gecko-dev/dom
Bobby Holley 8fb4fb3d6c Bug 1393791 - Stop unbinding native-anonymous content off a script runner. r=emilio
The failure mode in the attached crashtest is an inconsistency in the flattened
tree. Specifically, we null out mVideoControls in an nsVideoFrame, but defer
the UnbindFromTree call on that NAC element, which measn that its mParent still
points to the nsVideoFrame's mContent. Because all this stuff runs off of script
runners, and the anonymous content destroyer is not guaranteed to run before
other potential script runners, we end up running arbitrary script while the
tree mismatch exists. This script calls back into ProcessPendingRestyles, which
causes trouble.

We could build a separate deferral mechanism, but it's not clear that we actually
need to defer the unbind anymore. The deferred unbind was added in bug 489008,
which predated a lot of simplifications in layout/dom interaction.

MozReview-Commit-ID: 1JYAhiXKVJC
2017-08-27 15:29:36 -07:00
..
animation Bug 1391803 - Use nsStringFwd.h for forward declaring string classes. r=froydnj 2017-08-16 16:48:52 -07:00
asmjscache
audiochannel Bug 1388236 - Remove now obsolete AudioChannelConfig in favour of AudioPlaybackConfig. r=alwu 2017-08-10 13:00:09 +12:00
base Bug 1393791 - Stop unbinding native-anonymous content off a script runner. r=emilio 2017-08-27 15:29:36 -07:00
battery
bindings Bug 1389510 part 3 - Remove getProperty/setProperty hooks from ClassOps. r=evilpie 2017-08-25 10:12:16 +02:00
broadcastchannel
browser-element Bug 1391371 - turn on non-e10s tests for windows7-debug. r=ahal 2017-08-17 15:46:03 -04:00
cache Bug 1320301 - Add partial support to sqlite3_interrupt. r=asuth 2017-07-31 22:27:23 +02:00
canvas Backed out changeset e774700fe070 (bug 1392787) for build bustage a=backout CLOSED TREE 2017-08-24 13:58:52 -07:00
commandhandler
console Bug 1391803 - Use nsStringFwd.h for forward declaring string classes. r=froydnj 2017-08-16 16:48:52 -07:00
credentialmanagement Bug 1384307 - Set WebAuthn PublicKeyCredential's "id" and "type" fields r=keeler 2017-07-25 15:03:59 -07:00
crypto
encoding Bug 1384835 (part 3, attempt 2) - Remove the Preferences::Get*CString() variants that return nsAdoptingCString. r=froydnj. 2017-07-31 14:28:48 +10:00
events Bug 1391803 - Use nsStringFwd.h for forward declaring string classes. r=froydnj 2017-08-16 16:48:52 -07:00
fetch Bug 1379631 - Turn off OMT delivery for FetchDriver until bug 1380255 lands. The fix for this bug makes some test fail because of FetchDriver. r=mayhemer 2017-08-01 15:05:51 -04:00
file Backed out changeset 685802013f43 (bug 1389460) for OS X bustage at widget/cocoa/nsMenuX.mm:364: no member named 'DispatchDOMEvent' in 'nsIContent'. r=backout 2017-08-11 17:46:42 +02:00
filehandle
filesystem
flyweb Bug 1382172 - Name nsITimerCallback instances in native implementation. r=billm 2017-07-27 02:18:20 +08:00
gamepad Bug 1352410 - Add a preference to enable or disable haptic feedback for gamepads; r=Lenzak 2017-07-27 17:55:16 +08:00
geolocation Bug 1382172 - Name nsITimerCallback instances in native implementation. r=billm 2017-07-27 02:18:20 +08:00
grid
html Bug 1393791 - Stop unbinding native-anonymous content off a script runner. r=emilio 2017-08-27 15:29:36 -07:00
imptests
indexedDB Bug 1389510 part 3 - Remove getProperty/setProperty hooks from ClassOps. r=evilpie 2017-08-25 10:12:16 +02:00
interfaces Bug 1383293 - Add a new readonly attribute topLevelPrincipal in nsIPaymentRequest for UI support. r=baku 2017-08-23 14:26:51 +08:00
ipc Merge m-c to autoland, a=merge 2017-08-25 17:32:33 -07:00
json Bug 1387788 - Remove [deprecated] methods from nsIJSON. r=Ehsan 2017-08-06 10:25:15 +09:00
jsurl Bug 1390428 (part 9) - Remove nsXPIDLCString. r=erahm. 2017-08-17 15:29:03 +10:00
locales Bug 1391933 - Fix localization issues in Kill Add-on dialogs, r=kmag 2017-08-20 10:52:32 +02:00
manifest Bug 1375125 - Stop using nsILocalFile in the tree. r=froydnj 2017-08-04 17:49:22 +09:00
mathml
media Merge m-i to m-c, a=merge 2017-08-26 18:18:02 -07:00
messagechannel Bug 1378930 - Part 2: Remove the aName parameter from SchedulerGroup/DocGroup/DispatcherTrait. r=billm 2017-07-26 16:13:35 +08:00
network
notification Bug 1389057 - Inherit NotificationTelemetryService from nsIObserver r=kitcambridge 2017-08-16 01:24:31 +05:30
offline
payments Bug 1383293 - Mochitest for testing the new readonly attribute topLevelPrincipal in nsIPaymentRequest. r=baku 2017-08-23 15:23:18 +08:00
performance Bug 919391 - Incorrect Navigation Timing API: performance.timing.responseStart - performance.timing.requestStart < 0 r=baku 2017-08-23 16:50:18 +02:00
permission
plugins Bug 1389510 part 3 - Remove getProperty/setProperty hooks from ClassOps. r=evilpie 2017-08-25 10:12:16 +02:00
power Bug 1382955 (part 2) - Remove nsIPowerManagerService::{powerOff,reboot,restart} and related things. r=gsvelto. 2017-08-02 10:09:26 +10:00
presentation Bug 1391803 - Use nsStringFwd.h for forward declaring string classes. r=froydnj 2017-08-16 16:48:52 -07:00
promise Bug 1347644 - Simplify/rename JS::AsyncTask (r=till,bkelly,mccr8) 2017-08-16 14:38:53 -05:00
push Bug 1390428 (part 2, attempt 2) - Remove more nsXPIDLCString local variables. r=erahm. 2017-08-21 20:01:27 +10:00
quota Bug 1350637 - Part 4: Implement serialization for mozilla::OriginAttributesPattern, so we can use it on the receiver side of IPC without bouncing to the main thread; r=asuth 2017-08-08 23:01:14 +02:00
res
script Bug 1053321 - Correctly pass info about 'defer' and 'async' attributes to HTML5 parser invoked script preload. r=bkelly 2017-08-19 05:35:00 -04:00
secureelement
security Bug 1391803 - Use nsStringFwd.h for forward declaring string classes. r=froydnj 2017-08-16 16:48:52 -07:00
smil Backed out changeset e774700fe070 (bug 1392787) for build bustage a=backout CLOSED TREE 2017-08-24 13:58:52 -07:00
storage Bug 1389529 - Remove @deprecated nsIDOMStorageManager.getLocalStorageForPrincipal. r=mayhemer 2017-08-12 00:36:01 +09:00
svg Bug 1393791 - Move SVG Use anonymous content to the frame. r=emilio 2017-08-27 15:29:32 -07:00
system Bug 1386240 - [1.3] Check success status when enabling or disabling geolocation events. r=jchen 2017-08-08 18:15:54 +02:00
tests Merge autoland to m-c. a=merge 2017-08-24 20:20:08 -04:00
time
u2f
url Bug 1380617 - Add test checking that URL.origin returns punycode r=smaug 2017-08-09 17:44:03 +02:00
vr Bug 1388274 - Adjust WebVR telemetry histogram's high bound for user time spent; r=francois,kip 2017-08-08 18:23:43 +08:00
webauthn Bug 1392366 - WebAuthn must use the WebCrypto SHA-256 algorithm identifier r=keeler 2017-08-21 12:06:15 -07:00
webbrowserpersist Bug 1391110: Part 3 - Add nsIWebBrowserPersistable to FrameLoader bindings. r=smaug 2017-08-19 14:16:16 -07:00
webidl Bug 1392358 - Introduce XHR.sendInputStream(nsIInputStream) chrome-only, r=smaug 2017-08-25 15:31:15 +02:00
workers Bug 1328398 - Add telemetry to measure service worker launch time. r=bkelly,francois datareview=francois 2017-08-17 18:32:36 +08:00
worklet
xbl Bug 1389510 part 3 - Remove getProperty/setProperty hooks from ClassOps. r=evilpie 2017-08-25 10:12:16 +02:00
xhr Bug 1392358 - Introduce XHR.sendInputStream(nsIInputStream) chrome-only, r=smaug 2017-08-25 15:31:15 +02:00
xml Bug 1390428 (part 9) - Remove nsXPIDLCString. r=erahm. 2017-08-17 15:29:03 +10:00
xslt Bug 1391803 - Use nsStringFwd.h for forward declaring string classes. r=froydnj 2017-08-16 16:48:52 -07:00
xul Bug 1390428 (part 9) - Remove nsXPIDLCString. r=erahm. 2017-08-17 15:29:03 +10:00
jar.mn
moz.build Bug 1381916 - Remove support for plugins on Android r=jchen,bsmedberg 2017-07-31 12:25:16 -05:00