gecko-dev/dom
Nika Layzell bd152e0d88 Bug 1614259 - Ensure BrowisngContexts are detached when nsDocShell is destroyed, r=farre
After bug 1582832, DocShell destruction and BrowsingContext detaching happen
in separate operations, leaving a gap where a DocShell has been destroyed, but
its BrowsingContext is still considered attached. During this gap, the usual
invariant that an in-process, attached BrowsingContext always has an
associated DOM window doesn't hold, nor do the usual invariants for outer
window forwarding security checks.

This patch fixes the detach timing so that a child BrowsingContext for a frame
which has been removed is always marked detached at the same time its DocShell
is destroyed.

Co-authored-by: Kris Maglione <maglione.k@gmail.com>

Differential Revision: https://phabricator.services.mozilla.com/D62791

--HG--
extra : moz-landing-system : lando
2020-03-23 13:28:09 +00:00
..
abort Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
animation Bug 1623469 - Add a pref to disable synchronization transform animations with geometric animations. r=boris 2020-03-19 03:36:54 +00:00
audiochannel Bug 1577890 - part10 : remove unused function 'ShouldBlockMedia()'. r=baku 2020-03-05 06:18:00 +00:00
base Bug 1623968 - Show a warning when a page forces the start of layout, as that usually indicates a FOUC. r=smaug 2020-03-21 12:18:28 +00:00
battery Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
bindings Bug 1402784 - Use nsIContentPolicy::TYPE_INTERNAL_AUDIOWORKLET and nsIContentPolicy::TYPE_INTERNAL_PAINTWORKLET in Worklet code, r=smaug 2020-03-17 22:24:39 +00:00
broadcastchannel Bug 1370725 - Remove redundant dom/broadcastchannel/tests/test_broadcastchannel_any.html. r=baku 2020-03-23 11:33:55 +00:00
browser-element Bug 1621328 - Move CreateExposableURI into nsIOService. r=Gijs,mayhemer 2020-03-13 12:44:36 +00:00
cache Bug 1402784 - Introduce nsIContentPolicy::TYPE_INTERNAL_AUDIOWORKLET and nsIContentPolicy::TYPE_INTERNAL_PAINTWORKLET, r=ckerschb 2020-03-17 11:29:33 +00:00
canvas Bug 1622536 - Treat js::Scalar::MaxTypedArrayViewType like Uint8Array for webgl.compressedTexImage. r=lsalzman 2020-03-19 09:15:22 +00:00
chrome-webidl Bug 1580447 - Expose Content{Parent, Child} to JS;r=nika 2020-03-20 09:11:32 +00:00
clients Backed out 9 changesets (bug 1622111) for causing mochitest failures in dom/animation/test/mozilla/test_restyles.html CLOSED TREE 2020-03-19 02:47:51 +02:00
commandhandler Bug 1535617: Part 2 - Clear weak references for most cycle collected objects on unlink. r=mccr8 2020-02-25 19:44:39 +00:00
console Bug 1621813 - Remove nsIScriptError.exceptionFlag. r=mccr8 2020-03-19 21:31:44 +00:00
credentialmanagement Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
crypto Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
debugger
docs Bug 1622328 - Fission-IPC-Diagram.svg: Add the license r=nika 2020-03-16 19:58:35 +00:00
encoding Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
events Backed out 2 changesets (bug 1618763) for build bustage in checkouts/gecko/widget/gtk/IMContextWrapper.cpp. CLOSED TREE 2020-03-23 09:35:16 +02:00
fetch Bug 1402784 - Use nsIContentPolicy::TYPE_INTERNAL_AUDIOWORKLET and nsIContentPolicy::TYPE_INTERNAL_PAINTWORKLET in Worklet code, r=smaug 2020-03-17 22:24:39 +00:00
file Backed out 4 changesets (bug 1622042) for causing AddonInstallException: Could not install add-on: c:\users\task_1584560140\appdata\local\temp\tmpbg9_h7.zip: ERROR_FILE_ACCESS: There was an error accessing the filesystem. CLOSED TREE 2020-03-18 22:49:23 +02:00
filehandle
filesystem Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
flex Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
gamepad
geolocation Bug 1535617: Part 2 - Clear weak references for most cycle collected objects on unlink. r=mccr8 2020-02-25 19:44:39 +00:00
grid Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
html Bug 1622221 - Rework number input localization. r=jwatt 2020-03-23 09:36:52 +00:00
imptests
indexedDB Bug 1620917 - Ensure a failure of StartTransactionOp is correctly handled on the resulting CommitOp. r=dom-workers-and-storage-reviewers,janv 2020-03-23 10:38:47 +00:00
interfaces Backed out changeset e50cbce87f8d (bug 1618539) for nsFocusManager related crashes CLOSED TREE 2020-03-20 11:25:11 +02:00
ipc Bug 1614259 - Ensure BrowisngContexts are detached when nsDocShell is destroyed, r=farre 2020-03-23 13:28:09 +00:00
jsurl Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/jsurl. r=smaug 2020-03-09 14:35:34 +00:00
l10n Bug 1377999 - Make DocumentFragment to adapt the DOMArena changes r=smaug 2020-03-17 14:53:46 +00:00
locales Bug 1623968 - Show a warning when a page forces the start of layout, as that usually indicates a FOUC. r=smaug 2020-03-21 12:18:28 +00:00
localstorage Bug 1620556 - Automatic code fixes for Prettier 1.19.1 upgrade. r=Standard8,remote-protocol-reviewers,marionette-reviewers,webcompat-reviewers,perftest-reviewers,sparky,whimboo,denschub 2020-03-13 23:38:52 +00:00
manifest Bug 1620218 - Automatic code fixes for Prettier 1.18.2 upgrade. r=mossop,webcompat-reviewers 2020-03-08 21:45:16 +00:00
mathml Bug 1377999 - Make MathML nodes to adapt the DOMArena changes r=smaug 2020-03-17 14:53:25 +00:00
media Bug 1624237 - Run misc-unused-using-decls - Remove useless declarations r=andi 2020-03-23 13:15:33 +00:00
messagechannel Bug 1620632 - Rename confusingly named types/macros for relocation handling of nsTArray. r=froydnj 2020-03-20 17:04:27 +00:00
midi Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/midi. r=smaug 2020-03-09 15:20:29 +00:00
network Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/network. r=smaug 2020-03-09 15:18:20 +00:00
notification Bug 1620556 - Automatic code fixes for Prettier 1.19.1 upgrade. r=Standard8,remote-protocol-reviewers,marionette-reviewers,webcompat-reviewers,perftest-reviewers,sparky,whimboo,denschub 2020-03-13 23:38:52 +00:00
offline Bug 1616570 - Part 1: Rename CookieSettings to CookieJarSettings. r=Ehsan 2020-03-04 08:59:08 +00:00
payments Bug 1615630 - Call PaymentRequestManager::NotifyRequestDone() when PaymentShowActionResponse.status() is not PAYMENT_ACCEPTED before calling PaymentRequest::RespondShowPayment r=baku,alchen 2020-03-10 09:03:51 +00:00
performance Bug 1620632 - Ensure nsTArray_Impl only declares a copy-constructor/assignment operator if E is copy-constructible. r=froydnj 2020-03-20 17:13:51 +00:00
permission Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/permission. r=smaug 2020-03-09 14:48:10 +00:00
plugins Bug 1624237 - Run misc-unused-using-decls - Remove useless declarations r=andi 2020-03-23 13:15:33 +00:00
power Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/power. r=smaug 2020-03-04 09:08:09 +00:00
presentation Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/presentation. r=smaug 2020-03-09 15:14:19 +00:00
prio
promise Bug 1622184 - Add a public method to mark a settled Promise as handled; r=arai 2020-03-18 02:22:00 +00:00
prototype Bug 1622235 - Make defer scripts wait for stylesheets. r=hsivonen 2020-03-20 13:33:11 +00:00
push Bug 1620556 - Automatic code fixes for Prettier 1.19.1 upgrade. r=Standard8,remote-protocol-reviewers,marionette-reviewers,webcompat-reviewers,perftest-reviewers,sparky,whimboo,denschub 2020-03-13 23:38:52 +00:00
quota Bug 1620632 - Ensure nsTArray_Impl only declares a copy-constructor/assignment operator if E is copy-constructible. r=froydnj 2020-03-20 17:13:51 +00:00
reporting Bug 1620984 - CrashReport.cpp refactor r=ckerschb 2020-03-10 19:34:42 +00:00
res
script Bug 1622562 - Remove JSREPORT_IS_WARNING everywhere. r=baku 2020-03-21 20:14:13 +00:00
security Bug 1585533: Remove debug statements for test test_upgrade_insecure_reporting.html. r=sstreich 2020-03-23 12:40:06 +00:00
serviceworkers Bug 1620632 - Ensure nsTArray_Impl only declares a copy-constructor/assignment operator if E is copy-constructible. r=froydnj 2020-03-20 17:13:51 +00:00
simpledb Bug 1619592 - Refactor persistence type checks using new IsValidPersistenceType method; r=dom-workers-and-storage-reviewers,sg 2020-03-17 13:06:17 +00:00
smil Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
storage Backed out changeset d15b968aa6d1 (bug 1615297) for causing build bustage 2020-03-11 05:41:51 +02:00
svg Bug 1377999 - Make SVG nodes to adapt the DOMArena changes r=smaug 2020-03-17 14:53:16 +00:00
system Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/system. r=smaug 2020-03-09 15:02:09 +00:00
tests Bug 1620077 - part2 : enable MediaSession and MediaMetadata in testing. r=baku 2020-03-19 17:38:59 +00:00
u2f Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
url Bug 1620556 - Automatic code fixes for Prettier 1.19.1 upgrade. r=Standard8,remote-protocol-reviewers,marionette-reviewers,webcompat-reviewers,perftest-reviewers,sparky,whimboo,denschub 2020-03-13 23:38:52 +00:00
vr Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/vr. r=smaug 2020-03-04 09:07:32 +00:00
webauthn Backed out changeset f01596089356 (bug 1220810) for causing crashes in test_performance_attributes_exist_in_object.html 2020-03-19 17:12:32 +02:00
webbrowserpersist Bug 1613985 - Use default for equivalent-to-default constructors/destructors in dom/webbrowserpersist. r=smaug 2020-03-09 14:57:23 +00:00
webgpu Bug 1617086 - Include WebGPU pass dependencies into CC r=jgilbert 2020-03-18 17:29:51 +00:00
webidl Bug 1616875: Move some receiver-related testing functions from RTCPeerConnection to RTCRtpReceiver. r=ng,smaug 2020-03-20 15:33:55 +00:00
websocket Backed out 4 changesets (bug 1622042) for causing AddonInstallException: Could not install add-on: c:\users\task_1584560140\appdata\local\temp\tmpbg9_h7.zip: ERROR_FILE_ACCESS: There was an error accessing the filesystem. CLOSED TREE 2020-03-18 22:49:23 +02:00
workers Bug 1622562 - Remove JSREPORT_IS_WARNING everywhere. r=baku 2020-03-21 20:14:13 +00:00
worklet Bug 1402784 - Use nsIContentPolicy::TYPE_INTERNAL_AUDIOWORKLET and nsIContentPolicy::TYPE_INTERNAL_PAINTWORKLET in Worklet code, r=smaug 2020-03-17 22:24:39 +00:00
xhr Bug 1620542 - Automatically fix ESLint errors in .eslintrc.js files. r=mossop 2020-03-07 10:09:44 +00:00
xml Bug 1377999 - Make ProcessingInstruction to adapt the DOMArena changes r=smaug 2020-03-17 14:55:36 +00:00
xslt Bug 1622235 - Make defer scripts wait for stylesheets. r=hsivonen 2020-03-20 13:33:11 +00:00
xul Bug 1377999 - Make nsXULElement to adapt the DOMArena changes r=smaug 2020-03-17 14:53:33 +00:00
jar.mn
moz.build