Cosmin Sabou 
								
							 
						 
						
							
							
							
							
								
							
							
								af07021e88 
								
							 
						 
						
							
							
								
								Backed out 10 changesets (bug 1536411) for causing leaks in CondVar, MessagePortService, MessagePortServiceData.  
							
							... 
							
							
							
							Backed out changeset eda5854cd7e8 (bug 1536411)
Backed out changeset f94dfbf2476c (bug 1536411)
Backed out changeset c68dc3152faa (bug 1536411)
Backed out changeset f67d157e8baf (bug 1536411)
Backed out changeset 1107a9767f38 (bug 1536411)
Backed out changeset ccbe1af00fb9 (bug 1536411)
Backed out changeset 552c4b588524 (bug 1536411)
Backed out changeset 2eb20578159b (bug 1536411)
Backed out changeset 45708d22bb6d (bug 1536411)
Backed out changeset 87601ef1d4d4 (bug 1536411) 
							
						 
						
							2019-04-11 22:48:49 +03:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								5cfeeda19e 
								
							 
						 
						
							
							
								
								Bug 1536411 - StoragePrincipal - part 1 - Implementation, r=Ehsan  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D24025 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-04-11 16:27:12 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Eden Chuang 
								
							 
						 
						
							
							
							
							
								
							
							
								72b79c6fbd 
								
							 
						 
						
							
							
								
								Bug 1442778 - Add "chromeContext" parameter to console API and console service messages. r=smaug  
							
							... 
							
							
							
							1. Adding a new attribute chromeContext in ConsoleEvent
2. Adding a new boolean attribute isFromChromeContext in nsIConsoleMessage
3. Sending IsFromChromeContext to the parent process
Differential Revision: https://phabricator.services.mozilla.com/D23330 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-04-01 22:42:34 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Sylvestre Ledru 
								
							 
						 
						
							
							
							
							
								
							
							
								ef0bfc3822 
								
							 
						 
						
							
							
								
								Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan  
							
							... 
							
							
							
							# ignore-this-changeset
Differential Revision: https://phabricator.services.mozilla.com/D24168 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-03-31 15:12:55 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Cosmin Sabou 
								
							 
						 
						
							
							
							
							
								
							
							
								78fc71e3c3 
								
							 
						 
						
							
							
								
								Backed out changeset 7fa7d6e6dedc (bug 1442778) for devtools failures on browser_webconsole_check_stubs_console_api.js CLOSED TREE  
							
							
							
						 
						
							2019-03-26 20:27:55 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Eden Chuang 
								
							 
						 
						
							
							
							
							
								
							
							
								5e4df764d9 
								
							 
						 
						
							
							
								
								Bug 1442778 - Add "chromeContext" parameter to console API and console service messages. r=smaug  
							
							... 
							
							
							
							1. Adding a new attribute chromeContext in ConsoleEvent
2. Adding a new boolean attribute isFromChromeContext in nsIConsoleMessage
3. Sending IsFromChromeContext to the parent process
Differential Revision: https://phabricator.services.mozilla.com/D23330 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-03-26 15:18:20 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									sakshaat 
								
							 
						 
						
							
							
							
							
								
							
							
								d781937a67 
								
							 
						 
						
							
							
								
								Bug 1517483 - Get rid of nsIScriptSecurityManager::IsSystemPrincipal r=bzbarsky  
							
							... 
							
							
							
							Replaced instances of callers in both C++ and JS files to query the state from the principal directly.
Differential Revision: https://phabricator.services.mozilla.com/D22532 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-03-24 20:36:25 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Christoph Kerschbaumer 
								
							 
						 
						
							
							
							
							
								
							
							
								23b1d42b45 
								
							 
						 
						
							
							
								
								Bug 1534971: Add helper function within CSP to check if two CSPs are equal. r=jkt  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D23567 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-03-15 12:20:52 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Christoph Kerschbaumer 
								
							 
						 
						
							
							
							
							
								
							
							
								980f75a172 
								
							 
						 
						
							
							
								
								Bug 1530854: Always create CSP on Principal so the explicit CSP in the nsISHEntry holds a reference to the potentially dynamically modified CSP in case of a meta CSP. r=bzbarsky  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D21919 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-03-14 06:26:29 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Ryan Hunt 
								
							 
						 
						
							
							
							
							
								
							
							
								945f9686c0 
								
							 
						 
						
							
							
								
								Bug 1523969 part 2 - Move method definition inline comments to new line in 'caps/'. r=bzbarsky  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D21102 
--HG--
extra : rebase_source : b425a584c7f754a52a32362ea08ebcecc5941c78 
							
						 
						
							2019-02-25 16:03:35 -06:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Christoph Kerschbaumer 
								
							 
						 
						
							
							
							
							
								
							
							
								54df1cb98c 
								
							 
						 
						
							
							
								
								Bug 1528677: Remove nullchecks for loadinfo since we have loadinfo on all channels. r=baku  
							
							
							
						 
						
							2019-02-20 13:27:25 +01:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									shindli 
								
							 
						 
						
							
							
							
							
								
							
							
								011ea038cb 
								
							 
						 
						
							
							
								
								Merge mozilla-central to inbound.  a=merge CLOSED TREE  
							
							
							
						 
						
							2019-01-29 23:54:31 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Shane Caraveo 
								
							 
						 
						
							
							
							
							
								
							
							
								3e429f056f 
								
							 
						 
						
							
							
								
								Bug 1521573 web_accessible incognito support, r=kmag,smaug  
							
							... 
							
							
							
							Prevent web_accessible_resources resources loading in private contexts when extension does not have permission.
Differential Revision: https://phabricator.services.mozilla.com/D17138 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-01-29 15:40:09 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andreea Pavel 
								
							 
						 
						
							
							
							
							
								
							
							
								b839d65d3c 
								
							 
						 
						
							
							
								
								Backed out changeset 546ee20723b6 (bug 1521573) for failing test_ext_web_accessible_incognito.html  
							
							
							
						 
						
							2019-01-29 06:07:40 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Shane Caraveo 
								
							 
						 
						
							
							
							
							
								
							
							
								6004d08141 
								
							 
						 
						
							
							
								
								Bug 1521573 web_accessible incognito support, r=kmag,smaug  
							
							... 
							
							
							
							Prevent web_accessible_resources resources loading in private contexts when extension does not have permission.
Differential Revision: https://phabricator.services.mozilla.com/D17138 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2019-01-29 01:42:34 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Gijs Kruitbosch 
								
							 
						 
						
							
							
							
							
								
							
							
								ceecd61c16 
								
							 
						 
						
							
							
								
								Bug 1515863, r=ckerschb  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D15221 
--HG--
extra : rebase_source : 64431f64e9af7a961ffcd47c7b8e01dbecc71b07 
							
						 
						
							2018-12-21 11:56:47 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Kris Maglione 
								
							 
						 
						
							
							
							
							
								
							
							
								eb14dd1d2c 
								
							 
						 
						
							
							
								
								Bug 1478124: Part 8b - Update DocShell module to use a static component manifest. r=bzbarsky  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D15040 
--HG--
extra : rebase_source : d89ac470241cb6f6a43c29c6e90b1c0e4fc78028
extra : source : b0444e0bc801f828b49f9953a73498cf5ff5024b 
							
						 
						
							2018-12-16 17:27:58 -08:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									arthur.iakab 
								
							 
						 
						
							
							
							
							
								
							
							
								c1fae83952 
								
							 
						 
						
							
							
								
								Backed out 16 changesets (bug 1478124) for failing android geckoview-junit CLOSED TREE  
							
							... 
							
							
							
							Backed out changeset fce62c77a56b (bug 1478124)
Backed out changeset eb2fa3b5edf7 (bug 1478124)
Backed out changeset 8dacce59fcc0 (bug 1478124)
Backed out changeset 012fd0107204 (bug 1478124)
Backed out changeset 496aaf774697 (bug 1478124)
Backed out changeset 21f4fda03159 (bug 1478124)
Backed out changeset b0444e0bc801 (bug 1478124)
Backed out changeset d94039b19943 (bug 1478124)
Backed out changeset 5d85deac61c2 (bug 1478124)
Backed out changeset 929fd654c9df (bug 1478124)
Backed out changeset 1ddd80d9e91a (bug 1478124)
Backed out changeset b8d2dfdfc324 (bug 1478124)
Backed out changeset f500020a273a (bug 1478124)
Backed out changeset dd00365ebb55 (bug 1478124)
Backed out changeset 538e40c5ee13 (bug 1478124)
Backed out changeset bedaa9c437ad (bug 1478124) 
							
						 
						
							2019-01-29 10:03:06 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Kris Maglione 
								
							 
						 
						
							
							
							
							
								
							
							
								586d1722ec 
								
							 
						 
						
							
							
								
								Bug 1478124: Part 8b - Update DocShell module to use a static component manifest. r=bzbarsky  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D15040 
--HG--
extra : rebase_source : 4de6207229742168f534f618fe4881f19e3135c9
extra : absorb_source : 63106bea2b2a9c9a90e2d8cd08429b5de0f2cd09
extra : histedit_source : 02a263131b092b1d1ac4901f1a37a1b842b3103f 
							
						 
						
							2018-12-16 17:27:58 -08:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Emilio Cobos Álvarez 
								
							 
						 
						
							
							
							
							
								
							
							
								d2ed260822 
								
							 
						 
						
							
							
								
								Bug 1517241 - Rename nsIDocument to mozilla::dom::Document. r=smaug  
							
							... 
							
							
							
							Summary: Really sorry for the size of the patch. It's mostly automatic
s/nsIDocument/Document/ but I had to fix up in a bunch of places manually to
add the right namespacing and such.
Overall it's not a very interesting patch I think.
nsDocument.cpp turns into Document.cpp, nsIDocument.h into Document.h and
nsIDocumentInlines.h into DocumentInlines.h.
I also changed a bunch of nsCOMPtr usage to RefPtr, but not all of it.
While fixing up some of the bits I also removed some unneeded OwnerDoc() null
checks and such, but I didn't do anything riskier than that. 
							
						 
						
							2019-01-03 17:48:33 +01:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Emilio Cobos Álvarez 
								
							 
						 
						
							
							
							
							
								
							
							
								63814207cb 
								
							 
						 
						
							
							
								
								Bug 1516853 - Merge nsIDocument and nsDocument. r=smaug  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D15498 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2018-12-31 14:10:19 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									vinoth 
								
							 
						 
						
							
							
							
							
								
							
							
								7a5f2bb9db 
								
							 
						 
						
							
							
								
								Bug 1508282 - Temporary whitelist of files to skip Eval Assertion r=ckerschb  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D13520 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2018-12-14 13:21:41 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Tooru Fujisawa 
								
							 
						 
						
							
							
							
							
								
							
							
								7983faeb5d 
								
							 
						 
						
							
							
								
								Bug 1511393 - Use c-basic-offset: 2 in Emacs mode line for C/C++ code. r=nbp  
							
							
							
						 
						
							2018-12-01 04:52:05 +09:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Sylvestre Ledru 
								
							 
						 
						
							
							
							
							
								
							
							
								265e672179 
								
							 
						 
						
							
							
								
								Bug 1511181 - Reformat everything to the Google coding style r=ehsan a=clang-format  
							
							... 
							
							
							
							# ignore-this-changeset
--HG--
extra : amend_source : 4d301d3b0b8711c4692392aa76088ba7fd7d1022 
							
						 
						
							2018-11-30 11:46:48 +01:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Boris Zbarsky 
								
							 
						 
						
							
							
							
							
								
							
							
								9691e7ba88 
								
							 
						 
						
							
							
								
								Bug 1507540 part 3.  Use more notxpcom attributes in netwerk/.  r=valentin  
							
							
							
						 
						
							2018-11-19 20:17:53 -05:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Jonathan Kingston 
								
							 
						 
						
							
							
							
							
								
							
							
								2a8b750345 
								
							 
						 
						
							
							
								
								Bug 1502743 - Replace black/whitelist within caps to block/allowlist r=ckerschb  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D10013 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2018-10-31 17:56:43 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								4439acd683 
								
							 
						 
						
							
							
								
								Bug 1498510 - Move nsICSPEventListener out of CSP object, r=ckerschb  
							
							
							
						 
						
							2018-10-23 08:17:13 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									vinoth 
								
							 
						 
						
							
							
							
							
								
							
							
								7b887cfbbc 
								
							 
						 
						
							
							
								
								Bug 1498885 - Assertion added in ContentSecurityPolicyPermitsJSAction() to not allow eval with SystemPrincipal r=ckerschb  
							
							... 
							
							
							
							Differential Revision: https://phabricator.services.mozilla.com/D8683 
--HG--
extra : moz-landing-system : lando 
							
						 
						
							2018-10-15 08:02:04 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Christoph Kerschbaumer 
								
							 
						 
						
							
							
							
							
								
							
							
								60e3239dee 
								
							 
						 
						
							
							
								
								Bug 1490874: Log Principal based Security Errors to the Security pane in the console. r=smaug  
							
							
							
						 
						
							2018-09-25 07:25:05 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									shindli 
								
							 
						 
						
							
							
							
							
								
							
							
								0b6d93ef4d 
								
							 
						 
						
							
							
								
								Backed out changeset 510e95767aeb (bug 1490874) for security failures in browser/components/payments/test/mochitest/test_basic_card_form.html CLOSED TREE  
							
							
							
						 
						
							2018-09-24 11:43:30 +03:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Christoph Kerschbaumer 
								
							 
						 
						
							
							
							
							
								
							
							
								0df81cd9f4 
								
							 
						 
						
							
							
								
								Bug 1490874: Log Principal based Security Errors to the Security pane in the console. r=smaug  
							
							
							
						 
						
							2018-09-24 09:34:04 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								a053cf1c15 
								
							 
						 
						
							
							
								
								Bug 1476306 - Moving NullPrincipal/ContentPrincipal/SystemPrincipal under mozilla namespace - part 1 - NullPrincipal, r=ckerschb  
							
							
							
						 
						
							2018-07-17 21:37:48 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Kris Maglione 
								
							 
						 
						
							
							
							
							
								
							
							
								caa1a1228b 
								
							 
						 
						
							
							
								
								Bug 1473631: Part 10 - Replace pref observers with callbacks in ScriptSecurityManager. r=njn  
							
							... 
							
							
							
							MozReview-Commit-ID: COEgATfeEj
--HG--
extra : rebase_source : 8cdd70210041b0140ef951b3899dc324e0a9d74c 
							
						 
						
							2018-07-05 14:53:14 -07:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								ceea0172b0 
								
							 
						 
						
							
							
								
								Bug 1473587 - CSP Violation events should have the correct sample for inline contexts, r=jorendorff, r=ckerschb  
							
							
							
						 
						
							2018-07-16 17:58:04 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								5fff1762ad 
								
							 
						 
						
							
							
								
								Bug 1418236 - Correct EventTarget for CSP violation events, r=ckerschb  
							
							
							
						 
						
							2018-07-10 17:40:21 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								14d462eeb3 
								
							 
						 
						
							
							
								
								Bug 1418246 - Return valid columnNumber value in CSP violation events, r=ckerschb  
							
							
							
						 
						
							2018-07-05 08:21:04 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Jan de Mooij 
								
							 
						 
						
							
							
							
							
								
							
							
								08cef83f24 
								
							 
						 
						
							
							
								
								Bug 1464374 part 4 - Remove unused nsScriptSecurityManager::doGetObjectPrincipal. r=bz  
							
							
							
						 
						
							2018-05-31 11:28:49 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Brian Grinstead 
								
							 
						 
						
							
							
							
							
								
							
							
								a61cbe6dae 
								
							 
						 
						
							
							
								
								Bug 1460685 - Backed out changeset 09ee763947c3 (bug 1352513);r=Gijs  
							
							... 
							
							
							
							The security.allow_chrome_frames_inside_content pref was added to support
XUL extension compat after the hiddenWindow special case was removed in
Bug 1145470. Since we don't need to support that use-case anymore, this
changeset backs out the change that relanded the special case with the pref.
MozReview-Commit-ID: 4keMEIQvt1Y
--HG--
extra : rebase_source : 1a9c54c9807eaed2645d0ea03b5064ed7472d7a4 
							
						 
						
							2018-05-11 16:26:07 -07:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Andrea Marchesini 
								
							 
						 
						
							
							
							
							
								
							
							
								5b65a3ab01 
								
							 
						 
						
							
							
								
								Bug 1374745 - nsScriptSecurityManager should not use a string bundle before profile selection, r=ckerschb  
							
							
							
						 
						
							2018-05-08 15:52:53 +02:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Chris Peterson 
								
							 
						 
						
							
							
							
							
								
							
							
								71422dcaa9 
								
							 
						 
						
							
							
								
								Bug 1457813 - Part 2: Replace non-asserting NS_PRECONDITIONs with MOZ_ASSERTs. r=froydnj  
							
							... 
							
							
							
							s/NS_PRECONDITION/MOZ_ASSERT/ and reindent
MozReview-Commit-ID: KuUsnVe2h8L
--HG--
extra : source : c14655ab3df2c9b1465dd8102b9d25683359a37b 
							
						 
						
							2018-04-28 12:50:58 -07:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Boris Zbarsky 
								
							 
						 
						
							
							
							
							
								
							
							
								6c499a3613 
								
							 
						 
						
							
							
								
								Bug 1448414.  Remove the DOM_OBJECT classinfo bit.  r=kmag  
							
							
							
						 
						
							2018-03-28 22:46:23 -04:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Coroiu Cristina 
								
							 
						 
						
							
							
							
							
								
							
							
								29fa060fbe 
								
							 
						 
						
							
							
								
								Backed out changeset 9e41e9c653f2 (bug 1448414) for mochitest failures Permission denied to create wrapper for object of class XPCComponents_Interfaces on a CLOSED TREE  
							
							
							
						 
						
							2018-03-29 12:21:00 +03:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Boris Zbarsky 
								
							 
						 
						
							
							
							
							
								
							
							
								7513177d1c 
								
							 
						 
						
							
							
								
								Bug 1449211.  Stop special-casing XUL command dispatchers and tree selections in content XBL scopes.  r=kmag  
							
							
							
						 
						
							2018-03-28 22:46:23 -04:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Boris Zbarsky 
								
							 
						 
						
							
							
							
							
								
							
							
								05346e7ec6 
								
							 
						 
						
							
							
								
								Bug 1448414.  Remove the DOM_OBJECT classinfo bit.  r=kmag  
							
							
							
						 
						
							2018-03-28 22:46:23 -04:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Valentin Gosu 
								
							 
						 
						
							
							
							
							
								
							
							
								27e9e0be9f 
								
							 
						 
						
							
							
								
								Bug 1433958 - Change code that sets nsIURI.host to use nsIURIMutator r=mayhemer  
							
							... 
							
							
							
							MozReview-Commit-ID: 7T5gCu8WOfa
--HG--
extra : rebase_source : 752c34e5f9dde2e16fc9243c11860b987acbcb93 
							
						 
						
							2018-02-26 20:43:47 +01:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Boris Zbarsky 
								
							 
						 
						
							
							
							
							
								
							
							
								0920564cb3 
								
							 
						 
						
							
							
								
								Bug  1435483 part 3.  Remove nsIXPCException.  r=qdot  
							
							... 
							
							
							
							This interface is not usable from JS, because we don't expose initialize() in
the WebIDL bindings for Exception.  And C++ doesn't use it.
MozReview-Commit-ID: LsIm4YA0YZE 
							
						 
						
							2018-02-05 16:34:04 -05:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Boris Zbarsky 
								
							 
						 
						
							
							
							
							
								
							
							
								7ebac0960f 
								
							 
						 
						
							
							
								
								Bug 1424474 part 1.  Make sure we don't call into the chrome registry's AllowContentToAccess with non-chrome URLs.  r=gijs  
							
							... 
							
							
							
							MozReview-Commit-ID: I3DyrYGpGC2 
							
						 
						
							2017-12-21 10:54:43 -05:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Gijs Kruitbosch 
								
							 
						 
						
							
							
							
							
								
							
							
								0d38343e35 
								
							 
						 
						
							
							
								
								Bug 1424261, r=bz  
							
							... 
							
							
							
							--HG--
extra : rebase_source : 2bead652bbfd4cd251b431e04e3002c38c1a7a7b 
							
						 
						
							2017-12-12 10:53:10 -06:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Gijs Kruitbosch 
								
							 
						 
						
							
							
							
							
								
							
							
								e77ee731e9 
								
							 
						 
						
							
							
								
								Bug 1222924 - stop allowing webpages to link to moz-icon: , r=mrbkap  
							
							... 
							
							
							
							MozReview-Commit-ID: FKEDboWIfFQ
--HG--
extra : rebase_source : 801317b5746c6e84431c6a8f2097b83523646016 
							
						 
						
							2017-11-22 21:31:41 +00:00 
							
								 
							
						 
					 
				
					
						
							
								
								
									Kris Maglione 
								
							 
						 
						
							
							
							
							
								
							
							
								27c96362b9 
								
							 
						 
						
							
							
								
								Bug 1412345: Downgrade expanded principals before inheriting. r=bz,krizsa  
							
							... 
							
							
							
							There are several ways that expanded principals can be used as triggering
principals for requests. While that works fine for security checks, it also
sometimes causes them to be inherited, and used as result principals in
contexts where expanded principals aren't allowed.
This patch changes our inheritance behavior so that expanded principals are
downgraded to the most appropriate constituent principal when they would
otherwise be inherited.
The logic for choosing the most appropriate principal is a bit suspect, and
may eventually need to be changed to always select the last whitelist
principal, but I chose it to preserve the current principal downgrade behavior
used by XMLHttpRequest for the time being.
MozReview-Commit-ID: 9fvAKr2e2fa
--HG--
extra : rebase_source : c30df1b3851c11fed5a1d6a7fb158cec14933182 
							
						 
						
							2017-11-02 19:56:27 -07:00