Commit Graph

545 Commits

Author SHA1 Message Date
Patrick McManus
6f686dee93 missed a test in 98d58c46e409 when disabling websockets. bug 616733. a=tests 2010-12-08 15:35:21 -08:00
Patrick McManus
725731c1fa Bug 616733: Disable websockets by default. r=peterv,jst a=beta8
Can be turned on by setting preference
network.websocket.override-security-block.  Websockets can only be used if
override-security-block and network.websocket.enabled are both set to true.

At a future time, with a more secure websocket protocol, the
override-security-block preference can be removed.

This action is based on the security concern over an HTTP cache
poisoning attack as described in
http://www.adambarth.com/experimental/websocket.pdf
2010-12-08 14:12:51 -08:00
Henri Sivonen
088379e8dd Bug 592366 - Do not execute scripts whose owner doc is not the doc of the inserter parser or not the owner doc at the time of starting the script load. r=jonas, a=blocking2.0-betaN. 2010-12-08 14:37:19 +02:00
Benjamin Smedberg
fc65836802 Bug 614015 - Add <browser>.messageManager property for both in-process and out-of-process tabs, r=gavin
--HG--
extra : rebase_source : f0419a400dc714bc52481959fc4712fdc50b5e88
2010-12-07 09:34:34 -05:00
Boris Zbarsky
244e009096 Bug 597345. Discard script preloads if the charset doesn't match. r=sicking, a=blocker 2010-12-07 08:54:50 -05:00
Ms2ger
7f800d51a7 Bug 613793 - Raise an exception when trying to append a child to a DocumentType; r=bzbarsky a=jst 2010-12-04 09:00:19 +01:00
Blake Kaplan
57a7d85970 bug 601803 - Support adopting a node cross-compartment. r=gal/jst, a=blocker 2010-11-15 17:21:25 -08:00
Boris Zbarsky
7f2bf265a9 Bug 605296 part 2. Make username/password stringify undefined to empty string. r=sicking, a=blocker 2010-11-30 13:18:15 -05:00
Boris Zbarsky
23c2b599dc Bug 614058. Fix regression in IsEqualNode. r=jst, a=blocker 2010-11-30 13:19:59 -05:00
Dave Townsend
7a0e0a5cd9 Backing out bug 614058, bug 609272, bug 478445, bug 499628, bug 605296, bug 608914 and bug 614724 due to potentially causing bug 615736 CLOSED TREE. a=backout 2010-12-01 11:01:56 -08:00
Dave Townsend
ad5534594c Backing out bug 605296 due to potentially causing bug 615736. a=backout 2010-12-01 10:57:14 -08:00
Boris Zbarsky
847733099f Bug 605296 followup: fix test to do the right thing on failure. a=orange 2010-11-30 16:19:40 -05:00
Boris Zbarsky
729bd9d4ac Bug 614058. Fix regression in IsEqualNode. r=jst, a=blocker 2010-11-30 13:19:59 -05:00
Boris Zbarsky
1a2b254c3a Bug 605296 part 2. Make username/password stringify undefined to empty string. r=sicking 2010-11-30 13:18:15 -05:00
Jonas Sicking
6948fc9a18 Bug 609030: Update createBlobURL/revokeBlobURL to it's final name. r=jst a=blocker 2010-11-23 00:50:55 -08:00
Henri Sivonen
be74c70467 Bug 606729 - Make sure a script with the src attribute is treated as an external script even if the value of the attribute is not a valid URL. r=jonas, a=blocking2.0-final. 2010-10-27 10:03:10 +03:00
Kyle Huey
9dd62aa901 Bug 602482: Update XHR forbidden headers to latest spec. r=sicking a=b:betaN
--HG--
rename : content/base/test/test_bug308484.html => content/base/test/test_xhr_forbidden_headers.html
2010-11-15 06:55:30 -05:00
Alex Vincent
17fbdcd463 b=601756 Tests for TreeWalker.nextSibling, previousSibling, as suggested by Traversal spec r=smaug a=test
--HG--
extra : rebase_source : c0119c7cd025ad199f2a1623843836eace58ea1c
2010-11-15 12:08:49 +13:00
Olli Pettay
9d39c329b9 Bug 608939 - XMLHttpRequest.statusText and getAllResponseHeaders shouldn't throw, r=sicking, a=sicking
--HG--
extra : rebase_source : 5dc42964f6a216c4f10127d0ad74fe52674601d7
2010-11-11 23:39:14 +02:00
Henri Sivonen
0e5c39fc7b Bug 599588 - Make scripts created by createContextualFragment() executable. r=jonas, a=blocking2.0-final.
--HG--
extra : rebase_source : cfe476ed6ac2b1ee4cc243034659290d1226bd42
2010-11-01 11:50:01 +01:00
Henri Sivonen
cf9b4bc5e6 Bug 602838 part 2 - Make script-created scripts (incl. scripts that have lost their parser-insertedness) default to .async=true. r=jonas, a=blocking2.0-beta8.
--HG--
extra : rebase_source : 8488bca56232504b1510e92b52f2567fa42eaf99
2010-10-27 15:04:09 +03:00
Henri Sivonen
0f8fe9dae5 Bug 602838 part 1 - Execute in insertion order script-inserted external scripts that have the async DOM attribute reporting false. r=jonas, a=blocking2.0-beta8.
--HG--
extra : rebase_source : bfbbf7cf783a1d50a52896e5fe540aa7e84b2e0c
2010-10-13 10:12:55 +03:00
Michael Wu
30098037eb Backed out changeset 090046fc6891 bug 482935 due to a=orange 2010-11-10 19:29:51 -08:00
bjarne@runitsoft.com
b9e7d659bd Bug 482935 - Cancel() from OnStopRequest should not cause cache entry to be doomed;
(Av1f) Allow content to be cached if it was loaded successfully.
r=(dwitte, jduell) a2.0=benjamin.
2010-11-11 01:02:15 +01:00
Ehsan Akhgari
056fc8aba7 Backed out changeset c85c2f1b0566 because of oranges on mochitest-1 2010-11-10 17:46:32 -05:00
bjarne@runitsoft.com
c6a0351901 Bug 482935 - Cancel() from OnStopRequest should not cause cache entry to be doomed;
(Av1e) Allow content to be cached if it was loaded successfully.
r=(dwitte, jduell) a2.0=benjamin.
2010-11-10 22:28:54 +01:00
Ms2ger
6e7b3e0366 Bug 600175 - Run scripts inside noembed, iframe and noframes elements. r=sicking a=jst 2010-10-22 23:29:41 +02:00
Brandon Sterne
350eae7241 Bug 589457 - fix random orange in X-Frame-Options test, r=jst, a=blocking2.0 2010-11-05 09:33:08 -07:00
Henri Sivonen
6b5b74d541 Bug 604660 - Make XSLT-inserted script execute in the insertion order. r=jonas, a=blocking2.0-beta7.
--HG--
extra : rebase_source : fde633f62de8b4ec5af5c85f21c01ed4781e06e3
2010-10-27 10:18:24 +03:00
Sid Stamm
304fdb34e1 Bug 548949 - make CSP parse hostless schemes properly, r=dveditz, a=jst 2010-10-28 15:59:30 -07:00
Ted Mielczarek
7837112f8a bug 607205 - fix setTimeout usage in test_bug373181.xhtml. a=testonly 2010-10-26 08:24:08 -04:00
Mounir Lamouri
08ab79dbaa Bug 605982 - mozMatchesSelector should raise a SYNTAX_ERR exception on invalid selectors. r+a=bz 2010-10-21 16:09:00 +02:00
Dan Witte
3b44c6986f Bug 595305 - Factor cookie third-party URI code into separate API. Tests. r=bent, a=betaN+ 2010-10-19 09:37:03 -07:00
Ms2ger
b1bed27299 Bug 567350 - Make getComputedStyle's second argument optional; r=bzbarsky a=jst 2010-10-16 13:54:47 +02:00
Brandon Sterne
4defdf0722 Bug 581226 - fix assertion: DoContent returned no listener?: 'abort || m_targetStreamListener', a=blocking2.0 2010-10-14 15:26:59 -07:00
Brandon Sterne
ed2ecaca2e Bug 561051 - make CSP frame-ancestors and X-Frame-Options work with viewSourceChannels, a=jst 2010-10-14 15:25:00 -07:00
Olli Pettay
d7f424353c Bug 599590 - Attrib.value can return empty for case-sensitive attributes after calling removeAttribute, r=sicking, a=jst
--HG--
extra : rebase_source : 3c2c925ae51aca7d32bc3021cbbf1a43735d2035
2010-10-14 17:07:20 +03:00
Blake Kaplan
29e85b9844 Merge mozilla-central into tracemonkey 2010-10-13 17:54:54 -07:00
Jonas Sicking
e7e13b2084 Bug 575946: Implement File.slice. r=khuey sr=biesi a=beltzner 2010-10-13 16:25:33 -07:00
Peter Van der Beken
63f5a338e8 bug 580128 - Disallow cross-compartment adoptNode. r=jst 2010-10-10 15:42:09 -07:00
Mats Palmgren
d77715b9b2 Flush frames after the event handler so that new nodes inserted into the Selection are visible. b=602231 r=bzbarsky a=blocking2.0:final 2010-10-11 00:07:00 +02:00
Jonas Sicking
466c50688d Bug 600809: Make HTMLBaseElement.href work properly. r=smaug a=blocker 2010-10-07 09:39:01 -07:00
Jonas Sicking
d7a84f66da Bug 599300: Make FileReader work correctly for empty files. r=smaug a=blocker 2010-10-07 09:36:23 -07:00
Mounir Lamouri
689e2af38f Bug 600471 - Listen to the new content when an attribute is attached to it. r=bz a=blocking-2.0 2010-10-07 12:05:33 +02:00
Mounir Lamouri
d996cdbbd1 Bug 600468 - Remove attribute's first child when the value is set to the empty string. r=bz a=blocking-2.0 2010-10-07 12:05:04 +02:00
Mounir Lamouri
b162eb42cb Bug 600466 - Actually remove child when .removeChild() is called on attributes. r=bz a=blocking-2.0 2010-10-07 12:04:25 +02:00
Mounir Lamouri
bf1b804104 Bug 598877 - nsDOMAttributes should update mChild when value is set. r=bz a=blocking-2.0 2010-10-07 12:04:07 +02:00
Kyle Huey
7d306fa717 Bug 599966: Null check argument of window.createBlobURL to avoid crashing. r=sicking a=blocking-beta-8
--HG--
rename : content/base/test/test_bug543870.html => content/base/test/test_mozfiledataurl.html
extra : rebase_source : 43ce51487370b415340cb18de74e5bf0e718067f
2010-10-02 04:24:41 -04:00
Kyle Huey
9e6bf3758e Bug 599367: Set content type on moz-filedata channels. r=sicking a=blocking-beta-8
--HG--
rename : content/base/test/file_bug543870_doc.html => content/base/test/file_mozfiledataurl_doc.html
rename : content/base/test/file_bug543870_img.jpg => content/base/test/file_mozfiledataurl_img.jpg
rename : content/base/test/file_bug543870_inner.html => content/base/test/file_mozfiledataurl_inner.html
rename : content/base/test/file_bug543870_text.txt => content/base/test/file_mozfiledataurl_text.txt
rename : content/base/test/test_bug543870.html => content/base/test/test_mozfiledataurl.html
extra : rebase_source : f297d67ba4c75ce711b643577c69386c93c03bf8
2010-10-02 03:32:49 -04:00
Jonas Sicking
dcce0d0b40 Bug 592829: Make parsing code able to deal with element creation failing. r=jst/peterv a=blocker 2010-10-04 18:25:44 -07:00