mstoltz%netscape.com
40dc18d415
Fixed bug in DOM security checks, fixes bug 37907, 23516. Added security check for htmlelement.innerhtml, fixes 39083. Added location check to BASE HREF=, fixes 35859. r=vidur. Added check to style= tag, fixes 16858, r=pierre.
2000-05-26 23:28:40 +00:00
cls%seawood.org
a8000b8bb5
Mass replace of -lmozjs with $(MOZ_JS_LIBS) needed for OS/2 and consistency.
2000-05-17 06:45:45 +00:00
mstoltz%netscape.com
ead929a4a4
Allow scripting of plugins by untrusted web scripts. Bug 36375.
2000-05-17 02:38:22 +00:00
mstoltz%netscape.com
11718e9f56
Removing archive attribute from nsCertificatePrincipal. This will not be used.
2000-05-16 22:37:38 +00:00
mstoltz%netscape.com
e260596697
Fixing bustage in nsCertificatePrincipal.cpp
2000-05-16 04:15:56 +00:00
mstoltz%netscape.com
e0fc50a6d4
Fixes for 32878, 37739. Added PR_CALLBACK macros. Changed security.principal pref syntax to a nicer syntax. Removed "security.checkxpconnect" hack.
2000-05-16 03:40:51 +00:00
danm%netscape.com
0d46d1e3f2
correct typo in last checkin
2000-05-14 10:38:48 +00:00
danm%netscape.com
67209592fb
new chrome hierarchy
2000-05-14 10:37:30 +00:00
danm%netscape.com
c0ae0cbbf6
top-level chrome dirs are now packages,locales,skins
2000-05-13 21:29:08 +00:00
scc%netscape.com
383fdc142e
string backsliding. r=mjudge
2000-05-12 07:53:02 +00:00
mstoltz%netscape.com
85d27fc1b1
added files: mozilla/caps/idl/nsISignatureVerifier.idl
2000-05-10 01:50:00 +00:00
mstoltz%netscape.com
74488c46a3
Removed dependency of libjar on psm-glue, bug 36853. Fixed out parameter type problem in PSMComponent::HashEnd
2000-05-10 01:49:33 +00:00
thayes%netscape.com
e4c6cab6d9
Replace implementation of nsISupports with thread-safe version. This allows
...
SSL/HTTPS operations to complete on debug builds with thread-safety checking.
r=bryner
2000-05-03 00:04:48 +00:00
mstoltz%netscape.com
ad755522c3
Added archive attribute to nsICertificatePrincipal...part of fix for 37481.
2000-05-01 23:39:51 +00:00
nisheeth%netscape.com
7e37fb4356
1) Added support for loading an XML document "out of band" from script and manipulating it via dom interfaces.
...
2) Fixed compile errors in XSL glue code that happened after the recent nsString landing by scc.
3) Added a check for a null URI before de-referencing it in nsCodeBasePrincipal.cpp.
2000-05-01 06:58:53 +00:00
mstoltz%netscape.com
0274ea8235
Fix bustage on Sun and HP compilers...was casting void* to PRInt16. Added intermediate cast.
2000-04-26 20:54:02 +00:00
mstoltz%netscape.com
9bb975256e
Fixes for 27010, 32878, and 32948.
2000-04-26 03:50:07 +00:00
jband%netscape.com
84c0a0901a
Do something safe if this call fails
2000-04-25 04:50:49 +00:00
jefft%netscape.com
da50b52420
fixed bug 17100 - [FEATURE] enabled partial message download for pop3
2000-04-25 01:48:00 +00:00
mstoltz%netscape.com
57feeae5ec
Backing out changes until I can figure out why it's crashing on startup.
2000-04-23 21:25:39 +00:00
mstoltz%netscape.com
62bffdd26e
Fixes for bugs 27010, 32878, 32948.
2000-04-23 20:30:29 +00:00
danm%netscape.com
d0d8c4d5c3
dist...chrome restructuring
2000-04-19 21:42:30 +00:00
scc%netscape.com
e84a7d5347
making string conversions explicit
2000-04-15 05:29:33 +00:00
norris%netscape.com
e356de6476
Fix
...
28390, 28866, 34364
r=brendan@mozilla.org
35701
r=jst@netscape.com
2000-04-14 03:14:53 +00:00
mkaply%us.ibm.com
16e912ab31
# 34082
...
r= warren@netscape.com
OS/2 Visual Age build - Adding PR_CALLBACK to some functoins for linkage
2000-04-05 02:32:07 +00:00
cls%seawood.org
f6740baa20
Moved static MOZ_COMPONENT_NSPR_LIBS, MOZ_COMPONENT_XPCOM_LIBS, MOZ_COMPONENT_LIBS definitions from configure.in to config.mk. Replaced -lxpcom in Makefiles to $(XPCOM_LIBS) so that we can optionally link against -lboehm when needed. Bug #31287
2000-04-04 04:46:38 +00:00
scc%netscape.com
c05019b2a8
making string conversions explicit
2000-04-01 00:39:02 +00:00
scc%netscape.com
4ea707a4ba
make string conversions explicit
2000-04-01 00:36:50 +00:00
scc%netscape.com
89f8378252
turn on source browser in debug build; moved camelot added files into their right spots
2000-04-01 00:32:53 +00:00
mstoltz%netscape.com
efa5624e14
Fixed bug 30915 using nsAggregatePrincipal. r=norris
2000-03-31 00:31:18 +00:00
warren%netscape.com
727f312b32
Necko API changes: primarily nsIChannel, changing initialization parameters to accessors. Got javascript: evaluation to happen at the right time (when AsyncRead is called) as well as on the right thread.
2000-03-29 03:58:50 +00:00
scc%netscape.com
11c6f51246
small changes to clients of string conversion APIs
2000-03-26 01:19:41 +00:00
norris%netscape.com
4eb52aa84b
Fix
...
32088 Circumventing Same Origin security policy using javascript: URLs
32040 about: can't be link
Also remove deprecated method
r=mstoltz
2000-03-24 22:15:37 +00:00
norris%netscape.com
593a12b912
Fix bug 32904 Asserts at startup in nsScriptSecurityManager.cpp
...
r=mstoltz
2000-03-23 23:42:46 +00:00
mstoltz%netscape.com
e5f86d1226
heckLoadURI now handles jar: URL's correctly. r=norris
2000-03-23 04:37:37 +00:00
norris%netscape.com
ea9d7682c1
Fix 31998 nsScriptSecurityManager not thread safe breaks table regress
2000-03-21 23:12:16 +00:00
mstoltz%netscape.com
d655019842
added files: mozilla/caps/idl/nsIAggregatePrincipal.idl
2000-03-21 04:06:47 +00:00
mstoltz%netscape.com
672a1c6484
added files: mozilla/caps/src/nsAggregatePrincipal.cpp
2000-03-21 04:06:33 +00:00
norris%netscape.com
7d053b70b0
Adding nsAggregatePrincipal support. r=norris
2000-03-21 04:05:35 +00:00
norris%netscape.com
060e388a6b
Files:
...
caps/idl/nsICertificatePrincipal.idl
caps/idl/nsIPrincipal.idl
caps/src/nsBasePrincipal.cpp
Implement the ability to manipulate multiple capabilties simultaneously.
r=mstoltz@netscape.com
Files:
caps/src/nsCodebasePrincipal.cpp
Codebase equality should be based upon origin, not full path.
r=mstoltz@netscape.com
Files:
caps/src/nsScriptSecurityManager.cpp
Change URI checking to deny based upon scheme rather than allow based upon
scheme for greater flexibility.
r=mstoltz@netscape.com
Files:
dom/public/nsDOMPropEnums.h
dom/public/nsDOMPropNames.h
dom/src/base/nsGlobalWindow.cpp
modules/libpref/src/init/all.js
Fix bug 20469 Seeing JS functions and global variables from arbitrary host
r=vidur@netscape.com
Files:
dom/src/base/nsJSUtils.cpp
dom/src/base/nsJSUtils.h
dom/src/base/nsJSEnvironment.cpp
dom/tools/JSStubGen.cpp
layout/base/src/nsDocument.cpp
layout/html/content/src/nsGenericHTMLElement.cpp
Improve performance by removing NS_WITH_SERVICE call for every DOM access.
Propagate XPCOM failure codes out properly.
r=vidur@netscape.com
Files:
layout/html/document/src/nsFrameFrame.cpp
Fix 27387 Circumventing Same Origin security policy using setAttribute
r=vidur@netscape.com
2000-03-11 06:32:42 +00:00
norris%netscape.com
e81e4f8fa6
Fix 29419 nsScriptSecurityManager should do casinsensitive compaires
...
Patch submitted by andreas.otte@primus-online.de
r=norris,a=jar
2000-03-08 04:57:05 +00:00
bryner%uiuc.edu
f28f63a5d7
This allows clicked "finger:" links to work. r=norris@netscape.com.
2000-02-26 23:37:08 +00:00
norris%netscape.com
bdef85f8cd
Fix meta refresh problems with etrade, etc.
...
r=mstoltz
a='do the right thing'
2000-02-24 19:17:59 +00:00
norris%netscape.com
d64387736b
Fix 28612 META Refresh allowed in Mail/News
...
r=mstoltz,a=jar
Fix 28658 File upload vulnerability
r=vidur,a=jar
2000-02-23 22:34:40 +00:00
norris%netscape.com
5a9d717919
Work around bug where dialog message is truncated.
...
a=chofmann,r=mstoltz
2000-02-19 00:37:02 +00:00
norris%netscape.com
5567200a75
Fix 18439 windows.status allows reading links
...
r=mstoltz
2000-02-11 04:18:39 +00:00
norris%netscape.com
96add55c93
For some reason the sun compiler doesn't like the ?: assignment.
2000-02-10 06:24:38 +00:00
norris%netscape.com
72152baded
Fix bad separator in Makefile problem.
2000-02-10 05:33:49 +00:00
norris%netscape.com
2b4b436f5f
Fix 25062 Reload vulnerability
...
25206 Reload vulnerability #2
Implement grant dialogs and persistence for capabilities.
most r=mstoltz, some code from morse w/ r=norris
2000-02-10 04:56:56 +00:00
scc%netscape.com
73802d6f2e
Pro5 update
2000-02-07 23:06:04 +00:00
