150 Commits

Author	SHA1	Message	Date
jst@mozilla.org	8b8c02a394	Fixing orange from bug 402983. Make file:///foo and file:////foo#bar compare as equal URLs. r+sr=bzbarsky@mit.edu	2008-03-20 23:01:55 -07:00
jst@mozilla.org	89acfcbf1a	Landing fix for bug 402983. Make security checks on file:// URIs symmetric. Patch by dveditz@cruzio.com, r=jonas@sicking.cc,bzbarsky@mit.edu. jst@mozilla.org	2008-03-20 21:39:08 -07:00
shaver@mozilla.org	dfe9ba8c69	Bug 246699: report better errors (with stacks) for security denials. r+sr=jst, a=mconnor.	2008-03-20 01:19:15 -07:00
shaver@mozilla.org	ec9eab3d12	Test for bug 423379 (content can load chrome and/or resource), r/sr=jst.	2008-03-19 15:14:51 -07:00
shaver@mozilla.org	aedf8d5eb3	(NPOTB, r=mrbkap, a=lumpy) Remove ancient caps test cruft in preparation for incoming mochitests. Also so that the tests listed in securetest.list will not mock me from beyond the NSCP grave.	2008-03-19 14:26:09 -07:00
jonas@sicking.cc	21fb00611b	Bug 413161: Make nsIPrincipal::Origin ignore changes to document.domain. r/sr=dveditz	2008-03-18 17:27:56 -07:00
bzbarsky@mit.edu	5383803699	Finally kill off CheckSameOriginPrincipal, fix remaining callers to do the checks they really want to be doing. Fix screw-up in nsPrincipal::Equals if one principal has a cert and the other does not. Bug 418996, r=mrbkap,dveditz, sr=jst	2008-03-18 14:14:49 -07:00
gavin@gavinsharp.com	b468aa6f00	Back out bug 246699 to fix bug 423375, per shaver	2008-03-17 07:10:48 -07:00
timeless@mozdev.org	7b35ecf9cb	Bug 246699 CAPS security exceptions should throw richer exception info (not just raw string) r=shaver a=shaver	2008-03-11 10:30:23 -07:00
reed@reedloden.com	ccc33c98c5	Bug 420081 - "Case mismatch between nsIURI and nsIUri in nsIPrincipal.idl" [p=mschroeder@mozilla.x-home.org (Martin Schröder [mschroeder]) r+sr=jst a1.9=beltzner]	2008-03-08 03:20:21 -08:00
jonas@sicking.cc	65f4571f58	Bug 416534: Clean up cross-site xmlhttprequest security checks. With fixes to tests this time. r/sr=peterv	2008-02-26 19:45:29 -08:00
myk@mozilla.org	b5e898ddd7	backing out fix for bug 416534 as potential cause of mochitest failure	2008-02-26 19:23:36 -08:00
jonas@sicking.cc	84548acb75	Bug 416534: Clean up cross-site xmlhttprequest security checks. r/sr=peterv	2008-02-26 18:17:49 -08:00
Olli.Pettay@helsinki.fi	67622f2077	Bug 411054, Audit IsNativeAnonymous()/GetBindingParent() uses, r+sr=sicking	2008-02-26 04:40:18 -08:00
reed@reedloden.com	7b58057fad	Bug 417710 - "Use JS_GET_CLASS, not JS_GetClass" [p=gyuyoung.kim@samsung.com (gyu-young kim) r=jorendorff r=jst sr+a1.9=brendan]	2008-02-25 00:59:20 -08:00
jonas@sicking.cc	ba446696ec	Bug 397878: Send Referer-Root header when doing cross-site access requests. Also update domain pattern matching to spec. Patch by <suryaismail@gmail.com>. r=bent sr=sicking b3a=beltzner	2008-01-31 00:16:54 -08:00
jst@mozilla.org	85f3006178	Fixing bustage.	2008-01-29 13:11:24 -08:00
jst@mozilla.org	6ecbc04940	Fixing bug 413767. Make caps use faster JS class/parent/private/proto accessors. r=mrbkap@gmail.com, sr=brendan@mozilla.org	2008-01-29 12:51:01 -08:00
jst@mozilla.org	a2481a1918	Fixing bug 317240. Re-enabling caps optimization now that a documents principal never changes. r+sr=bzbarsky@mit.edu	2008-01-28 09:51:38 -08:00
jst@mozilla.org	0b7afd6193	Fixing bug 412691. Remove unnecessary nsCOMPtr's from performance critical code paths. r+sr=jonas@sicking.cc	2008-01-16 16:32:26 -08:00
benjamin@smedbergs.us	dfc4cee45d	Bug 411327 - nsIXPCNativeCallContext should not inherit from nsISupports, r=mrbkap, a=schrep	2008-01-15 07:50:57 -08:00
dwitte@stanford.edu	97a45f037f	thoroughly whack mallocfest in nsID/nsJSID and friends. b=410250, r+sr=jst, a=blocking1.9+	2008-01-11 20:30:42 -08:00
dwitte@stanford.edu	9d626da131	partial backout in an attempt to fix orange.	2008-01-11 02:08:58 -08:00
dwitte@stanford.edu	8a6c4d235f	relanding bug 410250.	2008-01-11 01:13:04 -08:00
dwitte@stanford.edu	d2b6f4f5ed	backing out to fix orange.	2008-01-10 20:59:44 -08:00
dwitte@stanford.edu	1798542e9f	thoroughly whack mallocfest in nsID/nsJSID and friends. b=410250, r+sr=jst, a=blocking1.9+	2008-01-10 19:56:00 -08:00
timeless@mozdev.org	c96d0561e1	Bug 334306 useless null check in nsDestroyJSPrincipals r=dbaron sr=dveditz a=mtschrep	2008-01-06 06:53:24 -08:00
mrbkap@gmail.com	32601361e2	Always throw an exception, even if we cannot reach a principal. bug 409514, r+sr+a=jst	2008-01-04 17:32:23 -08:00
jst@mozilla.org	41ea116da8	Fixing bug 410851. Expose a faster way of getting the subject principal, and use that from performance critical code. r+sr=mrbkap@gmail.com	2008-01-04 15:59:12 -08:00
mrbkap@gmail.com	ca0549b22f	XPCNativeWrappers can confuse the short-circuiting code. bug 409291, r+sr=jst a=beltzner	2007-12-21 11:06:29 -08:00
jst@mozilla.org	17c85fe694	Fixing bug 408009. Make doGetObjectPrincipal() faster. r+sr=bzbarsky@mit.edu, r+a=brendan@mozilla.org	2007-12-12 15:02:25 -08:00
philringnalda@gmail.com	2970c7f3be	Bug 400247 - remove XP_MAC deadcode in nsScriptSecurityManager.cpp, r+sr=bz, a=dsicore	2007-11-12 19:23:17 -08:00
tglek@mozilla.com	9c6d7f11a1	Bug 398574:Prbool fixes r=bz a=release drivers	2007-11-12 13:47:11 -08:00
jonas@sicking.cc	903acf3ee6	bug 394390: Don't report bogus warnings to the error console when using cross-site xmlhttprequest. Patch by Surya Ismail <suryaismail@gmail.com>, r/sr=sicking	2007-10-26 18:46:09 -07:00
bzbarsky@mit.edu	06f6b88b65	Make the "href" property of stylesheets reflect the original URI that was reflected to load the sheet. Bug 397427, r=dbaron,biesi, sr=dbaron, a=dsicore	2007-10-23 14:56:41 -07:00
bzbarsky@mit.edu	f213fb7ef5	Somewhat reduce the amount of memory an nsPrincipal allocates in the common case. Bug 397733, r+sr+a=jst	2007-09-28 07:31:04 -07:00
bzbarsky@mit.edu	8ff844ab55	Make the nsISerializable implementation of nsPrincipal actually work. This makes it possible to save principal objects to a stream and read them back. Bug 369566, r=dveditz+brendan, sr=jst, a=jst	2007-09-17 15:18:28 -07:00
dveditz@cruzio.com	8877000696	bugs 230606 and 209234: add options to restrict file: URI same-origin policies, r+sr=jst, blocking+=pavlov	2007-09-06 00:02:57 -07:00
bent.mozilla@gmail.com	fd28607fdf	Bug 304048 - Backing out patch due to TXUL regression.	2007-08-30 17:52:58 -07:00
bent.mozilla@gmail.com	dea35a2d77	Bug 304048 - "xpconnect getters/setters don't have principals until after they pass or fail their security check." Patch by jst, sr=bzbarsky, a=jst.	2007-08-28 17:16:21 -07:00
bzbarsky@mit.edu	3aad27711a	Add some sanity null-checks. Bug 387446, r=dveditz, sr+a=jst	2007-08-06 19:09:16 -07:00
sdwilsh@shawnwilsher.com	d8e0b2e9bf	Bustage fix	2007-07-11 14:20:11 -07:00
jwalden@mit.edu	e3c4baccae	Bug 348748 - Replace all instances of NS_STATIC_CAST and friends with C++ casts (and simultaneously bitrot nearly every patch in existence). r=bsmedberg on the script that did this. Tune in next time for Macro Wars: Episode II: Attack on the LL_* Macros.	2007-07-08 00:08:04 -07:00
bzbarsky@mit.edu	5eafaa49e5	Make security manager API more useful from script. Make more things ... scriptable, and add a scriptable method for testing whether a given principal is the system principal. Bug 383783, r=dveditz, sr=jst	2007-06-18 08:12:09 -07:00
bzbarsky@mit.edu	5289e91a54	Optimize immutability of codebase/domain a little bit. Bug 380475, r=dveditz, sr=biesi	2007-06-18 08:07:02 -07:00
bzbarsky@mit.edu	e9c47c9a9e	Make nsPrincipal::Equals compare codebases, not just certs, for certificate ... principals. Bug 369201, r=dveditz, sr=jst	2007-06-18 08:01:53 -07:00
benjamin@smedbergs.us	2e25a321f8	Bug 376636 - Building with gcc 4.3 and -pendatic fails due to extra semicolons, patch by Art Haas <ahaas@airmail.net>, rs=me	2007-04-23 07:21:53 -07:00
dbaron@dbaron.org	a7d9802f77	Remove GetKeyPointer method from nsTHashtable key types. b=374906 r=bsmedberg	2007-03-27 08:34:59 -07:00
dbaron@dbaron.org	85eb65ced4	Remove unused getKey callback from PLDHashTableOps/JSDHashTableOps. b=374906 r=bsmedberg	2007-03-27 08:33:38 -07:00
hg@mozilla.com	465265d0d4	Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,	2007-03-22 10:30:00 -07:00