summaryrefslogtreecommitdiffstats
path: root/dom
Commit message (Collapse)AuthorAgeLines
* Implement "cookie-averse document objects".wolfbeast2018-02-08-0/+43
| | | | | See: https://html.spec.whatwg.org/multipage/dom.html#cookie-averse-document-object This resolves #196.
* Explicitly cancel channel after mixed content redirect.wolfbeast2018-02-08-1/+6
|
* Fix ReadCompressedIndexDataValuesFromBlob().wolfbeast2018-02-08-2/+10
|
* Check for integer overflow in AesTask::DoCrypto() (DiD)wolfbeast2018-02-08-0/+5
| | | | | | | | | | | | After calling mResult.SetLength(mData.Length() + 16) we should check that the integer addition didn't overflow. It seems at the moment impossible to create ArrayBuffers of size >= 0x0xfffffff0, however adding a check here doesn't hurt. mResult.Length() is passed to the PK11 API functions as a maxOut parameter and should be checked by the softoken crypto algorithm implementations. AES-ECB and AES-GCM seem to do that correctly.
* Merge branch 'ported-upstream'wolfbeast2018-02-07-5/+19
|\
| * Fix errant comma in 4470f78754246bbd134b65cad2e0a9638418677fwolfbeast2018-02-07-1/+1
| |
| * Avoid unnecessary string creation.wolfbeast2018-02-07-5/+19
| |
* | Merge pull request #10 from trav90/media-workMoonchild2018-02-06-1/+1
|\ \ | |/ |/| Update FFmpeg code to n3.2-65-gee56777
| * Update FFmpeg code to n3.2-65-gee56777trav902018-02-04-1/+1
| |
* | CSP should only check host (not including path) when performing frame ↵wolfbeast2018-02-06-0/+19
| | | | | | | | | | | | ancestors checks. This has been explicitly stated in the CSP-3 spec.
* | Merge branch 'ported-moebius'wolfbeast2018-02-04-0/+4
|\ \
| * | Add -moz-windows-accent-color-is-darkwolfbeast2018-02-04-0/+2
| | | | | | | | | | | | #31 point 4
| * | Add `@media(-moz-windows-accent-color-applies)`wolfbeast2018-02-04-0/+2
| |/ | | | | | | #31 point 3
* | Merge branch 'master' into configurebuild-workMatt A. Tobin2018-02-03-156/+0
|\|
| * Remove GCZeal: Base cleanupwolfbeast2018-02-03-156/+0
| | | | | | | | UXP repo issue #8
* | Use MOZ_PHOENIX instead of checking for 'browser' in MOZ_BUILD_APPMatt A. Tobin2018-02-03-4/+4
|/
* Add canvas data poisoning option.wolfbeast2018-02-02-14/+59
| | | | Tag #61.
* Switch GeoLocation to IP-API.com with minimal requests.wolfbeast2018-02-02-8/+33
|
* Implement configuration pref for Generational Garbage Collection.wolfbeast2018-02-02-0/+5
| | | | | Pref: javascript.options.mem.gc_generational This resolves #20
* Support "SourceMap" header along with "X-SourceMap"wolfbeast2018-02-02-1/+4
|
* Add m-esr52 at 52.6.0Matt A. Tobin2018-02-02-0/+3199456