summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
* Add mozilla::Spantrav902018-10-06-0/+3386
|
* Merge pull request #813 from JustOff/PR_SessionStorage_principal_originMoonchild2018-10-06-1/+8
|\ | | | | [BASILISK] Protect against nsIPrincipal.origin throwing for about:blank iframes and custom protocol urls
| * [BASILISK] Protect against nsIPrincipal.origin throwing for about:blank ↵JustOff2018-10-06-1/+8
| | | | | | | | iframes and custom protocols
* | Set the default action to not lock content scrolling when a menu is open.wolfbeast2018-10-06-2/+3
|/ | | | This resolves issues with the bookmarks and other menus with submenus if scrollable in case of many items displayed.
* Merge pull request #811 from MaxKoll/MaxKoll-patch-1Moonchild2018-10-04-61/+81
|\ | | | | Fix in-tab close button behavior
| * Fix in-tab close button behavior (#775)MaxKoll2018-10-04-61/+81
| | | | | | | | - Fixes #775. - Coincidentally also fixes a regression that prevented opening new tabs via double click on an empty space in the tab bar.
* | Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo.wolfbeast2018-10-04-1/+92
| |
* | Bug 1493900.wolfbeast2018-10-04-3/+12
|/ | | | DiD fix.
* Make all arguments to init*Event() optional except the firstwolfbeast2018-10-04-169/+175
| | | | This resolves #810.
* Merge pull request #808 from trav90/media-workMoonchild2018-10-02-3/+15
|\ | | | | [ffmpeg] Always allocate memory to pass extradata
| * [ffmpeg] Always allocate memory to pass extradatatrav902018-10-01-3/+15
|/ | | | Despite wording of the documentation to the contrary, we can't provide a static pointer to an immutable object.
* Merge pull request #806 from trav90/ffvpx-resyncMoonchild2018-10-02-8816/+8812
|\ | | | | Update ffvpx code to 4.0.2 (take 2)
| * Clobber for ffvpx updatetrav902018-10-01-1/+1
| |
| * [ffvpx] Remove unneeded libavcodec symbols and dummy functionstrav902018-10-01-10/+0
| | | | | | | | Fixes linkage errors on Windows.
| * [ffvpx] Update ffvp9/ffvp8 to release 4.0.2trav902018-10-01-8815/+8821
|/
* Merge pull request #805 from ↵Moonchild2018-10-01-8822/+8816
|\ | | | | | | | | MoonchildProductions/revert-801-update-from-upstream Revert "Update ffvpx code to 4.0.2"
| * Revert "Update ffvpx code to 4.0.2"Moonchild2018-10-01-8822/+8816
|/
* Merge pull request #801 from trav90/update-from-upstreamMoonchild2018-10-01-8816/+8822
|\ | | | | Update ffvpx code to 4.0.2
| * Clobber for ffvpx updatetrav902018-09-30-1/+1
| |
| * [ffvpx] Update ffvp9/ffvp8 to release 4.0.2trav902018-09-30-8815/+8821
| |
* | Merge pull request #804 from JustOff/PR_s4e_FullScreenVideoMoonchild2018-10-01-20/+69
|\ \ | | | | | | [PALEMOON] Use message manager to detect full-screen HTML5 video in S4E module
| * | [PALEMOON] Use message manager to detect full-screen HTML5 video in S4E moduleJustOff2018-10-01-20/+69
| | |
* | | Remove telemetry reporting functions from CubebUtilswolfbeast2018-10-01-40/+0
|/ / | | | | | | Tag #21.
* | Remove telemetry from cache v1 service locking (part2).wolfbeast2018-10-01-81/+65
| | | | | | | | | | | | | | - Fold Lock(TelemetryID) into Lock(); - Fold nsCacheServiceAutoLock(TelemetryID) into nsCacheServiceAutoLock(); Tag #21.
* | Remove telemetry from cache v1 service locking (part1).wolfbeast2018-10-01-11/+2
| | | | | | | | Tag #21.
* | Remove unused telemetry functions/variables.wolfbeast2018-10-01-29/+1
|/ | | | Tag #21.
* Remove cache I/O telemetry.wolfbeast2018-09-30-126/+0
| | | | Tag #21.
* Remove telemetry probes to get detailed disk cache hit rate.wolfbeast2018-09-30-212/+0
| | | | Tag #21.
* Remove telemetry probes for cache file system.wolfbeast2018-09-29-99/+0
|
* Clean up a number of unused variables.wolfbeast2018-09-29-77/+0
| | | | Tag #21.
* Update telemetry whitelists.wolfbeast2018-09-29-3/+0
| | | | Tag #21.
* Merge branch 'master' of https://github.com/MoonchildProductions/UXPwolfbeast2018-09-29-2021/+3191
|\
| * Merge pull request #800 from trav90/update-from-upstreamMoonchild2018-09-29-114/+268
| |\ | | | | | | Update libnestegg from upstream
| | * Update test files for libnestegg updatetrav902018-09-29-3/+5
| | |
| | * Update libnestegg from upstreamtrav902018-09-28-108/+260
| | |
| | * Update upstream URL and update script for libnesteggtrav902018-09-28-3/+3
| | |
| * | Update HSTS preload listtrav902018-09-29-1907/+2923
| | | | | | | | | | | | Tag #447
* | | Remove telemetry to find optimal cache entry hash sizewolfbeast2018-09-29-117/+0
|/ / | | | | | | Tag #21.
* / Get rid of the incorrect mechanism to remove insecure fallback hosts.wolfbeast2018-09-29-12/+0
|/ | | | This fixes #797.
* Merge branch 'master' of https://github.com/MoonchildProductions/UXPwolfbeast2018-09-29-3/+3
|\
| * Only opt-in to esr52 search service for select applicationsMatt A. Tobin2018-09-28-3/+3
| |
* | Rename address bar back to location barwolfbeast2018-09-29-2/+2
|/ | | | Tag Issue #765
* Remove IndexedDB for content pref.wolfbeast2018-09-29-32/+0
| | | | Tag Issue #765
* Update permissions manager strings.wolfbeast2018-09-28-1/+1
| | | | Tag Issue #765
* Rename "Cookies" to "Cookies and Site Data" in preferences where applicable.wolfbeast2018-09-28-13/+13
| | | | Tag Issue #765
* Add a conditional to not build the platform so the build system can be ↵Matt A. Tobin2018-09-27-44/+45
| | | | exploited for non-binary projects
* Merge pull request #791 from g4jc/session_supercookieMoonchild2018-09-27-101/+238
|\ | | | | Issue #792 - backport mozbug 1334776 - CVE-2017-7797 Header name interning leaks across origins
| * backport mozbug 1334776 - CVE-2017-7797 Header name interning leaks across ↵Gaming4JC2018-09-25-101/+238
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | origins Potential attack: session supercookie. [Moz Notes](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c5): "The problem is that for unknown header names we store the first one we see and then later we case-insensitively match against that name *globally*. That means you can track if a user agent has already seen a certain header name used (by using a different casing and observing whether it gets normalized). This would allow you to see if a user has used a sensitive service that uses custom header names, or allows you to track a user across sites, by teaching the browser about a certain header case once and then observing if different casings get normalized to that. What we should do instead is only store the casing for a header name for each header list and not globally. That way it only leaks where it's expected (and necessary) to leak." [Moz fix note](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c8): "nsHttpAtom now holds the old nsHttpAtom and a string that is case sensitive (only for not standard headers). So nsHttpAtom holds a pointer to a header name. (header names are store on a static structure). This is how it used to be. I left that part the same but added a nsCString which holds a string that was used to resoled the header name. So when we parse headers we call ResolveHeader with a char*. If it is a new header name the char* will be stored in a HttpHeapAtom, nsHttpAtom::_val will point to HttpHeapAtom::value and the same strings will be stored in mLocalCaseSensitiveHeader. For the first resolve request they will be the same but for the following maybe not. At the end this nsHttpAtom will be stored in nsHttpHeaderArray. For all operation we will used the old char* except when we are returning it to a script using VisitHeaders."
* | Merge pull request #789 from g4jc/sha256_leakfixMoonchild2018-09-27-14/+8
|\ \ | | | | | | backport mozbug 1444532 - fix a leak in SHA256 in nsHttpConnectionInfo.cpp r=mayhemer
| * | backport mozbug 1444532 - fix a leak in SHA256 in nsHttpConnectionInfo.cpp ↵Gaming4JC2018-09-26-14/+8
| |/ | | | | | | | | | | | | | | r=mayhemer The original code (from bug 1200802) declared an XPCOM object as a static bare pointer, which for future reference is probably never the right thing to do. It might have worked if it was cleared before shutdown but it never was.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 23:52:40 +0000