265 Commits

Author SHA1 Message Date
norris%netscape.com
c3494a9ffb Fix the following bugs:
14443 "Same origin" security policy may be circumvented using docu
14820 Fixing up the relationship between nsCodeBasePrincipal and n
14919 Crash in JS MM code
Reviewed by mstoltz, approved by scc.


git-svn-id: svn://10.0.0.236/trunk@49647 18797224-902f-48f8-a5cc-f745e15eee43
1999-10-02 03:41:37 +00:00
norris%netscape.com
761b5f5706 Add ability to disable JS. Fix 13978 shopping at webvan.com crashes
git-svn-id: svn://10.0.0.236/trunk@47995 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-17 20:13:52 +00:00
norris%netscape.com
3036cb7a8a Add security support for javascript: uris.
git-svn-id: svn://10.0.0.236/trunk@47649 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-15 20:58:41 +00:00
norris%netscape.com
47554a1bf7 Create preferences for security checks.
Add new methods on nsIScriptSecurityManager for capabilities.
Fix 13739 MLK: nsScriptSecurityManager::CreateCodebasePrincipal
Fix 11666 Eliminate plvector (was: [infinite loop] bugs - plvector.c)


git-svn-id: svn://10.0.0.236/trunk@47517 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-15 04:05:43 +00:00
norris%netscape.com
a8e5ba22e5 Makefile.in: remove unused file
nsScriptSecurityManager.cpp: Fix CheckURI problems (but still disabled)
nsSecurityManagerFactory.cpp: Make registration string match convention


git-svn-id: svn://10.0.0.236/trunk@46566 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-09 13:47:16 +00:00
don%netscape.com
3a21477635 Temporarily disabled CheckURI so the Manage Bookmarks dialog and other windows work again. Norris will fix the window.open problem later.
git-svn-id: svn://10.0.0.236/trunk@46298 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-08 04:25:14 +00:00
norris%netscape.com
1405f1b83a disable XPConnect security check, perhaps related to test failure. Getting reports of failures on Mac at least.
git-svn-id: svn://10.0.0.236/trunk@46231 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-07 22:29:56 +00:00
norris%netscape.com
74202f2741 Fix bug 13253.
Enable restrictions on use of Components array from web JavaScript.


git-svn-id: svn://10.0.0.236/trunk@46223 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-07 20:40:20 +00:00
norris%netscape.com
4e8768c593 * Add checks on urls formed from web scripts
* Make nsScriptSecurityManager implement nsXPCSecurityManager
* Fix unix warnings


git-svn-id: svn://10.0.0.236/trunk@46152 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-07 02:54:19 +00:00
shaver%netscape.com
75770de0d4 quell assignment-as-boolean warning
git-svn-id: svn://10.0.0.236/trunk@46047 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-05 05:28:28 +00:00
norris%netscape.com
34b474302b Add all-powerful system principals. Remove some dead code from the build.
git-svn-id: svn://10.0.0.236/trunk@45380 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-01 00:54:35 +00:00
joki%netscape.com
9db6478cb3 Adding new flag to the security check calls out of the DOM generated JS files.
git-svn-id: svn://10.0.0.236/trunk@45348 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-31 14:23:55 +00:00
norris%netscape.com
3a6d863c13 * clean up nsScriptSecurityManager
* remove nsJSSecurityManager
* save principals in nsIChannels and nsIDocuments


git-svn-id: svn://10.0.0.236/trunk@45080 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-29 21:58:42 +00:00
gagan%netscape.com
16f9ee173e Fixed some memory leaks showing up on bruce's log-
http://www.cybersight.com/~bruce/apprunner.mongo.19990827.log.


git-svn-id: svn://10.0.0.236/trunk@44793 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-27 08:36:49 +00:00
arielb%netscape.com
ad40dbfcd5 includes updates to codbase matching security checks currently turned off
but in place.  redefined the script security manager in caps and it is
now generating codebase principals.


git-svn-id: svn://10.0.0.236/trunk@43798 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-20 09:51:02 +00:00