d18d7e2b17	nsIObserver and nsIObserverService API freeze. r=rpotts@netscape.com, alecf@netscape.com. bug 99163	2001-10-19 20:52:59 +00:00
bzbarsky%mit.edu	8986a0ad12	Make CAPS correctly observe changes to capability.policy prefs. Needed ... for having UI for these suckers. Bug 101150, r=mstoltz,sr=jst	2001-10-02 21:56:51 +00:00
jaggernaut%netscape.com	ca6197295f	Bug 100476: Convert uses of member functions ToNewUnicode, ToNewCString and ToNewUTF8String to their global versions and remove support from nsCString and nsString. r=dbaron, rs=scc	2001-09-29 08:28:41 +00:00
gerv%gerv.net	11248436dd	License changes, take 2. Bug 98089. mozilla/config/, mozilla/caps/, mozilla/build/.	2001-09-25 01:03:58 +00:00
gerv%gerv.net	1856815ff1	Oops.	2001-09-20 00:02:59 +00:00
scc%mozilla.org	102170b2a0	bug #98089: ripped new license	2001-09-19 20:09:47 +00:00
jaggernaut%netscape.com	d1a7bfa843	One module per line for REQUIRES. r=/sr=alecf	2001-09-18 22:01:13 +00:00
jaggernaut%netscape.com	dc40187223	Bug 73353: splitting the modules on the REQUIRES lines in Makefile.in across multiple lines to more clearly show the changes made. sr=alecf	2001-09-18 13:41:47 +00:00
alecf%netscape.com	1e0e7dd033	Add REQUIRES to many modules for win32 support, bug 98372 r=cls	2001-09-12 20:32:40 +00:00
jband%netscape.com	14bd719214	attempt to fix HP-UX and and some other Unix bustages. r=cls	2001-08-29 07:24:39 +00:00
mstoltz%netscape.com	3f22e806ad	bug 86799, adding support for wildcard security policies of the form ... "capability.policy.group.*.property". Also added additional optimizations and changed copy-initialization of NSCOMPtrs to direct initialization throughout the file. r=harishd, sr=jst, a=asa.	2001-08-29 02:05:48 +00:00
dbaron%fas.harvard.edu	113ad642ae	Replace uses of deprecated NS_IMPL_ISUPPORTS and NS_IMPL_QUERYINTERFACE macros with NS_IMPL_{ISUPPORTS,QUERYINTERFACE}{1,0}. r=jag rs=brendan b=45797	2001-08-21 01:48:11 +00:00
sfraser%netscape.com	529028c336	Project cleanup, rs=scc. Don't link with OJI, which is a component.	2001-08-15 23:09:21 +00:00
cls%seawood.org	a3c1dd1b09	Use NS_PTR_TO_INT32 macros to do 64-bit safe pointer conversions. ... Bug #20860 r=Roland.Mainz@informatik.med.uni-giessen.de sr=brendan@mozilla.org	2001-08-14 07:59:59 +00:00
mstoltz%netscape.com	880f5907bc	86984 - make history.length sameOrigin-accessible. Security prefs change. ... 91714 - CheckLoadURI should trest 'safe' and 'unsafe' about: URLs as different protocols 56260 - 'Remember This Decision' in signed script grant dialog should default to unchecked 83131 - More descriptive security error messages 93951 - Added null check in GetBaseURIScheme to prevent crash. All bugs r=jtaylor, sr=jst	2001-08-14 00:18:58 +00:00
brendan%mozilla.org	9e5cfdfda2	Shrink principals struct back to where it was last week -- but it could go further (93043, r=shaver, sr=jst).	2001-08-09 01:15:57 +00:00
brendan%mozilla.org	01d4c02b07	I'm such a C luddite.	2001-08-07 04:45:27 +00:00
brendan%mozilla.org	49c0102cdf	Restore scriptable nsIClassInfo.classID but add fast/C++-only classIDNoAlloc; define and use nsIClassInfo::EAGER_CLASSINFO in caps (93792, sr=waterson&jst).	2001-08-07 03:59:29 +00:00
mstoltz%netscape.com	1b5e7659c9	82495 - Support for the view-source protocol in CheckLoadURI ... 87887 - don't call InitPolicies or InitPrincipals if there are no prefs to process 83902 - Use weak reference to pref branch to avoid reference cycle 91619 - was leaking a char* - use nsXPIDLCString instead 86932 - Add support for per-site JS disabling to CanExecuteScripts all bugs r=jesse, sr=dougt	2001-08-02 20:32:48 +00:00
brendan%mozilla.org	dbd7fed5b1	FASTLOAD_20010703_BRANCH landing, r=dbaron, sr=shaver.	2001-07-31 19:05:34 +00:00
jaggernaut%netscape.com	e91f8a147e	Bug 86734: Remove NS_WITH_SERVICE. r=dbaron, rs=scc, a=asa	2001-07-25 07:54:28 +00:00
jaggernaut%netscape.com	cb0faab070	Bug 73353: clean up the REQUIRES lines in Makefiles.	2001-07-23 22:36:12 +00:00
dbaron%fas.harvard.edu	aa4fec2b67	Header include dependency cleanup. b=64023 r=jag rs=brendan	2001-07-16 02:40:48 +00:00
mstoltz%netscape.com	f3d9b0caa1	Bug 77485 - defining a function in another window using a targeted javascript: ... link. Prevent running javascript: urls cross-domain and add a security check for adding and removing properties. r=harishd, sr=jst.	2001-07-13 07:08:26 +00:00
jaggernaut%netscape.com	5a6317b8a5	Bug 88413: Remove |GetUnicode()| from nsString (and replace it with |get()|). r=dbaron, rs=scc. ... This removes all call-sites I can currently fix. Tomorrow I'll try to get someone to checkin my changes to security/ and I'll get some help with the Netscape side of things. nsString::GetUnicode()'s final death-blow will be dealt soon. Please keep this in mind as you add new code :-)	2001-06-30 11:02:25 +00:00
mstoltz%netscape.com	f4de90c798	86019 - Change stack-walking code in caps to keep functions from inheriting privileges ... from their caller. r=jesse@netscape.com, sr=jst@netscape.com, a=asa@mozilla.org, PDT+ 86982 - Add same-origin security check to XMLDocument::Load(). r,a=blizzard@mozilla.org, sr=jst@netscape.com 84191 - Fixing regression in Open URL dialog by not calling CheckLoadURI when it isn't needed. r=cmanske@netscape.com, sr=sfraser@netscape.com, a=asa@mozilla.org	2001-06-22 02:08:10 +00:00
waterson%netscape.com	b74d6e1c8b	Land STATIC_BUILD_20010612_BRANCH, which supports building mozilla with components statically linked into the executable, as well as 'meta modules' that combine components into uber-DLLs.	2001-06-20 20:21:49 +00:00
dbaron%fas.harvard.edu	9d35ed31a4	Fix bad getters on nsIDocument and nsIScriptContext to use out params rather than return |AddRef|ed pointers. b=81289 r=jaggernaut sr=jst a=asa	2001-06-20 03:27:48 +00:00
scc%mozilla.org	a8fb409c6e	bug #85271: sr=waterson, r={beard, jag, dbaron}, a=asa. Eliminate features of |nsXPIDLC?String| that keep it out of the string hierarchy (i.e., using assigment to rebind ownership, static |Copy| members, and |getter_Shares|), fixing some leaks in the process.	2001-06-17 05:23:38 +00:00
mstoltz%netscape.com	d6e2839371	bug 77485 - exploit inserting a function into another window using targeted ... javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner in nsDocShell::LoadInternal to before the target docshell is called, and changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get the principal from the function object's scope chain if the function object's principal is the system principal. r=jst, sr=vidur, a=asa.	2001-05-30 02:22:22 +00:00
ddrinan%netscape.com	24e6ca57c8	PCKS7 implementation for signed JS. Bug# 82227 r=mstoltz@netscape.com,sr=blizzard@mozilla.org,a=blizzard@mozilla.org	2001-05-23 22:06:43 +00:00
mstoltz%netscape.com	8c0cd58b30	Re-checking-in my fix for 47905, which was backed out last night because of a bug in some other code that was checked in along with it. This checkin was not causing the crasher and is unchanged. See earlier checkin comment - in short, this adds same-origin to XMLHttpRequest and cleans up some function calls in caps, removes some unnecessary parameters. r=vidur, sr=jst.	2001-05-19 00:33:51 +00:00
blizzard%redhat.com	678b80f10b	Back out mstoltz because of blocker bug #81629. Original bugs were 47905 79775.	2001-05-18 17:41:23 +00:00
mstoltz%netscape.com	11f7b8f900	Bug 47905 - adding security check for XMLHttpRequest.open. ... Added nsIScriptSecurityManager::CheckConnect for this purpose. Also cleaned up the security check API by removing some unnecessary parameters. r=vidur@netscape.com, sr=jst@netscape.com Bug 79775 - Forward button broken in main mail window. Making WindowWatcher not call GetSubjectPrincipal if the URL to be loaded is chrome, since the calling principal is superfluous in this case. No one has been able to find the root cause of this problem, but this checkin works around it, which is the best we can do for now. r=ducarroz@netscape.com, sr=jst@netscape.com	2001-05-18 06:56:29 +00:00
mstoltz%netscape.com	f9c13993e0	Fixing bug 78831 - treat chrome and resource URLs the same in the ... URL loading check and give them access to each other. r=pavlov, sr=brendan. This allows us to turn on the fix (already reviewed) for 69070.	2001-05-15 22:47:21 +00:00
mstoltz%netscape.com	6758786117	*** empty log message ***	2001-05-15 06:43:12 +00:00
mstoltz%netscape.com	475bbed189	bug 79445, fixing crash with some event handlers (null pointer dereference) ... r/sr=brendan@mozilla.org. Also fixed a typo in prefs that would have reopened bug 56009.	2001-05-15 04:44:54 +00:00
mstoltz%netscape.com	4e73efe1f2	bug 79916 - was using | instead of &, causing a security hole. r=jband, sr=brendan.	2001-05-11 00:53:21 +00:00
mstoltz%netscape.com	59c995612e	Fixes for bugs 79796, 77203, and 54060. r=jband@netscape.com, ... sr=brendan@mozilla.org	2001-05-11 00:43:27 +00:00
dmose%netscape.com	ac5e8e044c	more REQUIRES bustage fixing for senna; unicharutil dependency has been introduced because caps wants nsIDocShell which wants nsIPresContext	2001-05-10 18:48:46 +00:00
jst%netscape.com	9cc635ad1c	Temporary workaround for the composer and other related problems caused by security manager problems, change by mstoltz@netscape.com, r=jst@netscape.com	2001-05-09 02:53:46 +00:00
jst%netscape.com	f7460d0269	Landing the XPCDOM_20010329_BRANCH branch, changes mostly done by jband@netscape.com and jst@netscape.com, also some changes done by shaver@mozilla.org, peterv@netscape.com and markh@activestate.com. r= and sr= by vidur@netscape.com, jband@netscape.com, jst@netscpae.com, danm@netscape.com, hyatt@netscape.com, shaver@mozilla.org, dbradley@netscape.com, rpotts@netscape.com.	2001-05-08 16:46:42 +00:00
ccarlen%netscape.com	ac8ff4c8ea	Bug 78745 - nsIPromptService::ConfirmEx needs to be more flexible. r=valeski, sr=sfraser	2001-05-06 15:03:55 +00:00
kandrot%netscape.com	afdac97c93	Check in for Ron Guilmette. r=shaver, sr=waterson. For intl r=nhotta. Changes for NS_IMPL_NSGETMODULE. bug #46775.	2001-05-05 05:33:37 +00:00
mkaply%us.ibm.com	4a13c64481	#76913 ... r=mstoltz, sr=brendan Fix some calling convention - PR_ to JS_	2001-05-02 00:02:59 +00:00
cls%seawood.org	00f28396a9	Set EXPORT_LIBRARY=1 in all pertinent Makefile.ins. Allows us to build the final link list as we traverse the tree. Bug #46775	2001-04-28 19:48:12 +00:00
valeski%netscape.com	00bca056ef	mozilla diffs r=tao, sr=alecf, commercial diffs r=syd, sr=syd/shaver. lower-casing JS calls to createBundle. removing un-used nsILocale param from nsIStringBundle::CreateBundle(). 76332	2001-04-27 21:30:24 +00:00
sfraser%netscape.com	245d4eb76f	Backing out valeski	2001-04-27 05:53:22 +00:00
valeski%netscape.com	54db7dffa3	mozilla tree r=tao, sr=alecf. commercial tree r=syd, sr=syd/shaver. lowercasing the first char in JS method calls to createBundle. removing the dead locale parameter in the CreateBundle() method call. 76332	2001-04-27 04:16:22 +00:00
bnesse%netscape.com	000d1011d5	Prefs API refactoring. Bug #46863. r=valeski, sr=alecf.	2001-04-26 18:41:11 +00:00
ccarlen%netscape.com	c8128a5765	Bug 46859 - Remove UniversalDialog. r=valeski/sr=rpotts,sfraser/a=blizzard	2001-04-21 00:26:18 +00:00
bryner%uiuc.edu	97e89fd687	Backing out bnesse's fix for bug 46863 due to numerous types of runtime bustage on linux and windows. a=brendan.	2001-04-20 06:45:56 +00:00
bnesse%netscape.com	b0baaeabc3	Landing PrefAPI refactoring bug 46863. r=valeski, sr=alecf, a=blizzard.	2001-04-19 22:21:39 +00:00
mstoltz%netscape.com	2b6e6516d2	More fixes for 55237, cleaned up CheckLoadURI and added a check on "Edit This Link." Also added error reporting (bug 40538). ... r=beard, sr=hyatt	2001-04-17 01:21:44 +00:00