Read-only Git mirror of the Mercurial gecko repositories at https://hg.mozilla.org. How to contribute: https://firefox-source-docs.mozilla.org/contributing/contribution_quickref.html
Go to file
Masayuki Nakano e28c807e5a Bug 1533989 - Make InputEvent.data and InputEvent.dataTransfer not expose clipboard data if user disables clipboard events r=smaug
If user disables clipboard events, it means that they don't want to expose
clipboard data to web apps even if web apps cannot handle "paste" operation.
Therefore, they must not want to leak clipboard data with `InputEvent.data`
and `InputEvent.dataTransfer`.

This patch makes `InputEvent::GetData()` and `InputEvent::GetDataTransfer()`
returns empty string or new `DataTransfer` object which has only empty string
if:
- They are called by content JS.
- The event is a trusted event.
- `inputType` value is `insertFromPaste` or `insertFromPasteAsQuotation`.

The reason why we don't return null for both is, Input Events spec declares
`data` or `dataTransfer` shouldn't be null in the `inputType` values.  And
the reason why we don't return empty `DataTransfer` is, web apps may expect
at least one data is stored in non-null `dataTransfer` value.

Differential Revision: https://phabricator.services.mozilla.com/D25350

--HG--
extra : moz-landing-system : lando
2019-03-29 16:08:11 +00:00
.cargo Bug 1538419 - Add support for thumbv7neon to target-lexicon. r=froydnj 2019-03-26 03:12:56 +00:00
.vscode Bug 1514820 - Recommend a VSCode extension for IDL language highlighting r=jya 2018-12-18 19:43:33 +00:00
accessible Bug 1534003 - Update page title in about:buildconfig r=mconley 2019-03-30 16:11:08 +00:00
browser Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
build Bug 1540369 - Build GNU as for aarch64 target in binutils toolchain. r=froydnj 2019-03-30 23:04:42 +00:00
caps Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
chrome Bug 1540015 - part 3: Rename Document::GetShell() to Document::GetPresShell() and make it return PresShell* rather than nsIPresShell* r=smaug,emilio 2019-03-29 15:12:47 +00:00
config Backed out changeset e5117d2f9311 (bug 1533051) for Android xpcshell failures CLOSED TREE 2019-03-28 01:33:00 +02:00
db Bug 1530749 - Upgrade to SQLite 3.27.2. r=mak 2019-02-26 23:21:05 +00:00
devtools Bug 1539493 - Remove source metadata. r=loganfsmyth 2019-04-01 12:49:18 +00:00
docshell Bug 1539356 - Mark EditorBase::InsertNodeTransaction() as MOZ_CAN_RUN_SCRIPT r=m_kato 2019-03-30 11:55:29 +00:00
dom Bug 1533989 - Make InputEvent.data and InputEvent.dataTransfer not expose clipboard data if user disables clipboard events r=smaug 2019-03-29 16:08:11 +00:00
editor Bug 1533989 - Make InputEvent.data and InputEvent.dataTransfer not expose clipboard data if user disables clipboard events r=smaug 2019-03-29 16:08:11 +00:00
embedding Bug 1514594: Part 3 - Change ChromeUtils.import API. 2019-01-17 10:18:31 -08:00
extensions Bug 1524883 - Clear storageAccessAPI permissions when history is cleared. r=johannh,Ehsan 2019-03-28 18:44:08 +00:00
gfx Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
gradle/wrapper Bug 1509572 - Part 1: Bump Gradle wrapper to 4.10.2; decouple script from Gradle version. r=snorp 2018-11-26 21:42:27 +00:00
hal Bug 1523969 part 9 - Move method definition inline comments to new line in 'hal/'. r=gsvelto 2019-02-25 16:07:35 -06:00
image Bug 1415265 - Remove now unnecessary .eslintrc.js files or entries. r=mossop 2019-03-28 09:38:14 +00:00
intl Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
ipc Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
js Merge inbound to mozilla-central. a=merge 2019-04-01 12:48:18 +03:00
layout Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
media Bug 1540096 - Handle AArch64 in libaom fuzzing target. r=jya 2019-04-01 06:59:47 +00:00
memory Bug 1533240 - Replace DMD's custom TLS code with use of mozilla/ThreadLocal.h. r=erahm 2019-03-22 20:07:30 +00:00
mfbt Merge autoland to mozilla-central. a=merge 2019-03-30 23:43:56 +02:00
mobile Merge inbound to mozilla-central. a=merge 2019-03-30 11:32:42 +02:00
modules Bug 1533989 - Make InputEvent.data and InputEvent.dataTransfer not expose clipboard data if user disables clipboard events r=smaug 2019-03-29 16:08:11 +00:00
mozglue Bug 1539605 - add fast paths for integer formatting on nsTSubstring; r=erahm 2019-03-29 19:38:53 +00:00
netwerk Backed out 2 changesets (bug 1487113) for causing xpcshell failure in netwerk/test/unit_ipc/test_alt-data_cross_process_wrap.js CLOSED TREE 2019-04-01 13:42:38 +03:00
nsprpub Bug 1526010, NSPR 4.21 RTM, r=me 2019-03-07 11:16:36 +01:00
other-licenses Backed out 3 changesets (bug 1458385) for windows partial bustages. a=backout 2019-03-28 15:13:13 +02:00
parser Bug 1540015 - part 1: Make Document.h stop including nsIPresShell.h r=smaug 2019-03-29 15:11:04 +00:00
python Merge inbound to mozilla-central. a=merge 2019-03-29 23:54:39 +02:00
remote Bug 1415265 - Remove now unnecessary .eslintrc.js files or entries. r=mossop 2019-03-28 09:38:14 +00:00
security Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
services No Bug, mozilla-central repo-update HSTS HPKP blocklist remote-settings - a=repo-update r=RyanVM 2019-03-28 12:46:21 +00:00
servo Bug 1536582 - Autogenerate Servo_ binding functions with cbindgen. r=boris 2019-03-30 20:18:33 +00:00
startupcache Bug 1353013 - create preloaded newtab browser from an idle task, only in top window(s), r=dthayer 2019-03-19 17:29:48 +00:00
storage Bug 1415265 - Remove now unnecessary .eslintrc.js files or entries. r=mossop 2019-03-28 09:38:14 +00:00
taskcluster Bug 1312823 - Run console mocha tests on TRY. r=jdescottes. 2019-04-01 07:19:18 +00:00
testing Bug 1539493 - Remove source metadata. r=loganfsmyth 2019-04-01 12:49:18 +00:00
third_party Bug 1540089, update l10n python toolchain to Fluent 0.9, r=stas 2019-03-29 15:51:56 +00:00
toolkit Backed out changeset 3719f1901ffe (bug 1529125) for mda assertion failures CLOSED TREE 2019-04-01 14:37:07 +03:00
tools Backed out 3 changesets (bug 1538060, bug 1539779, bug 1536790) for causing clang-tidy bustages CLOSED TREE 2019-03-30 01:52:37 +02:00
uriloader Bug 1540015 - part 3: Rename Document::GetShell() to Document::GetPresShell() and make it return PresShell* rather than nsIPresShell* r=smaug,emilio 2019-03-29 15:12:47 +00:00
view Bug 1533617 part 1. Improve MOZ_CAN_RUN_SCRIPT annotations around synth mouse events. r=emilio 2019-03-11 14:58:04 +00:00
widget Bug 1533989 - Make InputEvent.data and InputEvent.dataTransfer not expose clipboard data if user disables clipboard events r=smaug 2019-03-29 16:08:11 +00:00
xpcom Bug 1506324 - Use DefaultGlobalClassOps in existing code. r=tcampbell 2019-03-31 15:30:45 -07:00
xpfe/appshell Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-03-31 15:12:55 +00:00
.arcconfig
.clang-format Bug 1521000 - Part 2: Adjust our clang-format rules to include spaces after the hash for nested preprocessor directives r=sylvestre 2019-01-18 10:16:18 +01:00
.clang-format-ignore Bug 1519636 - Ride along: Add media/libdav1d/version.h to the ignore list r=andi 2019-03-27 07:33:24 +00:00
.cron.yml Bug 1352113: Re-use builds from push graph in nightly graphs; r=Callek 2019-03-27 19:42:46 +00:00
.eslintignore Bug 1508819 - Enable ESLint for dom/bindings (manual changes). r=nika 2019-03-29 16:47:06 +00:00
.eslintrc.js Bug 1415265 - Implement a central configuration for setting ESLint environments for test directories. r=mossop 2019-03-28 09:38:02 +00:00
.flake8 Bug 1523835 - Added python/mozbuild/mozpack to the flake8 linter and solved the errors, r=ahal 2019-03-01 15:36:45 -05:00
.gdbinit
.gdbinit_python
.git-blame-ignore-revs No Bug - Ignore bug 1128203 in blame/annotate. r=me 2019-03-21 16:37:20 -07:00
.gitignore Bug 1521864 - It should be possible to open the debugger in a tab. r=davidwalsh 2019-02-21 14:56:47 +00:00
.hg-annotate-ignore-revs No Bug - Ignore bug 1128203 in blame/annotate. r=me 2019-03-21 16:37:20 -07:00
.hg-format-source Bug 1511181 - Quick fix for .hg-format-source that has an empty line. r=ehsan, a=aryx 2018-11-30 13:25:44 +02:00
.hgignore Bug 1525638 - Let hg ignore the build directories of WebRender standalone builds. r=ted 2019-02-11 13:37:44 +00:00
.hgtags No bug - Tagging mozilla-central 9421b477d67cfc4c9e03350cd554a9e6acc7f435 with FIREFOX_NIGHTLY_67_END a=release DONTBUILD CLOSED TREE 2019-03-18 10:56:58 +00:00
.lldbinit
.mailmap
.taskcluster.yml Bug 1488313: [taskgraph] Don't notify sherrifs on cron decision task failures on try; r=dustin 2019-03-27 19:38:05 +00:00
.trackerignore
.yamllint
.ycm_extra_conf.py Bug 1522135 - Make .ycm_extra_conf.py work with python3. r=jgraham 2019-01-24 13:51:28 +01:00
aclocal.m4 Bug 1519603 - Manually inline AC_OUTPUT_SUBDIRS and MOZ_RUN_ALL_SUBCONFIGURES. r=nalexander 2019-01-14 18:37:06 +00:00
AUTHORS
build.gradle Bug 1535013: [geckoview] Add default impls to all interfaces. r=snorp 2019-03-14 16:48:57 +00:00
Cargo.lock Bug 1536582 - Autogenerate Servo_ binding functions with cbindgen. r=boris 2019-03-30 20:18:33 +00:00
Cargo.toml Bug 1538419 - Add support for thumbv7neon to target-lexicon. r=froydnj 2019-03-26 03:12:56 +00:00
client.mk
client.py
CLOBBER Update configs. IGNORE BROKEN CHANGESETS CLOSED TREE NO BUG a=release ba=release 2019-03-18 11:01:13 +00:00
configure.in
configure.py Bug 1528241 - Add a trace mode to python configure that logs internal values. r=chmanchester 2019-02-20 07:46:22 +09:00
GNUmakefile
gradle.properties Bug 1527896 - Increase Gradle heaps to handle large assets. r=nalexander 2019-02-14 18:21:13 +00:00
gradlew
gradlew.bat Bug 1527796 - Part 3. Use gradlew.bat on Windows. r=nalexander 2019-02-26 11:06:12 +09:00
LEGAL
LICENSE
mach
Makefile.in Bug 1535501 - Allow to get full crashreporter symbols on artifact builds. r=mshal 2019-03-15 21:56:14 +00:00
moz.build Bug 1507334 - Add mozconfigs for 3-stage PGO; r=firefox-build-system-reviewers,chmanchester#firefox-build-system-reviewers 2019-01-10 01:34:49 +00:00
moz.configure Bug 1535501 - Allow to get full crashreporter symbols on artifact builds. r=mshal 2019-03-15 21:56:14 +00:00
mozilla-config.h.in Bug 1504022 - Map GetExceptionCode to a nop to avoid an error r=bobowen 2018-11-02 13:28:01 -05:00
old-configure.in Bug 1539227 - land NSS 67c41e385581 UPGRADE_NSS_RELEASE, r=me 2019-03-26 18:48:46 +00:00
package-lock.json Bug 1517707. Update ESLint related modules to latest versions. r=mossop 2019-01-04 16:44:49 +00:00
package.json Bug 1517707. Update ESLint related modules to latest versions. r=mossop 2019-01-04 16:44:49 +00:00
README.txt
settings.gradle Bug 1527796 - Part 5. Add python.exe path of mozilla-build to call mach command from gradle. r=nalexander 2019-03-29 18:11:09 +09:00
test.mozbuild

An explanation of the Mozilla Source Code Directory Structure and links to
project pages with documentation can be found at:

    https://developer.mozilla.org/en/Mozilla_Source_Code_Directory_Structure

For information on how to build Mozilla from the source code, see:

    https://developer.mozilla.org/en/docs/Build_Documentation

To have your bug fix / feature added to Mozilla, you should create a patch and
submit it to Bugzilla (https://bugzilla.mozilla.org). Instructions are at:

    https://developer.mozilla.org/en/docs/Creating_a_patch
    https://developer.mozilla.org/en/docs/Getting_your_patch_in_the_tree

If you have a question about developing Mozilla, and can't find the solution
on https://developer.mozilla.org, you can try asking your question in a
mozilla.* Usenet group, or on IRC at irc.mozilla.org. [The Mozilla news groups
are accessible on Google Groups, or news.mozilla.org with a NNTP reader.]

Nightly development builds can be downloaded from:

    https://archive.mozilla.org/pub/firefox/nightly/latest-mozilla-central/
            - or -
    https://www.mozilla.org/firefox/channel/desktop/#nightly

Keep in mind that nightly builds, which are used by Mozilla developers for
testing, may be buggy.