Commit Graph

62 Commits

Author SHA1 Message Date
Antonio M. Amaya
749d1bb2d8 Bug 965273 - CSP: Fix serialization and deserialization and add support for the {} characters on the host name. r=sstamm 2014-01-30 22:22:21 +01:00
Christoph Kerschbaumer
5bf706f496 Bug 916054 - XPCShell tests for URLs with path. r=grobinson 2013-10-15 16:14:35 -07:00
Sid Stamm
63be537c78 Bug 911547 - make nsIContentSecurityPolicy serializable and trigger read/write from nsPrincipal. r=jst,grobinson
--HG--
extra : rebase_source : 3e1846e15538729f3c94f5c1470959b5d7b31f0f
2014-01-23 15:34:59 -08:00
Sid Stamm
11e26e4568 Bug 843311 - update CSP report-uri parsing to be spec compliant. r=grobinson 2014-01-24 10:24:08 -08:00
Yeuk Hon Wong
7a136c4630 Bug 938652 - CSP directives and source expressions should do case-insensitive matching and comparison. r=geekboy 2014-01-22 13:18:55 -08:00
Trevor Saunders
64d5d5a8ed bug 331376 - merge nsIDocShellTreeNode into nsIDocShellTreeItem r=smaug 2014-01-06 17:34:15 -05:00
Josh Matthews
b5388856f6 Backed out changeset 629aa51ebfaf 2014-01-03 21:56:51 -05:00
Josh Matthews
2efd773388 Bug 902271 - Make StorageInputStream serializable cross-process. r=bent 2013-11-05 18:44:21 -05:00
Garrett Robinson
30fd688f87 Bug 924708 - Fix regression of report-only CSP's that use policy-uri. r=sstamm 2013-10-28 11:25:16 -07:00
Gregory Szorc
160a20817c Bug 901990 - Part 2: Upgrade xpcshell manifests; r=ted
--HG--
rename : toolkit/mozapps/extensions/test/xpcshell-unpack/head_unpack.js => toolkit/mozapps/extensions/test/xpcshell/head_unpack.js
2013-09-24 11:50:08 -07:00
Sid Stamm
02d9a2a3e2 bug 836922 - (CSP) remove intersectWith once multiple policies are supported. r=grobinson 2013-09-12 09:25:33 -07:00
Sid Stamm
3004080c1a bug 836922 - support mulitiple CSP policies at the same time. r=jst,grobinson 2013-09-12 09:25:32 -07:00
Mihnea Dobrescu-Balaur
e56e545704 Bug 887480 - Make the content/base xpcshell tests use dynamic httpd ports so they can be run concurrently. r=bz 2013-07-15 17:13:37 -07:00
Sid Stamm
84c33d2241 Bug 780978 - remove makeExplicit() from CSPUtils.jsm. (r=imelven) 2013-06-21 16:43:13 -07:00
Sid Stamm
889d27ff4e Bug 764937 - make sure CSP 1.0 compliant parser infers "default-src *" when a default-src isn't specified (r=tanvi) 2013-06-21 16:43:07 -07:00
Sid Stamm
525de67a06 Bug 687086 - change nsIContentSecurityPolicy to return two values, shouldBlock and shouldReportViolation. r=bz 2012-10-15 13:54:58 -07:00
Sid Stamm
246e310e43 Bug 779918 - disregard auth credentials in URLs when doing CSP policy checks. (r=imelven) 2013-02-01 11:51:54 -08:00
Ian Melven
3f95059c6d Bug 832193 - Content Security Policy: a source of *.something.com is mistakenly interpreted as a source of http://*:80 (r=sstamm) 2013-02-01 10:53:20 -08:00
Sid Stamm
8e0767388d Bug 746978 - sync CSP directive parsing and directive names with w3c CSP 1.0 spec - Part 3 (r=jst) 2013-01-09 10:57:05 -08:00
Ian Melven
50e7b11a0d Bug 746978 - sync CSP directive parsing and directive names with w3c spec - Part 1 (r=sstamm) 2013-01-09 10:57:04 -08:00
Ian Melven
4b9af7fd3d Bug 783049 - CSP : use existing/old parser for X-Content-Security-Policy header, new/CSP 1.0 spec compliant parser for Content-Security-Policy header - Part 3 (r=bz) 2013-01-09 10:57:04 -08:00
Mark Goodwin
38b8c56de1 Bug 770099 - Send CSP policy and report information to Web Console (Part 1); r=dveditz,msucan,jwalker 2012-10-01 10:10:29 +01:00
Lucas Adamski
9c9fdf0830 Bug 634778 - Warn and skip when duplicate CSP directives are detected. (r=geekboy) 2012-09-19 13:41:38 -07:00
Adam Dane [:hobophobe]
fe6d81410d Bug 87717 - Allow offline mode to connect to loopback r=mcmanus sr=cbiesinger 2012-09-17 18:45:10 -05:00
Marshall Moutenot
76cb1e605b Bug 784315 - fix CSP parser to handle single-token hosts via regex correctly. r=geekboy 2012-08-27 08:51:02 -07:00
Sid Stamm
7ab0ecade7 Bug 783497 - Fix CSPSource expression intersection to resolve "self" data. (r=jst) 2012-08-17 15:03:24 -07:00
Marshall Moutenot
bc7078aad0 Bug 737064 - sync CSP source-expression parsing with w3c spec (r=geekboy)
--HG--
extra : rebase_source : 895ec1b90e688f14e5c19af1411c4b2631cbc818
2012-08-16 11:02:17 -07:00
Mark Capella
9aedb93f44 Bug 772272 - Remove do_load_httpd_js from xpcshell tests, Misc Folders, r=ted
Content, DOM, Image, JS, RDF, and URILoader folders
2012-08-14 10:06:17 -04:00
Sid Stamm
94bb501bd7 Bug 634773 - fix CSPSourceList.equals so 'none' and * are not equal. r=jst 2012-05-23 16:35:37 -07:00
Gervase Markham
638c878b13 Bug 759095 - upgrade license to MPL 2, and other licensing cleanups.
--HG--
extra : rebase_source : da55a4937383eda2baf7c9a362501da8ee664146
2012-05-29 16:52:43 +01:00
Sid Stamm
643bfbcc0b Bug 612391 - Convert CSP violation reporting from XHR to nsIUploadChannel. r=jonas 2012-05-23 16:00:42 -07:00
Gervase Markham
87620f5676 Bug 716478 - update licence to MPL 2. 2012-05-21 12:12:37 +01:00
Tanvi Vyas
0a66ad886a bug 570505 - fix csp to avoid creating strings from URIs and un-hose test_bug558431. r=dveditz 2012-04-17 06:16:05 -07:00
Makoto Kato
721f0bcd98 Bug 737966 - Evaluating nsIXMLHttpRequest.responseText throws on certain parsing errors. r=sicking 2012-04-04 20:59:02 +09:00
Sid Stamm
f0191803f3 Bug 672961 - CSP blocks domains incorrectly when on a site with non-standard port. r=mrbkap 2012-03-21 19:52:24 -04:00
Masatoshi Kimura
efbbd9eb31 Bug 701787 - Part 2: Tests. r=smaug. 2011-12-08 15:55:20 +02:00
Henri Sivonen
5456f0905e Back out bug 701787 due to orangeness conflict with tests added in bug 664179. 2011-12-07 15:11:47 +02:00
Masatoshi Kimura
c27fbd8836 Bug 701787 - Part 2: Tests. r=smaug. 2011-12-07 13:30:19 +02:00
Kyle Huey
d822544c8a Bug 687332: Fix up update tests. 2011-09-29 12:06:36 -04:00
Josh Matthews
87d0248899 Bug 674048 - Check the correct condition when setting a header on an XHR. r=sicking 2011-07-25 18:08:44 -04:00
Josh Matthews
03e38d47bb Bug 553888 - Duplicate XHR request headers when following redirect. r=sicking 2010-03-22 14:52:35 +13:00
Joel Maher
6993636556 Bug 616999. Xpcshell manifest support; manifest files. r=ted, a=test-only 2011-05-20 11:54:01 -04:00
Brandon Sterne
23fea2663f Tests for Bug 631040 - parse CSP default-src as equivalent to allow, r=jst,geekboy 2011-04-10 11:23:23 -07:00
Brandon Sterne
489b9b523d Bug 558431 - Make fetching CSP policy-uri asyn, r=jst, a=blocking-betaN 2011-02-15 09:05:02 -08:00
Sid Stamm
304fdb34e1 Bug 548949 - make CSP parse hostless schemes properly, r=dveditz, a=jst 2010-10-28 15:59:30 -07:00
Dan Witte
3b44c6986f Bug 595305 - Factor cookie third-party URI code into separate API. Tests. r=bent, a=betaN+ 2010-10-19 09:37:03 -07:00
Sid Stamm
9d063f0436 Bug 594446 - CSP report-uri should accept relative URIs [r=jst a=blocking2.0: beta7+] 2010-09-23 15:38:47 -07:00
Sid Stamm
c3f669047a Bug 558429 - CSP should accept relative policy-uri's, r=dveditz, a=jst 2010-08-25 08:35:27 -07:00
Sid Stamm
f897b89906 Bug 555068 - make CSP frame-ancestors be explictly opt-in, r=dveditz 2010-06-09 09:48:42 -07:00
Brandon Sterne
d1eea59b14 Bug 561460 - fix CSP xpcshell-test, r=sstamm, a=dholbert_sheriff 2010-04-23 15:06:01 -07:00