Commit Graph

120 Commits

Author SHA1 Message Date
Blake Kaplan
79a79a0e55 Bug 504021 - Add an API to the script security manager to clamp principals for a given context. r=jst/bzbarsky sr=dveditz 2009-08-21 18:20:20 -07:00
Igor Bukanov
6bfe4771cc bug 513190 - avoiding jsint tagging of the private slot data. r=jorendorff 2009-09-05 19:59:11 +04:00
Benjamin Smedberg
2e9438fd2f Followup to bug 398573 - remove REQUIRES from the tree since it is no longer used... automatically generated patch, rs=ted 2009-08-25 08:59:31 -07:00
Taras Glek
17420ddd67 Bug 468011 - Combine all chrome into browser+toolkit jars. r=bsmedberg 2009-08-14 09:32:40 -07:00
Blake Kaplan
3f98edd6fe Bug 502959 - Restore code to make caps allow wrapping same-origin wrappedjs objects. r=jst sr=bzbarsky 2009-08-06 20:26:33 -07:00
Boris Zbarsky
1486bf6f66 Bug 495176. Improve security error reporting when document.domain is involved. r=jst,pike sr=jst 2009-07-26 21:27:33 -04:00
David Zbarsky
aca9dc4bae Bug 392526. Some callers of nsID::ToString use a mismatched allocator to free the string. r=bsmedberg 2009-07-29 13:54:44 -04:00
Boris Zbarsky
b63722a57d Backed out changeset b55e7e3c0bfb to see whether bug 495176 might be causing the WinXP Txul regression
--HG--
extra : rebase_source : c854c6a8afad67c583ff08e23bbac27cbf99c0cd
2009-07-28 14:34:01 -04:00
Boris Zbarsky
0dc99e9f40 Backed out changeset 9d5e247b5052 to see whether bug 495176 might be causing
the WinXP Txul regression.

--HG--
extra : rebase_source : 41a0fe73ec43dff97ada391db29dc121fb677403
2009-07-28 14:32:45 -04:00
Boris Zbarsky
a920f6147b Fixing crashes during tests by null-checking the principal URI as appropriate. Bug 495176 2009-07-26 23:21:01 -04:00
Boris Zbarsky
13672ba2e1 Bug 495176. Improve security error reporting when document.domain is involved. r=jst,pike sr=jst 2009-07-26 21:27:33 -04:00
Peter Van der Beken
ca8ccf47e0 Fix for bug 482788 (Lightweight DOM wrappers). r=jst, sr=mrbkap. 2009-05-12 22:20:42 +02:00
Johnny Stenback
a511964116 Fixing bug 442399. Remove LiveConnect from the tree. r=joshmoz@gmail.com, bclary@bclary.com, sr=brendan@mozilla.org 2009-06-30 15:55:16 -07:00
Arpad Borsos
497b2e227d Back out b8e531a6c961 (Bug 474369), it really did cause the windows dhtml regression
--HG--
extra : rebase_source : 568114bcfc5a7710d9e2c2fe5e234fa190bebba1
2009-06-16 14:38:51 +02:00
Olli Pettay
cc228b8e8a Bug 489561 - nsPrincipal should cache nsIPrefBranch and codebase_principal_support pref, r+sr=dveditz, +comments from bz 2009-06-16 14:00:06 +03:00
Arpad Borsos
ef105af6ce Bug 474369 - get rid of nsVoidArray, remaining parts; r=bz, sr=dbaron 2009-05-07 17:15:26 +02:00
Phil Ringnalda
737a6446f9 Bug 495021 - CAPS unconditionally builds tests, r=shaver 2009-06-13 11:53:38 -07:00
Blake Kaplan
0e65edf009 Bug 441714 - Protect caps against SJOWs. r+sr=dveditz 2009-06-12 14:38:05 -07:00
Arpad Borsos
cd1887abfd Back out bug 474369, suspected of causing dhtml and tp3 regression 2009-06-12 23:20:55 +02:00
Arpad Borsos
3773b464cf Bug 474369 - get rid of nsVoidArray, remaining parts; r=bz, sr=dbaron
--HG--
extra : rebase_source : 2f40cba97555521222512c7cd793c2a2adcca333
2009-05-07 17:15:26 +02:00
Boris Zbarsky
74f23ff279 Bug 493495 followup. Just cut off the recursion if it gets too deep. r+sr=mrbkap 2009-05-21 15:46:05 -04:00
Boris Zbarsky
9159839164 Bug 493495. Protect against recursive attempts to report a security exception in cases when the URI objects involved can't be accessed due to being implemented as a JS component. r+sr=mrbkap 2009-05-20 21:49:42 -04:00
Boris Zbarsky
f45f0ba98e Bug 410486. Fix test failures due to the exception message getting truncated. 2009-05-20 00:57:37 -04:00
timeless@mozdev.org
eb1e7164ee Bug 410486. Make sure to be in a request when reporting a pending exception. r=dveditz, sr=mrbkap. 2009-05-19 22:11:01 -04:00
Dave Townsend
99034adf24 Backed out changeset 461d728271d1 2009-05-19 13:51:18 +01:00
Arpad Borsos
584155ddb7 Bug 474369 - get rid of nsVoidArray, remaining parts; r=bz, sr=dbaron 2009-05-07 17:15:26 +02:00
Blake Kaplan
4f88c00c6c Bug 493074 - Compute fewer things to try to clear up a performance regression. r+sr=jst 2009-05-14 15:17:56 -07:00
Blake Kaplan
3bab9bf56c Bug 483672 - Give regular JS objects that have been reflected into C++ a security policy that follows the same-origin model. Also teach caps about "same origin" for these cases. r=jst sr=bzbarsky 2009-05-13 15:01:01 -07:00
L. David Baron
8c38aba811 Switch HTML mochitests from using MochiKit.js to packed.js. (Bug 490955) r=sayrer 2009-05-06 13:46:04 -07:00
Blake Kaplan
54734b9d0b Bug 475864 - Move native anonymous content checks into a wrapper so that quickstubs don't sidestep them. r=jst sr=bzbarsky 2009-04-23 00:21:22 -07:00
Mook
9ad88404f5 Bug 472032 - [win64] sizeof(long) != sizeof(void*) assertion in nsScriptSecurityManager.cpp; changed SecurityLevel to use PRWord, clarified assertion on the protected code; r+sr=dveditz 2009-02-26 18:31:17 +01:00
Dan Mosedale
56f33790dd Remove MailNews special casing from nsScriptSecurityManager (bug 374577), r+sr=bzbarsky 2009-02-17 20:32:57 -08:00
Daniel Holbert
2a7d88e05a Bug 473236 - Remove executable bit from files that don't need it. (Only changes file mode -- no code changes.) r=bsmedberg 2009-01-21 22:55:08 -08:00
timeless@mozdev.org
caf7b1d646 Bug 412743 nsScriptSecurityManager::Init shouldn't treat failure of InitPrefs as fatal
r=mrbkap sr=dveditz
2009-01-07 20:42:15 -08:00
timeless@mozdev.org
9d1932e7d2 Bug 470804 crash [@ NS_GetInnermostURI - nsScriptSecurityManager::CheckLoadURIWithPrincipal], r=bz, sr=dveditz 2009-01-01 15:45:23 -08:00
Phil Ringnalda
dd512bcb35 Crashtest for Bug 470804 crash [@ NS_GetInnermostURI - nsScriptSecurityManager::CheckLoadURIWithPrincipal], r=bz 2009-01-01 15:45:23 -08:00
Tyler Downer
c64b359146 Bug 471146 - remove old CAPS readme (already on devmo); r=brendan 2009-01-01 14:56:44 +01:00
Boris Zbarsky
e801383a04 Bug 460425. Do better security checks during redirection. r=sicking,biesi, sr=sicking 2008-11-25 20:50:04 -05:00
Phil Ringnalda
bbe7e1d08a Bug 461888 - Remove unused PACKAGE_FILE and PACKAGE_VARS and .pkg files, mozilla-central part, r=bsmedberg 2008-11-03 19:46:28 -08:00
Blake Kaplan
5adf556d30 Bug 396851 - Check to see if we're UniversalXPConnect-enabled to allow privileged web pages to unwrap XOWs. r+sr=bzbarsky 2008-10-22 13:15:22 -07:00
Ben Newman
17eeddcb85 Bug 460124. Remove no-longer-needed code, since now we calculate hash values for nsPrincipals in a sane way. r+sr=bzbarsky 2008-10-16 10:56:51 -04:00
Igor Bukanov
59702db0da Bug 459656 - Implementing nsIThreadJSContextStack in nsXPConnect. r+sr=mrbkap 2008-10-14 16:16:25 +02:00
Arpad Borsos
8b11d938d2 Bug 456388 - Remove PR_STATIC_CALLBACK and PR_CALLBACK(_DECL) from the tree; r+sr=brendan 2008-10-10 17:04:34 +02:00
Blake Kaplan
64c490b3ef Bug 457299 - nsScriptSecurityManager doesn't suspend the request on the current context when it starts using the safe context. r+sr=bzbarsky 2008-10-08 15:05:25 -07:00
Ben Newman
fdede899e6 Bug 454850. Make sure that whenever nsPrincipal::Equals would return true for a pair of principals their nsPrincipal::GetHashValue returns are also equal. r+sr=bzbarsky 2008-10-08 09:16:27 -04:00
David Bienvenu
aff330072d bug 453943, always disable js for mailnews for 3.0 b1, don't load pref, r=bz, sr=dmose 2008-09-21 15:21:07 -07:00
David Bienvenu
4df8ee2c63 temporarily disable js in mailnews for 3.0 b1, r=bz, sr=dmose 453943 2008-09-20 08:14:14 -07:00
Arpad Borsos
9b6f558fee Bug 398946 - Remove JS_STATIC_DLL_CALLBACK and JS_DLL_CALLBACK from the tree; r=(benjamin + bent.mozilla) 2008-09-07 00:21:43 +02:00
Ben Turner
cb1f4f55af Bug 451731 - "Update caps, dom, xpconnect for Bug 451729 (checkObjectAccess moving to the JSContext)". r+sr=jst. 2008-09-05 16:26:04 -07:00
Ben Turner
b83ece5423 Bug 453720 - "Caps should assert when scripts do not contain principals". r+sr=mrbkap. 2008-09-04 15:52:20 -07:00