Christoph Kerschbaumer
ddb2d645e5
Bug 1194526 - Use channel->asycnOpen2 in dom/base/nsScriptLoader.cpp (r=sicking)
2015-10-19 18:33:37 -07:00
Jonas Sicking
d3a92a7fa1
Bug 1195167 part 5: Make FetchDriver use AsyncOpen2. r=bkelly
2015-10-19 18:24:36 -07:00
Jonas Sicking
be2deca017
Bug 1195167 part 1: Let necko handle all protocols. r=bkelly
2015-10-19 18:24:36 -07:00
Jonas Sicking
cc10dd7ad3
Bug 1182571: Make nsXMLHttpRequest use AsyncOpen2. r=ehsan
2015-10-19 11:14:54 -07:00
Jonas Sicking
4316c13003
Bug 1182571: Fix nsILoadInfo->GetContentPolicyType API to be less ambigious. Audit and fix all users of it. r=ckerschb
2015-10-19 11:14:54 -07:00
Christoph Kerschbaumer
643f27c257
Bug 1208559 - Hook up ServicerWorkers with CSP (r=sicking,bkelly,dveditz)
2015-10-18 19:59:18 -07:00
Christoph Kerschbaumer
733163ef2b
Bug 1208559 - Tests. r=bholley
2015-10-18 19:37:40 -07:00
Nathan Froyd
01583602a9
Bug 1207245 - part 6 - rename nsRefPtr<T> to RefPtr<T>; r=ehsan; a=Tomcat
...
The bulk of this commit was generated with a script, executed at the top
level of a typical source code checkout. The only non-machine-generated
part was modifying MFBT's moz.build to reflect the new naming.
CLOSED TREE makes big refactorings like this a piece of cake.
# The main substitution.
find . -name '*.cpp' -o -name '*.cc' -o -name '*.h' -o -name '*.mm' -o -name '*.idl'| \
xargs perl -p -i -e '
s/nsRefPtr\.h/RefPtr\.h/g; # handle includes
s/nsRefPtr ?</RefPtr</g; # handle declarations and variables
'
# Handle a special friend declaration in gfx/layers/AtomicRefCountedWithFinalize.h.
perl -p -i -e 's/::nsRefPtr;/::RefPtr;/' gfx/layers/AtomicRefCountedWithFinalize.h
# Handle nsRefPtr.h itself, a couple places that define constructors
# from nsRefPtr, and code generators specially. We do this here, rather
# than indiscriminantly s/nsRefPtr/RefPtr/, because that would rename
# things like nsRefPtrHashtable.
perl -p -i -e 's/nsRefPtr/RefPtr/g' \
mfbt/nsRefPtr.h \
xpcom/glue/nsCOMPtr.h \
xpcom/base/OwningNonNull.h \
ipc/ipdl/ipdl/lower.py \
ipc/ipdl/ipdl/builtin.py \
dom/bindings/Codegen.py \
python/lldbutils/lldbutils/utils.py
# In our indiscriminate substitution above, we renamed
# nsRefPtrGetterAddRefs, the class behind getter_AddRefs. Fix that up.
find . -name '*.cpp' -o -name '*.h' -o -name '*.idl' | \
xargs perl -p -i -e 's/nsRefPtrGetterAddRefs/RefPtrGetterAddRefs/g'
if [ -d .git ]; then
git mv mfbt/nsRefPtr.h mfbt/RefPtr.h
else
hg mv mfbt/nsRefPtr.h mfbt/RefPtr.h
fi
--HG--
rename : mfbt/nsRefPtr.h => mfbt/RefPtr.h
2015-10-18 01:24:48 -04:00
Wes Kocher
c2b3d9275b
Backed out 2 changesets (bug 1182571) for being a likely cause of the Android S4 errors
...
Backed out changeset e2b3064dcace (bug 1182571)
Backed out changeset 8153ae231d16 (bug 1182571)
2015-10-15 14:07:06 -07:00
Jonas Sicking
2578b19458
Bug 1182571: Make nsXMLHttpRequest use AsyncOpen2. r=ehsan
2015-10-15 12:18:21 -07:00
Jonas Sicking
81a15a3362
Bug 1182571: Fix nsILoadInfo->GetContentPolicyType API to be less ambigious. Audit and fix all users of it. r=ckerschb
2015-10-15 12:18:20 -07:00
Ben Kelly
d803731730
Bug 1210413 P2 Test CORS credentials on cross-origin redirects. r=sicking a=dveditz
2015-10-07 14:33:31 -07:00
Francois Marier
5adc75d084
Bug 1208629 - Properly support data: and blob: URIs with an integrity atribute. r=ckerschb
2015-10-07 11:27:19 -07:00
Carsten "Tomcat" Book
08997000eb
Backed out 2 changesets (bug 1202902
) to recking bug 1202902
to be able to reopen inbound on a CLOSED TREE
...
Backed out changeset 647025383676 (bug 1202902
)
Backed out changeset d70c7fe532c6 (bug 1202902
)
2015-10-07 14:03:21 +02:00
Carsten "Tomcat" Book
e7ef778c9d
Backed out 1 changesets (bug 1202902
) for causing merge conflicts to mozilla-central
...
Backed out changeset cfc1820361f5 (bug 1202902
)
--HG--
extra : rebase_source : 5d3db72337754bc7ab0ed0c30b2896100411ff92
2015-10-07 12:13:45 +02:00
Shu-yu Guo
d06b6030f6
Bug 1202902
- Scripted fix the world.
2015-10-06 14:00:31 -07:00
Ehsan Akhgari
48e01cb303
Tests for bug 1200869; r=sicking
2015-09-29 23:12:52 -04:00
Ehsan Akhgari
1b07208138
Tests for bug 1200856; r=sicking
2015-09-29 23:12:51 -04:00
Christoph Kerschbaumer
fda3fd3cbf
Bug 1192333 - Use channel->ascynOpen2 in dom/xslt/xslt/txMozillaStylesheetCompiler.cpp (r=sicking)
2015-09-28 16:34:47 -07:00
Christoph Kerschbaumer
a28aacf667
Bug 1048048 - add preload content policy types - tests (r=dveditz)
...
CLOSED TREE
--HG--
extra : source : 02c6d6aef163530bafee0d39761f18ca3aa1f40c
extra : amend_source : bff4f1c8ed0fe42addb24774b8c6dd89fe2c7905
2014-10-31 13:37:59 -07:00
Christoph Kerschbaumer
f3e1d73e58
Bug 1048048 - add preload content policy types - csp changes (r=dveditz)
...
--HG--
extra : source : 4f91b10e8be000ee5408461c74099ca96156c0cf
2015-09-20 14:56:34 -07:00
Wes Kocher
cd079d2bf9
Backed out 7 changesets (bug 1048048) for android crashes in various chunks CLOSED TREE
...
Backed out changeset b5abe23a4ea5 (bug 1048048)
Backed out changeset 4f91b10e8be0 (bug 1048048)
Backed out changeset 450d4a13c90e (bug 1048048)
Backed out changeset 6a727c40eb68 (bug 1048048)
Backed out changeset 88c2333ff745 (bug 1048048)
Backed out changeset 740ab1ecd079 (bug 1048048)
Backed out changeset 02c6d6aef163 (bug 1048048)
2015-09-21 09:08:34 -07:00
Christoph Kerschbaumer
b2de9adb18
Bug 1048048 - add preload content policy types - csp changes (r=dveditz)
2015-09-20 14:56:34 -07:00
Christoph Kerschbaumer
47de316d52
Bug 1048048 - add preload content policy types - tests (r=dveditz)
2014-10-31 13:37:59 -07:00
Christoph Kerschbaumer
6d3847c487
Bug 1204703 - Make nsContentSecurityManager scriptable (r=sicking)
...
--HG--
extra : source : 977d5b7ecba32a0617d40c231e2f16963bf4a4ef
2015-09-18 09:27:15 -07:00
Wes Kocher
8414be2356
Backed out 3 changesets (bug 1143922) for landing with the wrong bug number
...
Backed out changeset 309b4d1ab81c (bug 1143922)
Backed out changeset deda472458fd (bug 1143922)
Backed out changeset 977d5b7ecba3 (bug 1143922)
2015-09-18 14:13:33 -07:00
Christoph Kerschbaumer
b01fc3ad90
Bug 1143922 - Make nsContentSecurityManager scriptable (r=sicking)
2015-09-18 09:27:15 -07:00
Christoph Kerschbaumer
796647f603
Bug 1026520 - CSP: Inline report sending into allows - test updates (r=dveditz)
2015-09-17 22:34:49 -07:00
Christoph Kerschbaumer
8001d76219
Bug 1026520 - CSP: Inline report sending into allows - csp changes (r=dveditz)
2015-09-17 22:34:16 -07:00
Ehsan Akhgari
59c135c176
Bug 1198078 - Add support for TYPE_INTERNAL_SERVICE_WORKER; r=ckerschb,tanvi
2015-09-16 19:15:30 -04:00
Chris Peterson
bfd0628cd5
Bug 1203234 - Re-enable -Wshadow warnings in /dom/security. r=ckerschb
2015-09-14 22:54:22 -07:00
Christoph Kerschbaumer
1e5ee64415
Bug 1195162
- Use channel->ascynOpen2 dom/xbl/nsXBLService.cpp (r=sicking)
2015-09-14 18:59:35 -07:00
Ehsan Akhgari
a4ac3ec0b4
Bug 1199049 - Part 1: Move nsCORSListenerProxy.* to necko; r=jduell
...
--HG--
rename : dom/security/nsCORSListenerProxy.cpp => netwerk/protocol/http/nsCORSListenerProxy.cpp
rename : dom/security/nsCORSListenerProxy.h => netwerk/protocol/http/nsCORSListenerProxy.h
2015-09-12 19:20:52 -04:00
Michael Layzell
092e4a4b9e
Bug 1188932 - Allow the User-Agent header to be explicitly set by requests, r=bkelly, r=jgraham
2015-09-12 12:46:09 -04:00
Christoph Kerschbaumer
60c4905182
Bug 1069762 - CSP: blocked-uri in violation reports should not contain sensitive data - tests (r=sstamm)
2014-10-17 14:22:27 -07:00
Richard Barnes
cba82e6dbd
Bug 1198572 - Add telemetry for how often HSTS would fix mixed content problems r=smaug r=tanvi
2015-09-09 15:14:27 -04:00
Francois Marier
14eac63103
Bug 1202027 - Make SRI require CORS loads for cross-origin resources. r=ckerschb
2015-09-09 00:11:38 -07:00
Francois Marier
e510ad6b31
Bug 1202015 - Better document the SRI strings for translators. r=ckerschb
2015-09-09 00:10:25 -07:00
Ehsan Akhgari
6ac40622c3
Bug 1201229 - Return an empty string for a header when an error occurs; r=dragana
...
This fixes nsIHttpChannel::GetRequestHeader() and
nsIHttpChannel::GetResponseHeader() to always empty out their string
argument even when they fail. This prevents programming mistakes of
passing the same string object to multiple of these calls and using the
string value without checking the nsresult error code, since otherwise
the string value may be unchanged from a previous call.
Note that this doesn't affect JS consumers of these APIs since we only
empty out the string argument in case the method fails, which will be
translated to a JS exception, and the JS code will never get to see the
emptied string.
2015-09-08 20:08:35 -04:00
Ehsan Akhgari
978f461b95
Bug 1200869 - Empty the header value for code hygiene; r=sicking
2015-09-02 19:53:35 -04:00
Ehsan Akhgari
a01e0f79fc
Bug 1200856 - Avoid the extra variable to make the string manipulation faster; r=sicking
2015-09-02 19:52:46 -04:00
Nicholas Nethercote
f44287005f
Bug 1198334 (part 1) - Replace the opt-in FAIL_ON_WARNINGS with the opt-out ALLOW_COMPILER_WARNINGS. r=glandium.
...
The patch removes 455 occurrences of FAIL_ON_WARNINGS from moz.build files, and
adds 78 instances of ALLOW_COMPILER_WARNINGS. About half of those 78 are in
code we control and which should be removable with a little effort.
--HG--
extra : rebase_source : 82e3387abfbd5f1471e953961d301d3d97ed2973
2015-08-27 20:44:53 -07:00
Kyle Huey
b930db3a55
Bug 1196592: Make retargeting Fetch to another thread actually work. r=nsm
...
--HG--
extra : rebase_source : 24801ef2546f6aa3d74b9193a104bb35e8103699
2015-08-28 13:49:07 -07:00
Christoph Kerschbaumer
a2daed5950
Bug 1198422 - CSP: Test fallback for nonce-src and hash-src (r=devitz)
2015-08-27 09:02:32 -07:00
Christoph Kerschbaumer
0500c010b8
Bug 1198422 - CSP: Allow nonce to load if default-src is not specified in second policy (r=dveditz)
2015-08-25 16:11:04 -07:00
Ehsan Akhgari
1dda7b7d34
Bug 1194847 - Part 2: Bypass CORS checks if the response of a channel has been synthesized; r=nsm
2015-08-25 21:43:40 -04:00
Francois Marier
f04275bd0b
Bug 1196740 - Consider redirects when looking for SRI-eligibility. r=ckerschb
...
--HG--
rename : dom/security/test/sri/iframe_style_sameorigin.html => dom/security/test/sri/iframe_style_crossdomain.html
rename : dom/security/test/sri/script_crossdomain4.js => dom/security/test/sri/script_crossdomain5.js
rename : dom/security/test/sri/style1.css => dom/security/test/sri/style_301.css
rename : dom/security/test/sri/test_style_sameorigin.html => dom/security/test/sri/test_style_crossdomain.html
2015-08-25 13:38:39 -07:00
Christoph Kerschbaumer
be38f76461
Bug 1096724 - Update csp/test_base-uri to rely on postmessage instead of observers. r=dveditz
2015-08-18 11:42:43 -07:00
Ryan VanderMeulen
ec860a87f6
No bug - Use the correct requestLongerTimeout syntax. a=bustage
2015-08-18 12:53:55 -04:00
Ryan VanderMeulen
210ad6260a
No bug - Request a longer timeout for test_CrossSiteXHR_origin.html due to teetering on the edge of timing out on B2G debug.
2015-08-18 10:39:17 -04:00