Luke Wagner
|
dd8cec0710
|
Bug 667915 - Don't let content JS consume all the stack and cause chrome JS to OOM (r=waldo,mrbkap)
|
2011-06-30 09:26:56 -07:00 |
|
Matheus Kerschbaum
|
27331333ef
|
Bug 662000 part 2: Remove XPC_IDISPATCH_SUPPORT from the build-system and XPConnect. r=mrbkap
--HG--
extra : rebase_source : c456802fe36eef1e49381be996dbbdf820781206
|
2011-06-22 11:56:47 -04:00 |
|
Masayuki Nakano
|
eafdcc3af5
|
Bug 660770 caps should use mozilla::Preferences r=roc+jst
|
2011-06-20 12:00:16 +09:00 |
|
Blake Kaplan
|
e73d3d7ecd
|
Fix bug 657267. r=bz
|
2011-05-19 13:31:54 +02:00 |
|
Luke Wagner
|
7371ad00ed
|
Bug 549143 - fatvals
|
2010-07-14 23:19:36 -07:00 |
|
Dan Witte
|
7c610ca8ac
|
Bug 564048 - Nix security checks in nsPrefBranch. r=sicking, sr=jst
|
2010-06-08 16:43:54 -07:00 |
|
Peter Van der Beken
|
df91a46a76
|
Fix for bug 560199 (Link XPConnect and caps into layout). r=jst.
--HG--
extra : rebase_source : 5141822e9d560019ffc1e0cb0264782aa8aa7a99
|
2010-04-11 15:55:24 +02:00 |
|
Sid Stamm
|
1090529f8c
|
bug 515443 CSP no-eval support. r=mrbkap,brendan
|
2010-03-08 00:24:50 -08:00 |
|
Jonas Sicking
|
893023f46a
|
Bug 543696: Remove unused nsIScriptSecurityManager::CheckConnect. r/sr=mrbkap
|
2010-02-02 02:29:15 -08:00 |
|
Sid Stamm
|
7252ce7760
|
Bug 515437 CSP connection code, r=jst,dveditz sr=jst
|
2010-01-22 13:38:21 -08:00 |
|
Daniel Veditz
|
153553d9b6
|
Backed out changeset a6ce37b09cf5 because of possible Tp4 perf hit
|
2010-01-14 17:19:11 -08:00 |
|
Sid Stamm ext:(%2C%20Brandon%20Sterne%20%3Cbsterne%40mozilla.com%3E)
|
f2cab6a506
|
bug 515433, bug 515437: Content Security Policy (CSP) core
|
2010-01-13 14:18:24 -08:00 |
|
Blake Kaplan
|
7050590b13
|
Bug 504021 - Add an API to the script security manager to clamp principals for a given context. r=jst/bzbarsky sr=dveditz
|
2009-08-21 18:20:20 -07:00 |
|
Blake Kaplan
|
27e754d4d0
|
Bug 502959 - Restore code to make caps allow wrapping same-origin wrappedjs objects. r=jst sr=bzbarsky
|
2009-08-06 20:26:33 -07:00 |
|
Blake Kaplan
|
79905bec13
|
Bug 493074 - Compute fewer things to try to clear up a performance regression. r+sr=jst
|
2009-05-14 15:17:56 -07:00 |
|
Blake Kaplan
|
1942f8e50b
|
Bug 483672 - Give regular JS objects that have been reflected into C++ a security policy that follows the same-origin model. Also teach caps about "same origin" for these cases. r=jst sr=bzbarsky
|
2009-05-13 15:01:01 -07:00 |
|
Mook
|
fa1eb8e272
|
Bug 472032 - [win64] sizeof(long) != sizeof(void*) assertion in nsScriptSecurityManager.cpp; changed SecurityLevel to use PRWord, clarified assertion on the protected code; r+sr=dveditz
|
2009-02-26 18:31:17 +01:00 |
|
Dan Mosedale
|
e4aa8b0d67
|
Remove MailNews special casing from nsScriptSecurityManager (bug 374577), r+sr=bzbarsky
|
2009-02-17 20:32:57 -08:00 |
|
Daniel Holbert
|
4301671b45
|
Bug 473236 - Remove executable bit from files that don't need it. (Only changes file mode -- no code changes.) r=bsmedberg
|
2009-01-21 22:55:08 -08:00 |
|
Igor Bukanov
|
4ecbd37ca7
|
Bug 459656 - Implementing nsIThreadJSContextStack in nsXPConnect. r+sr=mrbkap
|
2008-10-14 16:16:25 +02:00 |
|
Arpad Borsos
|
c72ef7d248
|
Bug 456388 - Remove PR_STATIC_CALLBACK and PR_CALLBACK(_DECL) from the tree; r+sr=brendan
|
2008-10-10 17:04:34 +02:00 |
|
Ben Newman
|
97433a48ab
|
Bug 454850. Make sure that whenever nsPrincipal::Equals would return true for a pair of principals their nsPrincipal::GetHashValue returns are also equal. r+sr=bzbarsky
|
2008-10-08 09:16:27 -04:00 |
|
Arpad Borsos
|
5a19e3346c
|
Bug 398946 - Remove JS_STATIC_DLL_CALLBACK and JS_DLL_CALLBACK from the tree; r=(benjamin + bent.mozilla)
|
2008-09-07 00:21:43 +02:00 |
|
jonas@sicking.cc
|
ab63fc8524
|
Followup patch to bug 425201. Make sure to throw if xhr.open is called with an illegal uri. Also restore the nsIScriptSecurityManager.CheckConnect API as soap still uses it
|
2008-04-18 10:35:55 -07:00 |
|
jonas@sicking.cc
|
ec7a19c8b9
|
Allow XMLHttpRequest and document.load load files from subdirectories. r/sr=dveditz
|
2008-04-08 17:38:12 -07:00 |
|
jst@mozilla.org
|
a4d3a2e2e3
|
Landing followup fix for bug 402983 and re-enabling the new stricter file URI security policies. r+sr=bzbarsky@mit.edu
|
2008-03-22 09:50:47 -07:00 |
|
jst@mozilla.org
|
29a96a03b8
|
Landing fix for bug 402983. Make security checks on file:// URIs symmetric. Patch by dveditz@cruzio.com, r=jonas@sicking.cc,bzbarsky@mit.edu. jst@mozilla.org
|
2008-03-20 21:39:08 -07:00 |
|
jonas@sicking.cc
|
9552bd91fc
|
Bug 413161: Make nsIPrincipal::Origin ignore changes to document.domain. r/sr=dveditz
|
2008-03-18 17:27:56 -07:00 |
|
bzbarsky@mit.edu
|
94a044f0b1
|
Finally kill off CheckSameOriginPrincipal, fix remaining callers to do the checks they really want to be doing. Fix screw-up in nsPrincipal::Equals if one principal has a cert and the other does not. Bug 418996, r=mrbkap,dveditz, sr=jst
|
2008-03-18 14:14:49 -07:00 |
|
jonas@sicking.cc
|
28ea51311b
|
Bug 416534: Clean up cross-site xmlhttprequest security checks. With fixes to tests this time. r/sr=peterv
|
2008-02-26 19:45:29 -08:00 |
|
myk@mozilla.org
|
7aff03fc46
|
backing out fix for bug 416534 as potential cause of mochitest failure
|
2008-02-26 19:23:36 -08:00 |
|
jonas@sicking.cc
|
42bbc8327e
|
Bug 416534: Clean up cross-site xmlhttprequest security checks. r/sr=peterv
|
2008-02-26 18:17:49 -08:00 |
|
jst@mozilla.org
|
892f0acecf
|
Fixing bug 413767. Make caps use faster JS class/parent/private/proto accessors. r=mrbkap@gmail.com, sr=brendan@mozilla.org
|
2008-01-29 12:51:01 -08:00 |
|
benjamin@smedbergs.us
|
b3e87aa63b
|
Bug 411327 - nsIXPCNativeCallContext should not inherit from nsISupports, r=mrbkap, a=schrep
|
2008-01-15 07:50:57 -08:00 |
|
jst@mozilla.org
|
b30b544b5f
|
Fixing bug 408009. Make doGetObjectPrincipal() faster. r+sr=bzbarsky@mit.edu, r+a=brendan@mozilla.org
|
2007-12-12 15:02:25 -08:00 |
|
bzbarsky@mit.edu
|
e252fc2b15
|
Somewhat reduce the amount of memory an nsPrincipal allocates in the common case. Bug 397733, r+sr+a=jst
|
2007-09-28 07:31:04 -07:00 |
|
bzbarsky@mit.edu
|
5983f838e4
|
Make the nsISerializable implementation of nsPrincipal actually work. This makes it possible to save principal objects to a stream and read them back. Bug 369566, r=dveditz+brendan, sr=jst, a=jst
|
2007-09-17 15:18:28 -07:00 |
|
dveditz@cruzio.com
|
2940b2f998
|
bugs 230606 and 209234: add options to restrict file: URI same-origin policies, r+sr=jst, blocking+=pavlov
|
2007-09-06 00:02:57 -07:00 |
|
jwalden@mit.edu
|
6d7584839a
|
Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros.
|
2007-07-08 00:08:04 -07:00 |
|
bzbarsky@mit.edu
|
434b4cf8db
|
Optimize immutability of codebase/domain a little bit. Bug 380475, r=dveditz, sr=biesi
|
2007-06-18 08:07:02 -07:00 |
|
benjamin@smedbergs.us
|
baab01ada6
|
Bug 376636 - Building with gcc 4.3 and -pendatic fails due to extra semicolons, patch by Art Haas <ahaas@airmail.net>, rs=me
|
2007-04-23 07:21:53 -07:00 |
|
dbaron@dbaron.org
|
e7bb1b1c38
|
Remove GetKeyPointer method from nsTHashtable key types. b=374906 r=bsmedberg
|
2007-03-27 08:34:59 -07:00 |
|
dbaron@dbaron.org
|
d98d9fdec5
|
Remove unused getKey callback from PLDHashTableOps/JSDHashTableOps. b=374906 r=bsmedberg
|
2007-03-27 08:33:38 -07:00 |
|
hg@mozilla.com
|
05e5d33a57
|
Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,
|
2007-03-22 10:30:00 -07:00 |
|
bzbarsky%mit.edu
|
730516b0a1
|
Remove securityCompareURIs() from nsIScriptSecurityManager. Bug 327243, r+sr=jst
|
2006-11-14 22:46:45 +00:00 |
|
bzbarsky%mit.edu
|
0a3a624149
|
Make it possible for protocol handlers to configure how CheckLoadURI should
treat them via their protocol flags. Remove the protocol list we used before.
Bug 120373, r=dveditz, sr=darin
|
2006-11-10 23:49:08 +00:00 |
|
bzbarsky%mit.edu
|
f78182b042
|
Make GetOrigin dig into nested URIs. Bug 336303, r=dveditz, sr=jst
|
2006-05-12 00:05:40 +00:00 |
|
bzbarsky%mit.edu
|
3aaa1fe7df
|
Disable optimization that relies on invariants we don't maintain. Bug 317240
wallpaper, r+sr=jst
|
2006-05-04 15:23:43 +00:00 |
|
bzbarsky%mit.edu
|
25ab5fffef
|
Create a powerless non-principal and start using it. Bug 326506, r=mrbkap,
sr=dveditz
|
2006-04-02 20:58:26 +00:00 |
|
bzbarsky%mit.edu
|
7e4ec9da94
|
Followup fix for bug 307867 -- make sure to update our pointers to hashtable
entries when the entries move. r=dveditz, sr=brendan
|
2006-02-24 04:38:46 +00:00 |
|