gecko-dev/dom
Kate McKinley c6650db185 Bug 1246540 HSTS Priming Proof of Concept
HSTS priming changes the order of mixed-content blocking and HSTS
upgrades, and adds a priming request to check if a mixed-content load is
accesible over HTTPS and the server supports upgrading via the
Strict-Transport-Security header.

Every call site that uses AsyncOpen2 passes through the mixed-content
blocker, and has a LoadInfo. If the mixed-content blocker marks the load as
needing HSTS priming, nsHttpChannel will build and send an HSTS priming
request on the same URI with the scheme upgraded to HTTPS. If the server
allows the upgrade, then channel performs an internal redirect to the HTTPS URI,
otherwise use the result of mixed-content blocker to allow or block the
load.

nsISiteSecurityService adds an optional boolean out parameter to
determine if the HSTS state is already cached for negative assertions.
If the host has been probed within the previous 24 hours, no HSTS
priming check will be sent.

(r=ckerschb,r=mayhemer,r=jld,r=smaug,r=dkeeler,r=jmaher,p=ally)
2016-07-26 13:03:00 +08:00
..
alarm Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
animation Bug 1287725 - Drop KeyframeEffectReadOnly::HasAnimationOfProperties and nsLayoutUtils::HasCurrentAnimationsForProperties. r=birtles 2016-07-26 06:44:11 +09:00
apps Backed out changeset 16aa7041c009 (bug 1287107) for causing xpcshell and mac tests 2016-07-22 11:30:23 +02:00
archivereader Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
asmjscache Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
audiochannel Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
base Bug 1246540 HSTS Priming Proof of Concept 2016-07-26 13:03:00 +08:00
battery Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
bindings Backed out changeset 1a2627378a0d, didn't tag the reviewer correctly. 2016-07-26 11:12:21 -07:00
bluetooth Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
broadcastchannel merge mozilla-inbound to mozilla-central a=merge 2016-07-25 15:50:41 +02:00
browser-element Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
cache merge mozilla-inbound to mozilla-central a=merge 2016-07-25 15:50:41 +02:00
camera Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
canvas Bug 1247977 - Handle FakeBlackTexture creation fail. r=jgilbert 2016-07-27 09:42:09 +08:00
cellbroadcast Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
console merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
contacts Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
crypto Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
devicestorage Bug 1288924 - Remove __func__ polyfill for VS2013. r=froydnj 2016-07-25 01:14:31 -07:00
downloads Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
encoding Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
events Bug 1275473 - Implement CompositionEvent.ranges. r=masayuki, r=smaug 2016-07-26 12:09:07 +02:00
fetch Bug 1264164 - Support Referrer Policy HTTP header. r=jdm 2016-07-19 15:38:26 +08:00
filehandle Bug 1288077: Forward declare arrays by including 'nsTArrayForwardDeclare.h', r=froydnj 2016-07-20 17:29:36 +02:00
filesystem Bug 1274959 - Support symlinks in Directory API - part 3 - no loops with symlink in Directory.getFiles(), r=smaug 2016-07-23 10:35:26 +02:00
flyweb Bug 1278439 (part 3) - Adding a missing prefs service null check in dom/flyweb/. r=djvj. 2016-07-15 13:12:57 +10:00
fmradio Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
gamepad merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
geolocation Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
grid Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
html Bug 1288681 - Rename HTMLInputElement::directory to HTMLInputElement::allowdirs, r=smaug 2016-07-23 10:20:15 +02:00
icc Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
identity Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
imptests Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
indexedDB merge mozilla-inbound to mozilla-central a=merge 2016-07-25 15:50:41 +02:00
inputmethod Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
inputport Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
interfaces Bug 1288980 - Add libcubeb backend to about:support. r=felipc 2016-07-26 10:50:14 +12:00
ipc Bug 1246540 HSTS Priming Proof of Concept 2016-07-26 13:03:00 +08:00
json Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
jsurl Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
locales Bug 1288585 - Clarify console message about WinXP unsupported formats - r=cpearce 2016-07-22 13:12:15 +10:00
manifest Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mathml Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
media Bug 1266938 - Add explicit to ctors for helper classes in WidevineVideoDecoder. r=bustage 2016-07-27 11:27:08 +12:00
messagechannel Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mobileconnection Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mobileid Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
mobilemessage merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
network Bug 1288077: Forward declare arrays by including 'nsTArrayForwardDeclare.h', r=froydnj 2016-07-20 17:29:36 +02:00
newapps Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
nfc
notification Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
offline Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
payment Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
performance Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
permission Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
phonenumberutils Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
plugins Add DeviceManagerD3D11 as a wrapper around gfxWindowsPlatform. (bug 1282364 part 1, r=mattwoodrow) 2016-07-26 12:50:30 -07:00
power Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
presentation Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
promise Bug 1282026 - Add assertions in the DTOR of WorkerHolder - part 3 - PromiseWorkerProxy, r=bkelly 2016-07-18 09:14:14 +02:00
push Bug 1285889 - Moving the ContextualIdentityService.jsm from from browser/components/contextualidentity into tookit/components/contextualidentity. r=baku 2016-07-11 20:03:00 +02:00
quota Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
res
resourcestats Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
secureelement
security Bug 1246540 HSTS Priming Proof of Concept 2016-07-26 13:03:00 +08:00
settings Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
simplepush
smil Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
speakermanager Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
storage Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
svg Bug 1284837 - Disallow implicit conversions from float to integer when creating IntPoint and IntSize objects. r=botond 2016-07-26 16:48:30 +02:00
system merge mozilla-inbound to mozilla-central a=merge 2016-07-22 11:58:02 +02:00
telephony Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
tests Bug 1280692: Remove redundant sendBeacon tests due to spec update of using 'no-cors' per default. r=sicking 2016-07-26 13:46:48 +02:00
tethering Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
time Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
tv Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
u2f Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
url Bug 1287657 - Context menu items should not be disabled for media with a blob URL; r=kinetik, r=baku 2016-07-25 22:41:52 +12:00
voicemail Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
vr Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
wappush
webidl merge mozilla-inbound to mozilla-central a=merge 2016-07-26 11:55:54 +02:00
wifi Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00
workers merge mozilla-inbound to mozilla-central a=merge 2016-07-25 15:50:41 +02:00
xbl Bug 1286084 - Remove warning that startup cache is null. r=enn 2016-07-26 14:31:03 -07:00
xhr Backed out 3 changesets (bug 1285036) for browser_net_resend.js failures on a CLOSED TREE. 2016-07-21 14:56:01 -04:00
xml Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
xslt Bug 1277106 - Part 2: Expand MOZ_UTF16() strings to u"" string literals. r=Waldo 2016-07-20 22:03:25 -07:00
xul merge mozilla-inbound to mozilla-central a=merge 2016-07-25 15:50:41 +02:00
jar.mn
moz.build Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00