gecko-dev/dom
Kate McKinley 547500d5a7 Bug 1246540 - HSTS Priming Proof of Concept. r=honzab
HSTS priming changes the order of mixed-content blocking and HSTS
upgrades, and adds a priming request to check if a mixed-content load is
accesible over HTTPS and the server supports upgrading via the
Strict-Transport-Security header.

Every call site that uses AsyncOpen2 passes through the mixed-content
blocker, and has a LoadInfo. If the mixed-content blocker marks the load as
needing HSTS priming, nsHttpChannel will build and send an HSTS priming
request on the same URI with the scheme upgraded to HTTPS. If the server
allows the upgrade, then channel performs an internal redirect to the HTTPS URI,
otherwise use the result of mixed-content blocker to allow or block the
load.

nsISiteSecurityService adds an optional boolean out parameter to
determine if the HSTS state is already cached for negative assertions.
If the host has been probed within the previous 24 hours, no HSTS
priming check will be sent.

(r=ckerschb,r=mayhemer,r=jld,r=smaug,r=dkeeler,r=jmaher,p=ally)
2016-07-22 18:35:00 +02:00
..
alarm Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
animation merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
apps Backed out changeset 16aa7041c009 (bug 1287107) for causing xpcshell and mac tests 2016-07-22 11:30:23 +02:00
archivereader Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
asmjscache Bug 1264566 - Part 2: Refactor all usage of FileDescriptor. r=valentin 2016-05-27 16:12:51 +08:00
audiochannel Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
base Bug 1246540 - HSTS Priming Proof of Concept. r=honzab 2016-07-22 18:35:00 +02:00
battery Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
bindings Bug 1288581 followup. Remove a bogus comment. DONTBUILD. 2016-07-22 17:20:49 -04:00
bluetooth Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
broadcastchannel Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
browser-element Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
cache Merge mozilla-central to mozilla-inbound 2016-07-22 11:59:06 +02:00
camera Bug 1264566 - Part 2: Refactor all usage of FileDescriptor. r=valentin 2016-05-27 16:12:51 +08:00
canvas Bug 1288872 - verify cairo_scaled_font creation succeeds in SkFontHost_cairo. r=mchang 2016-07-22 21:23:56 -04:00
cellbroadcast Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
console merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
contacts Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
crypto Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
devicestorage Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
downloads Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
encoding Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
events Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
fetch Bug 1264164 - Support Referrer Policy HTTP header. r=jdm 2016-07-19 15:38:26 +08:00
filehandle Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
filesystem Bug 1274959 - Support symlinks in Directory API - part 3 - no loops with symlink in Directory.getFiles(), r=smaug 2016-07-23 10:35:26 +02:00
flyweb backout changeset 1a1d7ef3cb0e (bug 1279479) for causing WebRTC compatibility issues 2016-07-22 10:31:34 -07:00
fmradio Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
gamepad merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
geolocation Merge mozilla-central to mozilla-inbound 2016-07-22 11:59:06 +02:00
grid Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
html Bug 1288681 - Rename HTMLInputElement::directory to HTMLInputElement::allowdirs, r=smaug 2016-07-23 10:20:15 +02:00
icc Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
identity Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
imptests Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
indexedDB Bug 1286795 part 6 - Replace JS_NewRuntime/JS_DestroyRuntime with JS_NewContext/JS_DestroyContext. r=luke,bz 2016-07-23 19:54:19 +02:00
inputmethod Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
inputport Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
interfaces Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
ipc Bug 1246540 - HSTS Priming Proof of Concept. r=honzab 2016-07-22 18:35:00 +02:00
json Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
jsurl Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
locales Bug 471020 - Implement X-Content-Type-Options: nosniff. r=dveditz,bz,mcmanus 2016-07-20 12:22:27 +02:00
manifest Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mathml Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
media Bug 1282142 - Add testcase ensuring persistent-usage-record MediaKeySessions are unsupported by ClearKey. r=gerald 2016-07-22 13:42:31 +12:00
messagechannel Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mobileconnection Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mobileid Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mobilemessage merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
network Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
newapps Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
nfc
notification Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
offline Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
payment Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
performance Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
permission Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
phonenumberutils Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
plugins Bug 1264566 - Part 2: Refactor all usage of FileDescriptor. r=valentin 2016-05-27 16:12:51 +08:00
power Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
presentation Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
promise Bug 1282026 - Add assertions in the DTOR of WorkerHolder - part 3 - PromiseWorkerProxy, r=bkelly 2016-07-18 09:14:14 +02:00
push Bug 1285889 - Moving the ContextualIdentityService.jsm from from browser/components/contextualidentity into tookit/components/contextualidentity. r=baku 2016-07-11 20:03:00 +02:00
quota Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
res
resourcestats Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
secureelement
security Bug 1246540 - HSTS Priming Proof of Concept. r=honzab 2016-07-22 18:35:00 +02:00
settings Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
simplepush
smil Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
speakermanager Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
storage Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
svg Bug 1283539 - Make SVGLength.convertToSpecifiedUnits work for percentage units on outer svg elements. r=dholbert 2016-07-22 18:17:05 +01:00
system Merge mozilla-central to mozilla-inbound 2016-07-22 11:59:06 +02:00
telephony Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
tests Bug 1267479 - Use ContentTask to avoid using intermittent CPOWs in browser_bug396843.js. r=wchen 2016-07-22 16:45:47 -07:00
tethering Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
time Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
tv Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
u2f Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
url merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
voicemail Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
vr Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
wappush
webidl Bug 1288681 - Rename HTMLInputElement::directory to HTMLInputElement::allowdirs, r=smaug 2016-07-23 10:20:15 +02:00
wifi Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
workers Bug 1286795 part 6 - Replace JS_NewRuntime/JS_DestroyRuntime with JS_NewContext/JS_DestroyContext. r=luke,bz 2016-07-23 19:54:19 +02:00
xbl Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
xhr Backed out 3 changesets (bug 1285036) for browser_net_resend.js failures on a CLOSED TREE. 2016-07-21 14:56:01 -04:00
xml Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
xslt Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
xul Bug 1288736 - Add some missing rv.SuppressException(), r=smaug 2016-07-22 16:50:10 +02:00
jar.mn
moz.build Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00