Commit Graph

17127 Commits

Author SHA1 Message Date
ffxbld
34b589ce89 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D179667
2023-06-01 13:55:30 +00:00
Barret Rennie
c1149a0bf1 Bug 1835714 - Support DragonFly BSD in browser_content_sandbox_syscalls.js r=Gijs
Differential Revision: https://phabricator.services.mozilla.com/D179396
2023-05-30 16:38:04 +00:00
ffxbld
338d202874 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D179350
2023-05-29 12:05:12 +00:00
ffxbld
271e128750 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D179226
2023-05-26 15:00:40 +00:00
Bob Owen
b4707601b2 Bug 1834807: Align Media Foundation CDM sandbox policy with other browsers. r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D178957
2023-05-26 12:25:12 +00:00
Mark Banner
8b4f426ecf Bug 1834204 - Update more consumers to import ES modules directly. r=kpatenio,geckoview-reviewers,whimboo,m_kato
Differential Revision: https://phabricator.services.mozilla.com/D178590
2023-05-26 11:36:33 +00:00
Benjamin Beurdouche
3b5631e630 Bug 1821434 - land NSS NSS_3_90_BETA1 UPGRADE_NSS_RELEASE, r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D179063
2023-05-25 12:00:46 +00:00
Natalia Csoregi
e87ecf485e Backed out 3 changesets (bug 1834222, bug 1834176) for causing RemoteProcessMonitor failures. CLOSED TREE
Backed out changeset 346d3a1568dd (bug 1834222)
Backed out changeset ea1d8b634bfc (bug 1834176)
Backed out changeset 74d1880272d3 (bug 1834176)
2023-05-24 04:29:45 +03:00
Mark Banner
fbc15bdb60 Bug 1834176 - Convert NetUtil.jsm to be an ES system module. r=arai,webdriver-reviewers,perftest-reviewers,valentin,extension-reviewers,devtools-reviewers,sync-reviewers,cookie-reviewers,robwu,afinder,whimboo
Differential Revision: https://phabricator.services.mozilla.com/D178589
2023-05-23 19:09:29 +00:00
Noemi Erli
aa2f146d78 Backed out 2 changesets (bug 1834176) for causing xpc failures in test_unload.js CLOSED TREE
Backed out changeset 57876d77a652 (bug 1834176)
Backed out changeset ae2f0837b528 (bug 1834176)
2023-05-23 12:14:37 +03:00
Mark Banner
e3e9a991b8 Bug 1834176 - Convert NetUtil.jsm to be an ES system module. r=arai,webdriver-reviewers,perftest-reviewers,valentin,extension-reviewers,devtools-reviewers,sync-reviewers,cookie-reviewers,robwu,afinder,whimboo
Differential Revision: https://phabricator.services.mozilla.com/D178589
2023-05-23 08:13:08 +00:00
ffxbld
23763243c0 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,pascalc
Differential Revision: https://phabricator.services.mozilla.com/D178630
2023-05-22 12:56:04 +00:00
Mark Banner
2a53076d43 Bug 1826063 - Automatic fixes for enabling Prettier on production xhtml and html files. r=mossop,webdriver-reviewers,webcompat-reviewers,geckoview-reviewers,extension-reviewers,settings-reviewers,application-update-reviewers,credential-management-reviewers,fxview-reviewers,sgalich,nalexander,devtools-reviewers,sclements,denschub,robwu,owlish
Differential Revision: https://phabricator.services.mozilla.com/D177938
2023-05-20 12:26:56 +00:00
Mark Banner
130a655906 Bug 1826062 - Automatic fixes for upgrading Prettier to 2.8.8. r=mossop,perftest-reviewers,webcompat-reviewers,geckoview-reviewers,denschub,devtools-reviewers,sparky,calu
Differential Revision: https://phabricator.services.mozilla.com/D177027
2023-05-20 12:26:53 +00:00
Mark Banner
8219a5c503 Bug 1826062 - Automatic fixes for Prettier 2.0.5 upgrade. r=mossop,perftest-reviewers,webcompat-reviewers,geckoview-reviewers,denschub,devtools-reviewers,sparky,owlish
Differential Revision: https://phabricator.services.mozilla.com/D177025
2023-05-20 12:26:49 +00:00
Anton Bobrov
b41b4530cc Bug 1833330 - Do not import cert to certdb on override exception. r=keeler,bolsson
Differential Revision: https://phabricator.services.mozilla.com/D178334
2023-05-19 23:03:29 +00:00
Dana Keeler
83e9da4e05 Bug 1833932 - remove unnecessary nsISiteSecurityState interface r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D178467
2023-05-18 21:46:02 +00:00
ffxbld
a1036b237f No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D178432
2023-05-18 14:36:07 +00:00
Alexandre Lissy
1f5e706a21 Bug 1833110 - Cache ldconfig to limit main thread io r=jld,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D178150
2023-05-18 13:28:07 +00:00
Noemi Erli
1bc5fc90db Backed out changeset 893c91960f17 (bug 1833110) for causing leakcheck failures CLOSED TREE 2023-05-18 13:13:23 +03:00
Alexandre Lissy
a29606fb7d Bug 1833110 - Cache ldconfig to limit main thread io r=jld,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D178150
2023-05-18 09:33:12 +00:00
Barret Rennie
0fab19753b Bug 1832921 - Remove nsIOSFileConstantsService usage browser_content_sandbox_syscalls.js r=Gijs,gerard-majax
Differential Revision: https://phabricator.services.mozilla.com/D177948
2023-05-16 16:37:56 +00:00
ffxbld
d67fcaad82 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D178037
2023-05-15 12:50:37 +00:00
Bob Owen
9f184fdfd6 Bug 1830102: Fix warning and reenable warnings as errors for remotesandboxbroker. r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D177769
2023-05-13 14:20:45 +00:00
Dana Keeler
1348250b1c Bug 1820628 - don't use server certificates to partition remembered client auth certificate decisions r=jschanck
Previously, remembered client authentication certificate decisions would be
partitioned by server certificate (as well as domain, obviously). This led to
unexpected behavior whereby a user could connect to the same domain multiple
times and be asked each time to choose a client certificate (given that a
single domain could be backed by multiple servers each with a different
certificate).

Differential Revision: https://phabricator.services.mozilla.com/D177562
2023-05-12 21:24:23 +00:00
ffxbld
758b17790d No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan a=reland CLOSED TREE
Differential Revision: https://phabricator.services.mozilla.com/D177749
2023-05-11 12:06:59 +00:00
Iulian Moraru
d4199e57ab Backed out changeset 1ee4715c46fb for causing xpcshell failures on test_urlTelemetry.js. CLOSED TREE 2023-05-11 17:18:15 +03:00
ffxbld
b094c87c74 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D177749
2023-05-11 12:06:59 +00:00
Dana Keeler
62972d0862 Bug 1822924 - enable EV treatment for BJCA Global Root CA1 and CA2 root certificates r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D177655
2023-05-10 17:54:17 +00:00
Dana Keeler
69276c7242 Bug 1822934 - remove EV treatment for expired E-Tugra Certification Authority root r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D177646
2023-05-10 17:17:13 +00:00
Mike Hommey
4ca7294553 Bug 1832190 - Remove generate_certdata.py. r=jschanck
It's not been used since bug 1789520.

Differential Revision: https://phabricator.services.mozilla.com/D177570
2023-05-10 01:06:12 +00:00
Mike Hommey
e120474d55 Bug 1829050 - Enable STL wrapping (and thus infallible new) for wasm-sandboxed code. r=firefox-build-system-reviewers,shravanrn,andi
Differential Revision: https://phabricator.services.mozilla.com/D175981
2023-05-08 21:10:19 +00:00
Jed Davis
a76fa3e411 Bug 1829652 - Remove Linux content sandbox level 1. r=gcp
Content sandbox level 1 was a configuration with a default-deny
seccomp-bpf policy but which allowed direct filesystem access; that
required additional code for the syscall filter which was untested and
tended to bit-rot.  It was trivially escapable and was no longer being
used even for debugging, so this patch removes it.

The `security.sandbox.content.level` pref can still be set to 0 to
disable the sandbox, but if it's nonzero then we now enforce a minimum
level of 2, which restricts write access to files (but not read access
or the use of sockets).

Differential Revision: https://phabricator.services.mozilla.com/D176968
2023-05-08 18:51:47 +00:00
ffxbld
ec966db095 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D177372
2023-05-08 12:27:01 +00:00
Dennis Jackson
94259a5334 Bug 1831621 - land NSS NSS_3_89_1_RTM UPGRADE_NSS_RELEASE, r=nss-reviewers,jschanck
2023-05-05  Dennis Jackson  <djackson@mozilla.com>

	* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
	Update version numbers for 3.89.1
	[c8e02a52aa19] [NSS_3_89_1_RTM] <NSS_3_89_BRANCH>

	* doc/rst/releases/index.rst, doc/rst/releases/nss_3_89_1.rst:
	Release notes for NSS 3.89.1
	[a307f96a6393] <NSS_3_89_BRANCH>

	* lib/certdb/genname.c:
	Bug 1804505 - Update the technical constraints for KamuSM. r=nss-
	reviewers,jschanck

	Depends on D177241

	[8ecf3800477c] <NSS_3_89_BRANCH>

	* lib/ckfw/builtins/certdata.txt:
	Bug 1822921 - Add BJCA Global Root CA1 and CA2 root certificates
	r=nss-reviewers,jschanck

	[867cbe6fe3dc] <NSS_3_89_BRANCH>

2023-03-09  John M. Schanck  <jschanck@mozilla.com>

	* .hgtags:
	Added tag NSS_3_89_RTM for changeset 4e4ebb9ad0d4
	[10f62eeede42] <NSS_3_89_BRANCH>

Differential Revision: https://phabricator.services.mozilla.com/D177296
2023-05-05 23:38:42 +00:00
ffxbld
840cc0dc3b No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D177148
2023-05-04 12:23:56 +00:00
Noemi Erli
573fdf0764 Backed out changeset e261c34a0fc4 (bug 1829765) for depanding on Bug 1830962 CLOSED TREE 2023-05-03 11:24:23 +03:00
Willy R. Vasquez
4bb6675060 Bug 1829765 - Enable SIMD support in wasm2c for RLBox sandboxing r=glandium,shravanrn CLOSED TREE
Vendor in support for simd-everywhere

Differential Revision: https://phabricator.services.mozilla.com/D176371
2023-04-25 00:20:52 +00:00
Noemi Erli
b021722dbf Backed out changeset e06349a5b0f2 (bug 1829050) for causing build bustages in rlbox_wasm2c_sandbox.hpp 2023-05-03 08:16:13 +03:00
Mike Hommey
d9b2a96f8d Bug 1829050 - Enable STL wrapping (and thus infallible new) for wasm-sandboxed code. r=firefox-build-system-reviewers,shravanrn,andi
Differential Revision: https://phabricator.services.mozilla.com/D175981
2023-05-03 04:05:07 +00:00
Norisz Fay
7aa97db372 Backed out changeset cddc0b331d97 (bug 1829050) for causing bustages on CheckedInt.h CLOSED TREE 2023-05-03 04:31:34 +03:00
Mike Hommey
da624910fc Bug 1829050 - Enable STL wrapping (and thus infallible new) for wasm-sandboxed code. r=firefox-build-system-reviewers,shravanrn,andi
Differential Revision: https://phabricator.services.mozilla.com/D175981
2023-05-03 00:56:33 +00:00
Tom Ritter
a0da369ea4 Bug 1829971: Remove MinGW defines from sdkdecls r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D176732
2023-05-02 17:08:08 +00:00
Tom Ritter
3b00c227c2 Bug 1829971: Remove the MinGW carveout for DynamicCodePolicy r=bobowen
Depends on D176730

Differential Revision: https://phabricator.services.mozilla.com/D176731
2023-05-02 17:08:08 +00:00
owlishDeveloper
0560aeeeac Bug 1822711 - Enable mochitest-plain on Android Fission builds. Disable some of the tests that are currently failing r=jmaher,taskgraph-reviewers,geckoview-reviewers,calu
Differential Revision: https://phabricator.services.mozilla.com/D175077
2023-05-01 21:26:40 +00:00
ffxbld
e1ab640cc7 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D176802
2023-05-01 13:44:42 +00:00
ffxbld
0c8279cac8 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - r=release-managers,dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D176632
2023-04-27 12:13:02 +00:00
Dana Keeler
a246fd3d27 Bug 1828703 - remove dropbox from preloaded pins r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D176332
2023-04-25 16:58:10 +00:00
ffxbld
ae8103a7cf No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D176280
2023-04-24 12:54:54 +00:00
Ryan VanderMeulen
c7ce7b343c Bug 1829425 - Rename the ASAN/TSAN blacklist macros. r=decoder
Differential Revision: https://phabricator.services.mozilla.com/D176201
2023-04-24 12:47:00 +00:00