Commit graph

100 commits

Author SHA1 Message Date
Dana Keeler
ef0a88c6f2 Bug 1715142 - introduce nsIPublicKeyPinningService and remove 'type' parameter from nsISiteSecurityService r=rmf,necko-reviewers
The public key pinning implementation is much less complex than the HSTS
implementation, and only needs a small subset of the parameters of the latter.
Furthermore, the information it relies on is static, and so is safe to access
from content processes. This patch separates the two implementations, thus
simplifying both of them and avoiding some unnecessary IPC calls in the
process.

Differential Revision: https://phabricator.services.mozilla.com/D117096
2021-06-12 01:12:25 +00:00
Butkovits Atila
e4394b27a2 Backed out 3 changesets (bug 1715142) for causing build bustages. CLOSED TREE
Backed out changeset 7e67994f6a65 (bug 1715142)
Backed out changeset f58d5156f332 (bug 1715142)
Backed out changeset f8a7bd4519c6 (bug 1715142)
2021-06-11 21:20:02 +03:00
Dana Keeler
f84faf1bf5 Bug 1715142 - introduce nsIPublicKeyPinningService and remove 'type' parameter from nsISiteSecurityService r=rmf,necko-reviewers
The public key pinning implementation is much less complex than the HSTS
implementation, and only needs a small subset of the parameters of the latter.
Furthermore, the information it relies on is static, and so is safe to access
from content processes. This patch separates the two implementations, thus
simplifying both of them and avoiding some unnecessary IPC calls in the
process.

Differential Revision: https://phabricator.services.mozilla.com/D117096
2021-06-11 17:58:19 +00:00
Iulian Moraru
955a3ab572 Backed out 2 changesets (bug 1715142) for causing marionette failures on test_navigation.py and mochitest failures on browser_setIgnoreCertificateErrors.js. CLOSED TREE
Backed out changeset 83206685ca0b (bug 1715142)
Backed out changeset ab3060a5f69e (bug 1715142)
2021-06-11 02:45:34 +03:00
Dana Keeler
f3c620e4c3 Bug 1715142 - introduce nsIPublicKeyPinningService and remove 'type' parameter from nsISiteSecurityService r=rmf,necko-reviewers
The public key pinning implementation is much less complex than the HSTS
implementation, and only needs a small subset of the parameters of the latter.
Furthermore, the information it relies on is static, and so is safe to access
from content processes. This patch separates the two implementations, thus
simplifying both of them and avoiding some unnecessary IPC calls in the
process.

Differential Revision: https://phabricator.services.mozilla.com/D117096
2021-06-10 22:13:32 +00:00
Paul Zuehlcke
145b580237 Bug 1709623 Removed PushNotificationsCleaner TODO and added test. r=johannh
Differential Revision: https://phabricator.services.mozilla.com/D115830
2021-06-02 14:09:32 +00:00
Paul Zuehlcke
5c0b9214f8 Bug 1709624 - Add PermissionsCleaner deleteByBaseDomain. r=johannh
Differential Revision: https://phabricator.services.mozilla.com/D115688
2021-06-02 13:57:51 +00:00
R. Martinho Fernandes
7ea1bcd018 Bug 1597600 - make certificate overrides depend on origin attributes r=keeler,geckoview-reviewers,smaug,agi
Differential Revision: https://phabricator.services.mozilla.com/D91962
2021-06-01 06:55:07 +00:00
Dorel Luca
211b017ce9 Backed out changeset 089c88b9657b (bug 1597600) for XPCshell failures in toolkit/components/cleardata/tests/unit/test_certs.js. CLOSED TREE 2021-05-29 23:31:00 +03:00
R. Martinho Fernandes
a9e55ea7fc Bug 1597600 - make certificate overrides depend on origin attributes r=keeler,geckoview-reviewers,smaug,agi
Differential Revision: https://phabricator.services.mozilla.com/D91962
2021-05-29 19:34:35 +00:00
Paul Zuehlcke
48a7a1ad98 Bug 1705033 - Added ImageCacheCleaner deleteByBaseDomain. r=tnikkel,timhuang
Differential Revision: https://phabricator.services.mozilla.com/D115621
2021-05-27 12:37:04 +00:00
Paul Zuehlcke
5c8aef557a Bug 1710818 - Updated imgLoader removeEntriesFromPrincipal to clear entries for all processes. r=tnikkel
Differential Revision: https://phabricator.services.mozilla.com/D115620
2021-05-27 12:37:04 +00:00
Paul Zuehlcke
48ef5cd14b Bug 1709621 - Added CertCleaner deleteByBaseDomain. r=johannh,keeler
Differential Revision: https://phabricator.services.mozilla.com/D114762
2021-05-27 12:37:04 +00:00
Paul Zuehlcke
8e5f5e55fc Bug 1705032 - Added CSSCacheCleaner deleteByBaseDomain. r=emilio,timhuang
Differential Revision: https://phabricator.services.mozilla.com/D114518
2021-05-27 12:37:03 +00:00
Paul Zuehlcke
c9d1ce31ad Bug 1705035 - Added SecuritySettingsCleaner deleteByBaseDomain. r=johannh,keeler
Differential Revision: https://phabricator.services.mozilla.com/D112642
2021-05-26 13:49:37 +00:00
Paul Zuehlcke
550c3ecf40 Bug 1705029 - Added CookieCleaner deleteByBaseDomain. r=johannh,preferences-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D113496
2021-05-26 13:49:37 +00:00
Paul Zuehlcke
7cc2b93139 Bug 1705028 - Added ClearDataService deleteDataFromBaseDomain. r=johannh
Differential Revision: https://phabricator.services.mozilla.com/D113494
2021-05-26 13:49:36 +00:00
Valentin Gosu
5afdc02366 Bug 1694662 - Remove Appcachestorage & oldwrappers r=necko-reviewers,kershaw
Differential Revision: https://phabricator.services.mozilla.com/D106455
2021-04-30 07:20:24 +00:00
Valentin Gosu
5c900317ff Bug 1694662 - Remove OfflineAppCacheHelper r=preferences-reviewers,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D106445
2021-04-30 07:20:20 +00:00
David Parks
9c8a6dec0d Bug 1682030 - Remove NPAPI support from ClearDataService. r=baku
Removes NPAPI plugin support from the ClearDataService as part of removing all of NPAPI.

Differential Revision: https://phabricator.services.mozilla.com/D107146
2021-04-06 19:28:13 +00:00
Csoregi Natalia
d68661e2cc Backed out 24 changesets (bug 1682030) for bustage on ProcessHangMonitor.cpp and nsCOMPtr.h. CLOSED TREE
Backed out changeset 5b1644096477 (bug 1682030)
Backed out changeset 35ae60eea3c7 (bug 1682030)
Backed out changeset 3eca76a6d639 (bug 1682030)
Backed out changeset 259c45447ad9 (bug 1682030)
Backed out changeset de9222dc8c31 (bug 1682030)
Backed out changeset 2986c7e14349 (bug 1682030)
Backed out changeset 6af3410bdb93 (bug 1682030)
Backed out changeset 42b0621c2927 (bug 1682030)
Backed out changeset 366e3e371858 (bug 1682030)
Backed out changeset 9adb2865adea (bug 1682030)
Backed out changeset 6af6af3bc03a (bug 1682030)
Backed out changeset da94a91b35ae (bug 1682030)
Backed out changeset 9143da258d0e (bug 1682030)
Backed out changeset 5e20d06952ba (bug 1682030)
Backed out changeset 6253d7e1ce7d (bug 1682030)
Backed out changeset 0e06ddeea3e2 (bug 1682030)
Backed out changeset 9c58d57c9e44 (bug 1682030)
Backed out changeset e90edd89430e (bug 1682030)
Backed out changeset 5861b8166b10 (bug 1682030)
Backed out changeset b4b88cdc7993 (bug 1682030)
Backed out changeset b80054e9805c (bug 1682030)
Backed out changeset 580d857674c0 (bug 1682030)
Backed out changeset a9cdf93c2662 (bug 1682030)
Backed out changeset 9c9c8b4998e2 (bug 1682030)
2021-04-06 03:54:12 +03:00
David Parks
f85199c17c Bug 1682030 - Remove NPAPI support from ClearDataService. r=baku
Removes NPAPI plugin support from the ClearDataService as part of removing all of NPAPI.

Differential Revision: https://phabricator.services.mozilla.com/D107146
2021-04-05 23:48:36 +00:00
Bogdan Tara
ade4d82c59 Backed out changeset 98c3e6255c58 (bug 1597600) for browser_installssl.js failures CLOSED TREE 2020-12-07 21:01:50 +02:00
R. Martinho Fernandes
c99fe51d2d Bug 1597600 - make certificate overrides depend on origin attributes r=keeler,geckoview-reviewers,smaug,agi
Differential Revision: https://phabricator.services.mozilla.com/D91962
2020-12-07 17:10:52 +00:00
Johann Hofmann
98f163104c Bug 1675018 - Part 3 - Implement ClearDataService::DeleteUserInteractionForClearingHistory. r=timhuang
This is a helper function for clear history functionality that needs to ensure that
storageAccessAPI permissions that would mirror history are also deleted without
clearing permissions that keep cookies and site data alive.

Differential Revision: https://phabricator.services.mozilla.com/D96640
2020-11-17 22:24:58 +00:00
Csoregi Natalia
af42a4dbc7 Backed out 5 changesets (bug 1675018) for linting failure. CLOSED TREE
Backed out changeset 81e7fe361388 (bug 1675018)
Backed out changeset 7fe621a805eb (bug 1675018)
Backed out changeset 34fd482121f2 (bug 1675018)
Backed out changeset ee836c7f63d4 (bug 1675018)
Backed out changeset 0e09ce61e374 (bug 1675018)
2020-11-17 00:34:27 +02:00
Johann Hofmann
7e2aa616ee Bug 1675018 - Part 3 - Implement ClearDataService::DeleteUserInteractionForClearingHistory. r=timhuang
This is a helper function for clear history functionality that needs to ensure that
storageAccessAPI permissions that would mirror history are also deleted without
clearing permissions that keep cookies and site data alive.

Differential Revision: https://phabricator.services.mozilla.com/D96640
2020-11-16 19:29:26 +00:00
Emilio Cobos Álvarez
47916c8c70 Bug 1662987 - ClearDataService should know how to clear the stylesheet cache. r=baku
Much like it does for images.

Differential Revision: https://phabricator.services.mozilla.com/D89242
2020-09-08 19:38:43 +00:00
Moritz Birghan
c8319be878 Bug 634697 - Add permanent storage to user's client certificate selection r=keeler,baku,fluent-reviewers,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D58820
2020-08-03 13:24:34 +00:00
Butkovits Atila
a07dcc53eb Backed out changeset 441baa36ba93 (bug 634697) for failure at test_sss_readstate.js. CLOSED TREE 2020-07-29 19:39:44 +03:00
Moritz Birghan
1bea811e47 Bug 634697 - Add permanent storage to user's client certificate selection r=keeler,baku,fluent-reviewers,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D58820
2020-07-29 15:20:10 +00:00
Dorel Luca
326e14fb76 Backed out changeset 928233ea49ee (bug 634697) for causing leaks. CLOSED TREE 2020-07-15 16:39:11 +03:00
Moritz Birghan
b22dbe4f47 Bug 634697 - Add permanent storage to user's client certificate selection r=keeler,baku,fluent-reviewers,Gijs
Differential Revision: https://phabricator.services.mozilla.com/D58820
2020-07-15 11:49:00 +00:00
Sebastian Streich
38264715e9 Bug 1633710 - Move js uri.host to principal r=ckerschb,preferences-reviewers,ntim
Differential Revision: https://phabricator.services.mozilla.com/D73242
2020-07-13 18:35:01 +00:00
Kris Maglione
b6be72f351 Bug 1649554: Part 1 - Move deprecated component registration helpers out of XPCOMUtils. r=mccr8,remote-protocol-reviewers,marionette-reviewers,perftest-reviewers,webcompat-reviewers,whimboo,twisniewski
Differential Revision: https://phabricator.services.mozilla.com/D81749
2020-07-10 23:58:30 +00:00
Kris Maglione
9d78661f88 Bug 1649221: Update ChromeUtils.generateQI callers to pass strings. r=mccr8,remote-protocol-reviewers,marionette-reviewers,perftest-reviewers,webcompat-reviewers,geckoview-reviewers,preferences-reviewers,agi,whimboo,Bebe,twisniewski
Differential Revision: https://phabricator.services.mozilla.com/D81594
2020-07-10 23:58:28 +00:00
Mike Conley
390e7e58e6 Bug 1627022 - Add a new cleaner that sanitizes the about:home startup cache when appropriate. r=baku
Differential Revision: https://phabricator.services.mozilla.com/D82089
2020-07-09 14:39:25 +00:00
Dorel Luca
3e761e3907 Backed out changeset 255d9078dd17 (bug 1633710) for Browser-chrome failures in extensions/test/xpinstall/browser_datauri.js. CLOSED TREE 2020-07-06 18:38:13 +03:00
Sebastian Streich
95212989d4 Bug 1633710 - Move js uri.host to principal r=ckerschb,preferences-reviewers,ntim
Differential Revision: https://phabricator.services.mozilla.com/D73242
2020-07-06 14:00:09 +00:00
Dorel Luca
1e4fff31e4 Backed out changeset 2c46bcd325bb (bug 1633710) for Browser-chrome failures in extensions/test/xpinstall/browser_datauri.js. CLOSED TREE 2020-07-01 18:12:19 +03:00
Sebastian Streich
51a16a3ad7 Bug 1633710 - Move js uri.host to principal r=ckerschb,preferences-reviewers,ntim
Differential Revision: https://phabricator.services.mozilla.com/D73242
2020-07-01 12:21:22 +00:00
Tom Tung
6dfa60337a Bug 1628240 - Do not clear all origins that match the pattern for QuotaCleaner.deleteByHost; r=dom-workers-and-storage-reviewers,janv
We do clearStoragsForPrincipal based on the result from listOrigin, so it's fine
to not clear all stroages that match the prefix here. Also, since the passing
principals can contain origin attributes which is not allowed to be used with
aClearAll.

Differential Revision: https://phabricator.services.mozilla.com/D73417
2020-05-13 13:57:28 +00:00
Tom Tung
81b5f914d9 Bug 1628240 - A temporary fix to remove the same origins for the same host for all quota clients in ClearSiteDataFromHost; r=johannh,dom-workers-and-storage-reviewers,janv
Differential Revision: https://phabricator.services.mozilla.com/D71716
2020-05-01 06:09:44 +00:00
Dana Keeler
e8ebc73d50 Bug 1630038 - remove HPKP entirely r=kjacobs,bbeurdouche
This removes processing of HTTP Public Key Pinning headers, remotely modifying
pinning information, and using cached pinning information, all of which was
already disabled in bug 1412438. Static pins that ship with the browser are
still enforced.

Differential Revision: https://phabricator.services.mozilla.com/D73352
2020-05-06 22:57:50 +00:00
Noemi Erli
d44894bde2 .Backed out 3 changesets (bug 1628240) for causing geckoview failures CLOSED TREE
Backed out changeset 6fc159a53fab (bug 1628240)
Backed out changeset 6f0ed8b711fd (bug 1628240)
Backed out changeset 4c685e21c33d (bug 1628240)
2020-04-28 19:55:08 +03:00
Tom Tung
cc5bfdd963 Bug 1628240 - A temporary fix to remove the same origins for the same host for all quota clients in ClearSiteDataFromHost; r=johannh,dom-workers-and-storage-reviewers,janv
Differential Revision: https://phabricator.services.mozilla.com/D71716
2020-04-28 15:56:53 +00:00
Jan Varga
0e36a593fa Bug 1615998 - QM: Remove nsIQuotaOriginsResult interface; r=ttung,dom-workers-and-storage-reviewers,sg
Differential Revision: https://phabricator.services.mozilla.com/D63051

--HG--
extra : moz-landing-system : lando
2020-02-22 01:03:26 +00:00
Ehsan Akhgari
1ca91dd7ab Bug 1603969 - Part 1: Remove the concept of granted origins from the anti-tracking backend; r=baku
Granted origins cause a third-party tracker browsing context to not get
full first-party storage access after successfully calling the storage
access API or a heuristic granting ephemeral access.

For example, after https://tracker.example calls the storage access API
successfully in the third-party context, they embed
https://other-tracker.example, and that load fails because of ETP
restrictions.  Here what happens is that https://other-tracker.example
is mistakenly considered the granted origin, and because such a
permission doesn't exist, access is denied.

Differential Revision: https://phabricator.services.mozilla.com/D57493

--HG--
extra : moz-landing-system : lando
2019-12-19 02:56:52 +00:00
Gurzau Raul
bed8b9f116 Backed out 4 changesets (bug 1603969) for failing at /browser_startup_mainthreadio.js on a CLOSED TREE.
Backed out changeset c4d79087eef1 (bug 1603969)
Backed out changeset 2c0198f3506c (bug 1603969)
Backed out changeset c5ad252c525b (bug 1603969)
Backed out changeset a334451b95eb (bug 1603969)
2019-12-19 02:08:09 +02:00
Ehsan Akhgari
1676da33c8 Bug 1603969 - Part 1: Remove the concept of granted origins from the anti-tracking backend; r=baku
Granted origins cause a third-party tracker browsing context to not get
full first-party storage access after successfully calling the storage
access API or a heuristic granting ephemeral access.

For example, after https://tracker.example calls the storage access API
successfully in the third-party context, they embed
https://other-tracker.example, and that load fails because of ETP
restrictions.  Here what happens is that https://other-tracker.example
is mistakenly considered the granted origin, and because such a
permission doesn't exist, access is denied.

Differential Revision: https://phabricator.services.mozilla.com/D57493

--HG--
extra : moz-landing-system : lando
2019-12-18 19:14:53 +00:00