8 Commits

Author	SHA1	Message	Date
Blake Kaplan	5adf556d30	Bug 396851 - Check to see if we're UniversalXPConnect-enabled to allow privileged web pages to unwrap XOWs. r+sr=bzbarsky	2008-10-22 13:15:22 -07:00
jonas@sicking.cc	2558cdb12f	Followup patch to bug 425201. Make sure to throw if xhr.open is called with an illegal uri. Also restore the nsIScriptSecurityManager.CheckConnect API as soap still uses it	2008-04-18 10:35:55 -07:00
jonas@sicking.cc	9b874a6992	Allow XMLHttpRequest and document.load load files from subdirectories. r/sr=dveditz	2008-04-08 17:38:12 -07:00
bzbarsky@mit.edu	5383803699	Finally kill off CheckSameOriginPrincipal, fix remaining callers to do the checks they really want to be doing. Fix screw-up in nsPrincipal::Equals if one principal has a cert and the other does not. Bug 418996, r=mrbkap,dveditz, sr=jst	2008-03-18 14:14:49 -07:00
jst@mozilla.org	41ea116da8	Fixing bug 410851. Expose a faster way of getting the subject principal, and use that from performance critical code. r+sr=mrbkap@gmail.com	2008-01-04 15:59:12 -08:00
jonas@sicking.cc	903acf3ee6	bug 394390: Don't report bogus warnings to the error console when using cross-site xmlhttprequest. Patch by Surya Ismail <suryaismail@gmail.com>, r/sr=sicking	2007-10-26 18:46:09 -07:00
bzbarsky@mit.edu	5eafaa49e5	Make security manager API more useful from script. Make more things ... scriptable, and add a scriptable method for testing whether a given principal is the system principal. Bug 383783, r=dveditz, sr=jst	2007-06-18 08:12:09 -07:00
hg@mozilla.com	465265d0d4	Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,	2007-03-22 10:30:00 -07:00