2) Fixed compile errors in XSL glue code that happened after the recent nsString landing by scc.
3) Added a check for a null URI before de-referencing it in nsCodeBasePrincipal.cpp.
git-svn-id: svn://10.0.0.236/trunk@67709 18797224-902f-48f8-a5cc-f745e15eee43
- Generate tokens in the expat tokenizer to display an XML error message.
- Process those tokens in the XML DTD
- Add a SetStringValue() method to CToken that accepts an nsString parameter.
- Removed code in the XML content sink's NotifyError() method to create error message content.
git-svn-id: svn://10.0.0.236/trunk@64553 18797224-902f-48f8-a5cc-f745e15eee43
- Rewrote GetQuotedAttributeValue() so that it handles whitespace and attribute names inside attribute values.
- The xml stylesheet PI now only needs a href attribute to work right. Other attributes like title, media, alternate, default to null. The type attribute defaults to "text/css".
git-svn-id: svn://10.0.0.236/trunk@64274 18797224-902f-48f8-a5cc-f745e15eee43
32088 Circumventing Same Origin security policy using javascript: URLs
32040 about: can't be link
Also remove deprecated method
r=mstoltz
git-svn-id: svn://10.0.0.236/trunk@64066 18797224-902f-48f8-a5cc-f745e15eee43
Call SetTextAlign within SetupDC instead of in each DrawString on WIN32. bug 26973; r=rods@netscape.com
git-svn-id: svn://10.0.0.236/trunk@60242 18797224-902f-48f8-a5cc-f745e15eee43
reference count handling for the content stack to use nsISupports. The previous
check introduced a leak.
git-svn-id: svn://10.0.0.236/trunk@58340 18797224-902f-48f8-a5cc-f745e15eee43
bug 24442 and bug 24524. The content stack wasn't addref'ing the content objects pushed
onto it while the content sink destructor was releasing the content objects. This caused
a crash because the root content object would get freed one too many times. Now,
PushContent() addrefs the content object before inserting it into the content stack.
git-svn-id: svn://10.0.0.236/trunk@58332 18797224-902f-48f8-a5cc-f745e15eee43
2.) WebShell now implements the new nsIScriptGlobalObjectOwner.
3.) WebShell supports GetInterface to nsIScriptGlobalObject.
4.) Documents no longer carry around a reference to nsIScriptContextOwner. Instead they hold on to a nsIScriptGlobalObject. nsIDocument::GetScriptContextOwner has now become nsIDocument::GetScriptGlobalObject(). Same change to the set methods.
git-svn-id: svn://10.0.0.236/trunk@55175 18797224-902f-48f8-a5cc-f745e15eee43
* Implement site-specific security policies (bug 858)
r=mstoltz
* Use Recycle rather than delete[] to clean up Purify logs
r=law
git-svn-id: svn://10.0.0.236/trunk@53631 18797224-902f-48f8-a5cc-f745e15eee43
- Fix most of bug 13163 (see TODO for rest). This entails adding a version-string argument to nsIScriptContext::EvaluateString and passing it around lots of places in content sinks.
- Fix leaks and confusion about mSecurityManager and mNameSpaceManager in nsJSEnvironment.cpp. These still need to move from nsJSContext to nsGlobalWindow or thereabouts, jband and vidur are looking at that.
- Added comments and expanded tabs in nsJSEnvironment.cpp, esp. to EvaluateString. Also changed various nsresult vars to be named rv. Also restored brace/style conformity to nsJSProtocolHandler.cpp.
- Factored CompileFunction from AddScriptEventListener to pave the way for brutal sharing of compiled JS event handlers via JS_CloneFunctionObject.
- Lots of nsCOMPtr uses added. I'm using one for mNameSpaceManager. Hold mSecurityManager as a service explicitly, on the other hand (awaiting scc's fix to allow comptrs for services), and release in nsJSContext's dtor (fixing a leak). These two managers should be moved to the window object -- TODO item below.
- Hold JSRuntimeService along with JSRuntime for live of nsJSEnvironment, fix for shaver.
- Fix window.setTimeout etc. so the filename and line number of the timeout expr is propagated. This meant factoring nsJSUtils.cpp code.
- Fix all content sinks to use the same, and up-to-date JavaScript version parsing (whether for script type or for old language attribute); also fix SplitMimeType clones to strip whitespace.
- With waterson, fix bug in brutal-sharing version of XUL content sink: script src= should not evaluate the inline content of its tag.
git-svn-id: svn://10.0.0.236/trunk@52347 18797224-902f-48f8-a5cc-f745e15eee43
