Commit Graph

11104 Commits

Author SHA1 Message Date
ffxbld
2e014b99f8 No bug, Automated HPKP preload list update from host bld-linux64-spot-132 - a=hpkp-update 2017-01-29 08:10:01 -08:00
ffxbld
b60ce9ada6 No bug, Automated HSTS preload list update from host bld-linux64-spot-132 - a=hsts-update 2017-01-29 08:09:59 -08:00
Phil Ringnalda
1b25397681 Merge autoland to m-c, a=merge 2017-01-28 13:07:19 -08:00
ffxbld
f4622c553d No bug, Automated HPKP preload list update from host bld-linux64-spot-249 - a=hpkp-update 2017-01-28 07:15:15 -08:00
ffxbld
7dae055764 No bug, Automated HSTS preload list update from host bld-linux64-spot-249 - a=hsts-update 2017-01-28 07:15:13 -08:00
ffxbld
b36ba7c7b3 No bug, Automated HPKP preload list update from host bld-linux64-spot-015 - a=hpkp-update 2017-01-27 18:39:05 -08:00
ffxbld
474d46a74e No bug, Automated HSTS preload list update from host bld-linux64-spot-015 - a=hsts-update 2017-01-27 18:39:03 -08:00
Wes Kocher
7cd28f7e5d Merge inbound to central, a=merge
MozReview-Commit-ID: HvoljuLV6Gj
2017-01-27 16:37:18 -08:00
Sebastian Hengst
e1d5db133e Backed out changeset e87ae43ca443 (bug 1330326) 2017-01-27 20:59:55 +01:00
Gian-Carlo Pascutto
0d2bf66dfd Bug 1330326 - Make sandboxing policy more configurable via preferences. r=jld
MozReview-Commit-ID: 9P0bSLLKRWp

--HG--
extra : rebase_source : ab7d7da81459bd08c6aec7d7c89949ca7207471f
2017-01-26 19:59:50 +01:00
David Keeler
586b697eca bug 1334321 - add test for nsISecretDecoderRing using existing key database r=Cykesiopka
MozReview-Commit-ID: Fk8bC78QJzo

--HG--
extra : rebase_source : fb32e782530136c41ac40a5c66f35fde9146ab56
2017-01-25 15:34:21 -08:00
Haik Aftandilian
9086ac87fb Bug 1332522 - Part 2 - Remove read restrictions from level 2 policy for file content processes; r=gcp
Update MacSandboxInfo struct to include file system read flag and remove
filesytem read restrictions from the file content process sandbox.

MozReview-Commit-ID: B9LPocvb0W3

--HG--
extra : rebase_source : 7c80335c28dbdb7146d2ad0b447959db5e06cf0f
2017-01-24 15:20:08 -08:00
Franziskus Kiefer
4551817b24 Bug 1334127 - land NSS dbbf303cf467, r=me
--HG--
extra : rebase_source : 0275628dd4cb24c87ce4a59c8d5e60e07a2ada20
2017-01-26 19:49:57 +01:00
Wes Kocher
8fa84ca644 Merge inbound to central, a=merge
MozReview-Commit-ID: BZgxmhS6OtM
2017-01-26 16:19:05 -08:00
David Keeler
d1775338ca bug 1301407 - save PRErrorCode from all NSS initialization calls and include in annotated crash report r=dragana
--HG--
extra : amend_source : e5bf0a9ffc2f6810b44521e3444a308b92bb495e
2017-01-25 13:14:52 -08:00
Sergei Chernov
b3b80907d0 Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler
MozReview-Commit-ID: LcMdKcgBStG

--HG--
extra : rebase_source : 38b2531e9abb8a84d32c437d13fab881f2c49f18
2017-01-09 08:22:28 +02:00
Carsten "Tomcat" Book
182312677f merge mozilla-inbound to mozilla-central a=merge 2017-01-25 13:47:25 +01:00
Florian Quèze
0e0865f4fc Bug 1331599 - script-generated patch to replace removeEventListener calls with the once option when possible, r=jaws. 2017-01-25 07:01:52 +01:00
Jonathan Hao
fabf923b4c Bug 1290529 - Clear HSTS and HPKP for subdomains in ForgetAboutSite. r=keeler,MattN
--HG--
extra : rebase_source : 98c1da830f74f96f90092d81b0d24cfef2ffe483
2017-01-24 11:14:36 +08:00
Jonathan Hao
77aaedadde Bug 1311645 - Test that ocsp is not separated for containers. r=keeler
--HG--
extra : rebase_source : 3d234e076bfe8bf625574ec46731f706561f514b
2017-01-24 18:06:25 +08:00
David Parks
990402c301 Bug 1317735 - Consolidate env vars for logging. r=jimm
Assigns the preference security.sandbox.logging.enabled and the environment variable MOZ_SANDBOX_LOGGING to control whether or not sandbox violations are logged.  The pref defaults to true.  On Linux, only the environment variable is considered.

--HG--
extra : rebase_source : f67870a74795228548b290aec32d08552c068874
2017-01-23 12:46:49 -08:00
Jonathan Hao
05723f22a1 Bug 1115712 - make DataStorage for HPKP and HSTS enumerable via xpcom. r=Cykesiopka,keeler
MozReview-Commit-ID: GEOtuTAiPIX

--HG--
extra : rebase_source : 88b060d57e269e238d9283ac386b9ffff9ff2764
2017-01-12 14:58:04 +08:00
Franziskus Kiefer
3594725777 Bug 1317947 - land NSS ee21c9892907, r=me 2017-01-21 14:23:56 +01:00
David Keeler
b6126b7548 bug 1332131 - regenerate psm xpcshell test certificates to avoid failures when they expire r=Cykesiopka
MozReview-Commit-ID: 5rzoVC6fpRO

--HG--
extra : rebase_source : 23d67dd9de7473db29d2e85f1c30aa4174ae8a8c
2017-01-18 16:15:13 -08:00
Mark Banner
16e6d381ac Bug 503613 - Remove old 'tail =' lines from xpcshell.ini files; r=gps
MozReview-Commit-ID: 62Hp5ISxowJ

--HG--
extra : rebase_source : daa8efb3409031fea553f4fd0c9d0746e38dc308
extra : histedit_source : b4c23aacf678ba0d0ac9c09191a7c494ead11a08
2017-01-18 10:30:39 +00:00
Carsten "Tomcat" Book
709bd29d0a merge mozilla-inbound to mozilla-central a=merge 2017-01-19 16:05:22 +01:00
Carsten "Tomcat" Book
54bb953576 Backed out changeset 2164277367cc (bug 1317947) for causing timeouts in devtools tests on a CLOSED TREE
--HG--
extra : amend_source : f93373ccd4b50914ad5ef3fdf64cceab78d66c37
2017-01-19 10:08:33 +01:00
Franziskus Kiefer
e37236bc1f Bug 1317947 - land NSS ea43fcc316e1, r=me
--HG--
extra : rebase_source : dcb24fa91fba4e99e4bc2cb254fe4f7d3a66be2f
2017-01-19 08:52:18 +01:00
David Parks
033c45c4ef Bug 1306239 - Add pref to toggle OS X sandbox violation debugging, default on. r=haik
Turns on sandbox denial logging if security.sandbox.logging.enabled is true.

Removes most sandbox violation messages but some related messages generated
by other processes will still get through.

--HG--
extra : rebase_source : 4f06e70d53b0f500cc85a869c5bd7f8ea20d8341
2017-01-17 15:47:13 -08:00
Cykesiopka
df8dcae128 Bug 1330365 - Use mozilla::TimeStamp instead of NSPR's PRIntervalTime for OCSP timeout code. r=keeler
mozilla::TimeStamp is generally superior to PRIntervalTime, and switching lets
us get rid of yet another NSPR dependency.

This patch also:
 1. Gets rid of code in nsNSSHttpRequestSession::createFcn() that limits the
    max OCSP timeout. This is a relic from when NSS was used for OCSP requests,
    and is no longer necessary.
 2. Converts all uses of PR_NOT_REACHED() to MFBT asserts while we're nearby.

MozReview-Commit-ID: KvgOWWhP8Km

--HG--
extra : rebase_source : ea832a1acc4423cf6cfc98862af6b1c29a83ce56
2017-01-14 13:12:43 +08:00
Cykesiopka
6f68bd00b2 Bug 1329248 - Enable 26 more ESLint rules for PSM. r=mgoodwin
The "no-mixed-spaces-and-tabs" rule is also disabled since there's no point
having it enabled when the "no-tabs" rule is also enabled.

MozReview-Commit-ID: 49addnnmmvf

--HG--
extra : rebase_source : 577d89ddc6b487a6f157b40caacc0572c1249eb3
2017-01-14 13:18:03 +08:00
ffxbld
3cf75d73aa No bug, Automated HPKP preload list update from host bld-linux64-spot-418 - a=hpkp-update 2017-01-18 06:39:35 -08:00
ffxbld
29e1df754b No bug, Automated HSTS preload list update from host bld-linux64-spot-418 - a=hsts-update 2017-01-18 06:39:33 -08:00
Ryan VanderMeulen
a056b599fd Merge inbound to m-c. a=merge 2017-01-17 11:30:07 -05:00
ffxbld
3c33d09d45 No bug, Automated HPKP preload list update from host bld-linux64-spot-142 - a=hpkp-update 2017-01-17 06:55:11 -08:00
ffxbld
dc22f9d129 No bug, Automated HSTS preload list update from host bld-linux64-spot-142 - a=hsts-update 2017-01-17 06:55:09 -08:00
Florian Quèze
85611a7b6d Bug 1331081 - script generated patch to omit addEventListener/removeEventListener's third parameter when it's false, r=jaws.
--HG--
extra : rebase_source : a22344ee1569f58f1f0a01017bfe0d46a6a14602
2017-01-17 11:50:25 +01:00
Carsten "Tomcat" Book
a7c09b70d4 merge autoland to mozilla-central a=merge 2017-01-16 16:34:19 +01:00
ffxbld
73ce5f2acc No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update 2017-01-16 06:42:57 -08:00
ffxbld
7b3b695e56 No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update 2017-01-16 06:42:55 -08:00
ffxbld
a54b17c3c5 No bug, Automated HPKP preload list update from host bld-linux64-spot-261 - a=hpkp-update 2017-01-15 06:49:53 -08:00
ffxbld
721dc932b9 No bug, Automated HSTS preload list update from host bld-linux64-spot-261 - a=hsts-update 2017-01-15 06:49:51 -08:00
Phil Ringnalda
082d6bd9df Merge m-i to m-c, a=merge
MozReview-Commit-ID: 1NtOkt6oQ7d
2017-01-14 09:38:58 -08:00
ffxbld
de2616b743 No bug, Automated HPKP preload list update from host bld-linux64-spot-223 - a=hpkp-update 2017-01-14 07:05:18 -08:00
ffxbld
054f634242 No bug, Automated HSTS preload list update from host bld-linux64-spot-223 - a=hsts-update 2017-01-14 07:05:16 -08:00
ffxbld
ef80e5ccca No bug, Automated HPKP preload list update from host bld-linux64-spot-222 - a=hpkp-update 2017-01-13 06:58:30 -08:00
ffxbld
b49f0182ad No bug, Automated HSTS preload list update from host bld-linux64-spot-222 - a=hsts-update 2017-01-13 06:58:29 -08:00
Chris Peterson
4d95c4db20 Bug 1330496 - Part 1: Remove MOZ_WIN_INHERIT_STD_HANDLES_PRE_VISTA support for inheriting stdout/stderr handles on XP. r=bobowen
MozReview-Commit-ID: B7qJdK2sjv5

--HG--
extra : rebase_source : 4053054009359c0a775dae5ad5e24ba74b4c7c7b
extra : amend_source : 3231886a86fd03ac52f3717e22f33a7b4dc41f54
extra : histedit_source : 4533b894f9894bf5c883943bc53b260faa2ae8b1
2017-01-10 23:50:16 -08:00
Phil Ringnalda
73346ee021 Merge m-c to autoland 2017-01-15 12:45:58 -08:00
Cykesiopka
5111ba6981 Bug 1329237 - Avoid non-smart string IDL types in nsISiteSecurityService.idl. r=keeler
Smart string IDL types give us nsA[C]String in C++ code, which is safer than
raw char strings.

MozReview-Commit-ID: KJ3Z4qK9i61

--HG--
extra : rebase_source : a24101d876d1120bd3b6c757fc48a2b76a8b489f
2017-01-14 13:10:06 +08:00