Commit Graph

68 Commits

Author SHA1 Message Date
Sid Stamm
efecf0c3c9 Bug 949533 - Remove files that test only x-csp (pre-spec-compliant) CSP implementation. r=grobinson
--HG--
extra : rebase_source : 54222391dd28863512cc0b6b0052904162a43180
2014-06-25 12:07:37 -07:00
Sid Stamm
a08dda43a7 Bug 949533 - Remove uses of x-content-security-policy and pre-spec-compliant parsing/enforcement (file changes). r=jst,grobinson
--HG--
extra : rebase_source : 0be7ad6dc09ef5b6c273748af87503b7c0d19d5b
2014-06-25 12:07:37 -07:00
Jim Blandy
b6b202b6bb Bug 914753: Make Emacs file variable header lines correct, or at least consistent. DONTBUILD r=ehsan
The -*- file variable lines -*- establish per-file settings that Emacs will
pick up. This patch makes the following changes to those lines (and touches
nothing else):

 - Never set the buffer's mode.

   Years ago, Emacs did not have a good JavaScript mode, so it made sense
   to use Java or C++ mode in .js files. However, Emacs has had js-mode for
   years now; it's perfectly serviceable, and is available and enabled by
   default in all major Emacs packagings.

   Selecting a mode in the -*- file variable line -*- is almost always the
   wrong thing to do anyway. It overrides Emacs's default choice, which is
   (now) reasonable; and even worse, it overrides settings the user might
   have made in their '.emacs' file for that file extension. It's only
   useful when there's something specific about that particular file that
   makes a particular mode appropriate.

 - Correctly propagate settings that establish the correct indentation
   level for this file: c-basic-offset and js2-basic-offset should be
   js-indent-level. Whatever value they're given should be preserved;
   different parts of our tree use different indentation styles.

 - We don't use tabs in Mozilla JS code. Always set indent-tabs-mode: nil.
   Remove tab-width: settings, at least in files that don't contain tab
   characters.

 - Remove js2-mode settings that belong in the user's .emacs file, like
   js2-skip-preprocessor-directives.
2014-06-24 22:12:07 -07:00
Josh Matthews
962b5937d0 Bug 902271 - Make StorageInputStream serializable cross-process. r=bent 2014-06-17 11:52:59 +01:00
Nathan Froyd
191e8718e7 Bug 1018414 - skip test_error_codes.js on OS X; r=smaug 2014-06-02 15:27:16 -04:00
Garrett Robinson
2c65b46fc6 Bug 971341: Fix infinite tab loading due to missing characters in CSP's path regexes r=sstamm 2014-04-02 10:57:35 -07:00
Antonio M. Amaya
749d1bb2d8 Bug 965273 - CSP: Fix serialization and deserialization and add support for the {} characters on the host name. r=sstamm 2014-01-30 22:22:21 +01:00
Christoph Kerschbaumer
5bf706f496 Bug 916054 - XPCShell tests for URLs with path. r=grobinson 2013-10-15 16:14:35 -07:00
Sid Stamm
63be537c78 Bug 911547 - make nsIContentSecurityPolicy serializable and trigger read/write from nsPrincipal. r=jst,grobinson
--HG--
extra : rebase_source : 3e1846e15538729f3c94f5c1470959b5d7b31f0f
2014-01-23 15:34:59 -08:00
Sid Stamm
11e26e4568 Bug 843311 - update CSP report-uri parsing to be spec compliant. r=grobinson 2014-01-24 10:24:08 -08:00
Yeuk Hon Wong
7a136c4630 Bug 938652 - CSP directives and source expressions should do case-insensitive matching and comparison. r=geekboy 2014-01-22 13:18:55 -08:00
Trevor Saunders
64d5d5a8ed bug 331376 - merge nsIDocShellTreeNode into nsIDocShellTreeItem r=smaug 2014-01-06 17:34:15 -05:00
Josh Matthews
b5388856f6 Backed out changeset 629aa51ebfaf 2014-01-03 21:56:51 -05:00
Josh Matthews
2efd773388 Bug 902271 - Make StorageInputStream serializable cross-process. r=bent 2013-11-05 18:44:21 -05:00
Garrett Robinson
30fd688f87 Bug 924708 - Fix regression of report-only CSP's that use policy-uri. r=sstamm 2013-10-28 11:25:16 -07:00
Gregory Szorc
160a20817c Bug 901990 - Part 2: Upgrade xpcshell manifests; r=ted
--HG--
rename : toolkit/mozapps/extensions/test/xpcshell-unpack/head_unpack.js => toolkit/mozapps/extensions/test/xpcshell/head_unpack.js
2013-09-24 11:50:08 -07:00
Sid Stamm
02d9a2a3e2 bug 836922 - (CSP) remove intersectWith once multiple policies are supported. r=grobinson 2013-09-12 09:25:33 -07:00
Sid Stamm
3004080c1a bug 836922 - support mulitiple CSP policies at the same time. r=jst,grobinson 2013-09-12 09:25:32 -07:00
Mihnea Dobrescu-Balaur
e56e545704 Bug 887480 - Make the content/base xpcshell tests use dynamic httpd ports so they can be run concurrently. r=bz 2013-07-15 17:13:37 -07:00
Sid Stamm
84c33d2241 Bug 780978 - remove makeExplicit() from CSPUtils.jsm. (r=imelven) 2013-06-21 16:43:13 -07:00
Sid Stamm
889d27ff4e Bug 764937 - make sure CSP 1.0 compliant parser infers "default-src *" when a default-src isn't specified (r=tanvi) 2013-06-21 16:43:07 -07:00
Sid Stamm
525de67a06 Bug 687086 - change nsIContentSecurityPolicy to return two values, shouldBlock and shouldReportViolation. r=bz 2012-10-15 13:54:58 -07:00
Sid Stamm
246e310e43 Bug 779918 - disregard auth credentials in URLs when doing CSP policy checks. (r=imelven) 2013-02-01 11:51:54 -08:00
Ian Melven
3f95059c6d Bug 832193 - Content Security Policy: a source of *.something.com is mistakenly interpreted as a source of http://*:80 (r=sstamm) 2013-02-01 10:53:20 -08:00
Sid Stamm
8e0767388d Bug 746978 - sync CSP directive parsing and directive names with w3c CSP 1.0 spec - Part 3 (r=jst) 2013-01-09 10:57:05 -08:00
Ian Melven
50e7b11a0d Bug 746978 - sync CSP directive parsing and directive names with w3c spec - Part 1 (r=sstamm) 2013-01-09 10:57:04 -08:00
Ian Melven
4b9af7fd3d Bug 783049 - CSP : use existing/old parser for X-Content-Security-Policy header, new/CSP 1.0 spec compliant parser for Content-Security-Policy header - Part 3 (r=bz) 2013-01-09 10:57:04 -08:00
Mark Goodwin
38b8c56de1 Bug 770099 - Send CSP policy and report information to Web Console (Part 1); r=dveditz,msucan,jwalker 2012-10-01 10:10:29 +01:00
Lucas Adamski
9c9fdf0830 Bug 634778 - Warn and skip when duplicate CSP directives are detected. (r=geekboy) 2012-09-19 13:41:38 -07:00
Adam Dane [:hobophobe]
fe6d81410d Bug 87717 - Allow offline mode to connect to loopback r=mcmanus sr=cbiesinger 2012-09-17 18:45:10 -05:00
Marshall Moutenot
76cb1e605b Bug 784315 - fix CSP parser to handle single-token hosts via regex correctly. r=geekboy 2012-08-27 08:51:02 -07:00
Sid Stamm
7ab0ecade7 Bug 783497 - Fix CSPSource expression intersection to resolve "self" data. (r=jst) 2012-08-17 15:03:24 -07:00
Marshall Moutenot
bc7078aad0 Bug 737064 - sync CSP source-expression parsing with w3c spec (r=geekboy)
--HG--
extra : rebase_source : 895ec1b90e688f14e5c19af1411c4b2631cbc818
2012-08-16 11:02:17 -07:00
Mark Capella
9aedb93f44 Bug 772272 - Remove do_load_httpd_js from xpcshell tests, Misc Folders, r=ted
Content, DOM, Image, JS, RDF, and URILoader folders
2012-08-14 10:06:17 -04:00
Sid Stamm
94bb501bd7 Bug 634773 - fix CSPSourceList.equals so 'none' and * are not equal. r=jst 2012-05-23 16:35:37 -07:00
Gervase Markham
638c878b13 Bug 759095 - upgrade license to MPL 2, and other licensing cleanups.
--HG--
extra : rebase_source : da55a4937383eda2baf7c9a362501da8ee664146
2012-05-29 16:52:43 +01:00
Sid Stamm
643bfbcc0b Bug 612391 - Convert CSP violation reporting from XHR to nsIUploadChannel. r=jonas 2012-05-23 16:00:42 -07:00
Gervase Markham
87620f5676 Bug 716478 - update licence to MPL 2. 2012-05-21 12:12:37 +01:00
Tanvi Vyas
0a66ad886a bug 570505 - fix csp to avoid creating strings from URIs and un-hose test_bug558431. r=dveditz 2012-04-17 06:16:05 -07:00
Makoto Kato
721f0bcd98 Bug 737966 - Evaluating nsIXMLHttpRequest.responseText throws on certain parsing errors. r=sicking 2012-04-04 20:59:02 +09:00
Sid Stamm
f0191803f3 Bug 672961 - CSP blocks domains incorrectly when on a site with non-standard port. r=mrbkap 2012-03-21 19:52:24 -04:00
Masatoshi Kimura
efbbd9eb31 Bug 701787 - Part 2: Tests. r=smaug. 2011-12-08 15:55:20 +02:00
Henri Sivonen
5456f0905e Back out bug 701787 due to orangeness conflict with tests added in bug 664179. 2011-12-07 15:11:47 +02:00
Masatoshi Kimura
c27fbd8836 Bug 701787 - Part 2: Tests. r=smaug. 2011-12-07 13:30:19 +02:00
Kyle Huey
d822544c8a Bug 687332: Fix up update tests. 2011-09-29 12:06:36 -04:00
Josh Matthews
87d0248899 Bug 674048 - Check the correct condition when setting a header on an XHR. r=sicking 2011-07-25 18:08:44 -04:00
Josh Matthews
03e38d47bb Bug 553888 - Duplicate XHR request headers when following redirect. r=sicking 2010-03-22 14:52:35 +13:00
Joel Maher
6993636556 Bug 616999. Xpcshell manifest support; manifest files. r=ted, a=test-only 2011-05-20 11:54:01 -04:00
Brandon Sterne
23fea2663f Tests for Bug 631040 - parse CSP default-src as equivalent to allow, r=jst,geekboy 2011-04-10 11:23:23 -07:00
Brandon Sterne
489b9b523d Bug 558431 - Make fetching CSP policy-uri asyn, r=jst, a=blocking-betaN 2011-02-15 09:05:02 -08:00