gecko/content
Benoit Jacob 3f7d139bd9 Bug 656277 - Prevent loading WebGL textures from cross-domain images - r=bzbarsky, a=jpr
This blocks using cross-domain images and tainted canvases as WebGL textures, in response to a timing attack allowing to get approximations of cross domain images' pixel data.

This is known to break legitimate Web content (e.g. bug 662570), so it's sad to have to land this. In the hopefully near future, a way forward will be implemented allowing affected Web content to resume working: we will allow cross-domain textures that have CORS approval. This is being coordinated with other WebGL implementers on the WebGL mailing lists.
2011-06-07 13:47:54 -04:00
..
base Bug 658738 - remove event listeners in browser chrome tests 2011-06-07 16:45:26 +02:00
canvas Bug 656277 - Prevent loading WebGL textures from cross-domain images - r=bzbarsky, a=jpr 2011-06-07 13:47:54 -04:00
events Bug 319929, initialize accessibility.accesskeycausesactivation preference properly, r=smaug 2011-06-03 15:38:24 -04:00
html Bug 622357 - HttpChannel::SetCacheTokenCachedCharset() fails if cache-entry is unavailable. r=bz 2011-06-05 18:20:53 +02:00
mathml Bug 598833 part 12. Add dom::Element::UpdateState and use it in various places where elements update their own state. r=smaug,sdwilsh,mounir 2011-05-31 21:46:57 -04:00
media Bug 645398 - Substitute PR_(MAX|MIN|ABS|ROUNDUP) macro calls; r=roc 2011-06-02 14:56:50 +02:00
smil Bug 645398 - Substitute PR_(MAX|MIN|ABS|ROUNDUP) macro calls; r=roc 2011-06-02 14:56:50 +02:00
svg Bug 660762 - Remove --disable-mathml support. r=roc 2011-06-02 13:11:33 +02:00
test Bug 616999. Xpcshell manifest support; manifest files. r=ted, a=test-only 2011-05-20 11:54:01 -04:00
xbl Bug 614515 - Remove MOZ_SVG conditions. r=roc 2011-05-30 09:34:50 +02:00
xml Bug 660762 - Remove --disable-mathml support. r=roc 2011-06-02 13:11:33 +02:00
xslt Bug 645398 - Substitute PR_(MAX|MIN|ABS|ROUNDUP) macro calls; r=roc 2011-06-02 14:56:50 +02:00
xtf Bug 598833 part 12. Add dom::Element::UpdateState and use it in various places where elements update their own state. r=smaug,sdwilsh,mounir 2011-05-31 21:46:57 -04:00
xul Bug 645398 - Substitute PR_(MAX|MIN|ABS|ROUNDUP) macro calls; r=roc 2011-06-02 14:56:50 +02:00
Makefile.in Bug 660762 - Remove --disable-mathml support. r=roc 2011-06-02 13:11:33 +02:00