248 Commits

Author SHA1 Message Date
thayes%netscape.com
f483c05bd1 Replace implementation of nsISupports with thread-safe version. This allows
SSL/HTTPS operations to complete on debug builds with thread-safety checking.
r=bryner


git-svn-id: svn://10.0.0.236/trunk@67971 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-03 00:04:48 +00:00
mstoltz%netscape.com
e5ac600ff0 Added archive attribute to nsICertificatePrincipal...part of fix for 37481.
git-svn-id: svn://10.0.0.236/trunk@67793 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-01 23:39:51 +00:00
nisheeth%netscape.com
8a6a52bef1 1) Added support for loading an XML document "out of band" from script and manipulating it via dom interfaces.
2) Fixed compile errors in XSL glue code that happened after the recent nsString landing by scc.
3) Added a check for a null URI before de-referencing it in nsCodeBasePrincipal.cpp.


git-svn-id: svn://10.0.0.236/trunk@67709 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-01 06:58:53 +00:00
mstoltz%netscape.com
b715b7ce56 Fix bustage on Sun and HP compilers...was casting void* to PRInt16. Added intermediate cast.
git-svn-id: svn://10.0.0.236/trunk@67258 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-26 20:54:02 +00:00
mstoltz%netscape.com
1aebd93c62 Fixes for 27010, 32878, and 32948.
git-svn-id: svn://10.0.0.236/trunk@67181 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-26 03:50:07 +00:00
jband%netscape.com
f546b3427a Do something safe if this call fails
git-svn-id: svn://10.0.0.236/trunk@67079 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-25 04:50:49 +00:00
jefft%netscape.com
d6e0059bda fixed bug 17100 - [FEATURE] enabled partial message download for pop3
git-svn-id: svn://10.0.0.236/trunk@67029 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-25 01:48:00 +00:00
mstoltz%netscape.com
a8b220b370 Backing out changes until I can figure out why it's crashing on startup.
git-svn-id: svn://10.0.0.236/trunk@66937 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-23 21:25:39 +00:00
mstoltz%netscape.com
85e8a5b8e2 Fixes for bugs 27010, 32878, 32948.
git-svn-id: svn://10.0.0.236/trunk@66935 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-23 20:30:29 +00:00
danm%netscape.com
fda3acfcbd dist...chrome restructuring
git-svn-id: svn://10.0.0.236/trunk@66464 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-19 21:42:30 +00:00
scc%netscape.com
7c78464470 making string conversions explicit
git-svn-id: svn://10.0.0.236/trunk@66067 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-15 05:29:33 +00:00
norris%netscape.com
f70a94e258 Fix
28390, 28866, 34364
r=brendan@mozilla.org
35701
r=jst@netscape.com


git-svn-id: svn://10.0.0.236/trunk@65940 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-14 03:14:53 +00:00
mkaply%us.ibm.com
30e533ca3d # 34082
r= warren@netscape.com
OS/2 Visual Age build - Adding PR_CALLBACK to some functoins for linkage


git-svn-id: svn://10.0.0.236/trunk@65290 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-05 02:32:07 +00:00
cls%seawood.org
a26020ddae Moved static MOZ_COMPONENT_NSPR_LIBS, MOZ_COMPONENT_XPCOM_LIBS, MOZ_COMPONENT_LIBS definitions from configure.in to config.mk. Replaced -lxpcom in Makefiles to $(XPCOM_LIBS) so that we can optionally link against -lboehm when needed. Bug #31287
git-svn-id: svn://10.0.0.236/trunk@65143 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-04 04:46:38 +00:00
scc%netscape.com
28db414fa4 making string conversions explicit
git-svn-id: svn://10.0.0.236/trunk@64827 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-01 00:39:02 +00:00
scc%netscape.com
6501ffa8c2 make string conversions explicit
git-svn-id: svn://10.0.0.236/trunk@64826 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-01 00:36:50 +00:00
scc%netscape.com
5071419800 turn on source browser in debug build; moved camelot added files into their right spots
git-svn-id: svn://10.0.0.236/trunk@64823 18797224-902f-48f8-a5cc-f745e15eee43
2000-04-01 00:32:53 +00:00
mstoltz%netscape.com
e23c3f29bf Fixed bug 30915 using nsAggregatePrincipal. r=norris
git-svn-id: svn://10.0.0.236/trunk@64652 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-31 00:31:18 +00:00
warren%netscape.com
9fa657f1cd Necko API changes: primarily nsIChannel, changing initialization parameters to accessors. Got javascript: evaluation to happen at the right time (when AsyncRead is called) as well as on the right thread.
git-svn-id: svn://10.0.0.236/trunk@64449 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-29 03:58:50 +00:00
scc%netscape.com
7bb1f6a366 small changes to clients of string conversion APIs
git-svn-id: svn://10.0.0.236/trunk@64138 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-26 01:19:41 +00:00
norris%netscape.com
953def32a1 Fix
32088 Circumventing Same Origin security policy using javascript: URLs
        32040 about: can't be link
Also remove deprecated method
r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@64066 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-24 22:15:37 +00:00
norris%netscape.com
a563d78680 Fix bug 32904 Asserts at startup in nsScriptSecurityManager.cpp
r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@63928 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-23 23:42:46 +00:00
mstoltz%netscape.com
72e0246d22 heckLoadURI now handles jar: URL's correctly. r=norris
git-svn-id: svn://10.0.0.236/trunk@63827 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-23 04:37:37 +00:00
norris%netscape.com
938b04adf8 Fix 31998 nsScriptSecurityManager not thread safe breaks table regress
git-svn-id: svn://10.0.0.236/trunk@63648 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-21 23:12:16 +00:00
mstoltz%netscape.com
a19b3f04d7 added files: mozilla/caps/idl/nsIAggregatePrincipal.idl
git-svn-id: svn://10.0.0.236/trunk@63537 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-21 04:06:47 +00:00
mstoltz%netscape.com
0949b8480e added files: mozilla/caps/src/nsAggregatePrincipal.cpp
git-svn-id: svn://10.0.0.236/trunk@63536 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-21 04:06:33 +00:00
norris%netscape.com
fd6ba38987 Adding nsAggregatePrincipal support. r=norris
git-svn-id: svn://10.0.0.236/trunk@63535 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-21 04:05:35 +00:00
norris%netscape.com
fab29b0e70 Files:
caps/idl/nsICertificatePrincipal.idl
	caps/idl/nsIPrincipal.idl
	caps/src/nsBasePrincipal.cpp
Implement the ability to manipulate multiple capabilties simultaneously.
r=mstoltz@netscape.com

Files:
	caps/src/nsCodebasePrincipal.cpp
Codebase equality should be based upon origin, not full path.
r=mstoltz@netscape.com

Files:
	caps/src/nsScriptSecurityManager.cpp
Change URI checking to deny based upon scheme rather than allow based upon
scheme for greater flexibility.
r=mstoltz@netscape.com

Files:
	dom/public/nsDOMPropEnums.h
	dom/public/nsDOMPropNames.h
	dom/src/base/nsGlobalWindow.cpp
	modules/libpref/src/init/all.js
Fix bug 20469 Seeing JS functions and global variables from arbitrary host
r=vidur@netscape.com

Files:
	dom/src/base/nsJSUtils.cpp
	dom/src/base/nsJSUtils.h
	dom/src/base/nsJSEnvironment.cpp
	dom/tools/JSStubGen.cpp
	layout/base/src/nsDocument.cpp
	layout/html/content/src/nsGenericHTMLElement.cpp
Improve performance by removing NS_WITH_SERVICE call for every DOM access.
Propagate XPCOM failure codes out properly.
r=vidur@netscape.com

Files:
	layout/html/document/src/nsFrameFrame.cpp
Fix 27387 Circumventing Same Origin security policy using setAttribute
r=vidur@netscape.com


git-svn-id: svn://10.0.0.236/trunk@62633 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-11 06:32:42 +00:00
norris%netscape.com
caf359bdc1 Fix 29419 nsScriptSecurityManager should do casinsensitive compaires
Patch submitted by andreas.otte@primus-online.de
r=norris,a=jar


git-svn-id: svn://10.0.0.236/trunk@62381 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-08 04:57:05 +00:00
bryner%uiuc.edu
7dd679d203 This allows clicked "finger:" links to work. r=norris@netscape.com.
git-svn-id: svn://10.0.0.236/trunk@61748 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-26 23:37:08 +00:00
norris%netscape.com
35518b3b5b Fix meta refresh problems with etrade, etc.
r=mstoltz
a='do the right thing'


git-svn-id: svn://10.0.0.236/trunk@61605 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-24 19:17:59 +00:00
norris%netscape.com
bf96355ad4 Fix 28612 META Refresh allowed in Mail/News
r=mstoltz,a=jar
Fix 28658 File upload vulnerability
r=vidur,a=jar


git-svn-id: svn://10.0.0.236/trunk@61523 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-23 22:34:40 +00:00
norris%netscape.com
9654846c8d Work around bug where dialog message is truncated.
a=chofmann,r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@61331 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-19 00:37:02 +00:00
norris%netscape.com
78ff426219 Fix 18439 windows.status allows reading links
r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@60428 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-11 04:18:39 +00:00
norris%netscape.com
8d750ce9f0 For some reason the sun compiler doesn't like the ?: assignment.
git-svn-id: svn://10.0.0.236/trunk@60290 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-10 06:24:38 +00:00
norris%netscape.com
ef4de2cd8f Fix bad separator in Makefile problem.
git-svn-id: svn://10.0.0.236/trunk@60287 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-10 05:33:49 +00:00
norris%netscape.com
36450a3f42 Fix 25062 Reload vulnerability
25206 Reload vulnerability #2
Implement grant dialogs and persistence for capabilities.
most r=mstoltz, some code from morse w/ r=norris


git-svn-id: svn://10.0.0.236/trunk@60281 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-10 04:56:56 +00:00
scc%netscape.com
dcee2e659d Pro5 update
git-svn-id: svn://10.0.0.236/trunk@60002 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-07 23:06:04 +00:00
norris%netscape.com
da871750f5 Fix crash in nsCodebasePrincipal::Equals when browser.registration.enable is set to true.
r=racham


git-svn-id: svn://10.0.0.236/trunk@59687 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-03 23:47:00 +00:00
norris%netscape.com
d5401f0901 Fix domain generalization for site-specific security policy.
also fix bug with enablePrivilege.
r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@59674 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-03 23:28:36 +00:00
brade%netscape.com
eeab04ed71 fix paths for move to CW5 (bug #25779)
git-svn-id: svn://10.0.0.236/trunk@59524 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-02 15:27:53 +00:00
norris%netscape.com
6fc5a6608b Fix bug #25864 watch() vulnerability
r=vidur,rogerl


git-svn-id: svn://10.0.0.236/trunk@59445 18797224-902f-48f8-a5cc-f745e15eee43
2000-02-02 00:22:58 +00:00
norris%netscape.com
2beb5e9dfd Fix warning.
git-svn-id: svn://10.0.0.236/trunk@58942 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-27 15:59:34 +00:00
norris%netscape.com
0dd1063455 Fix 23227 Document object vulnerability
r=mstoltz


git-svn-id: svn://10.0.0.236/trunk@58789 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-26 15:33:57 +00:00
jband%netscape.com
7ac1267323 Lots of xpconnect bug fixes...
- fix bug 12954 "should throw when setting non-settable props".

- fix bug 13418 "xpconnect needs to be threadsafe".
I think I filled in the cracks. Tests would be nice :)

- fix bug 22802 "[MLK] XPConnect Leaks".

- fix bug 24119 "[MLK] Reminder about cleaning up maps".

- fix bug 24453 "xpconnect needs default security manager".
I also changed the code in DOM and caps to just install a default secman and
not install a secman for each JSContext.

- fix bug 24687 "xpconect should avoid resolve performance suckage".
Added (modified) patch from shaver to create my JSObjects with the
global object as the temporary proto to avoid losing lookup.

- hack for bug 24688 "runtime errors in wrapped JS are not made obvious"
Added a debug only printf. We still need a JSErrorConsole service for this.

- fix bug 16130 "createInstanace and getService can create wrappers around wrappers"
Fixing this one really entailed changing the semantics of nsIXPConnect::wrapNative
and nsIXPConnect::wrapJS to use common code in xpcconvert that deals with existing
wrappers and DOM objects (with their own schemes for wrapping and unwrapping).
So, I changed the callers because the params changed slightly and some callers
were doing more work than necessary given the new semantics.

- Continued in the crusade to replace manaual refcounting with nsCOMPtrs whenever
touching old code.

- Added myself as first contributor to xpconnect files (vanity prevails!)

- Added new copyright header on some files that were missing it.

- Added some API comments.

- Converted nsXPCWrappedJS to implement nsIXPConnectWrappedJS via MI rather than
the old loser scheme of the nsIXPConnectWrappedJSMethods tearoff object.

- added DumpJSStack as globals to xpconnect and DOM dlls to be callable from
debuggers. I have ideas on how to improve and expand this support soon.

r=mccabe


git-svn-id: svn://10.0.0.236/trunk@58762 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-26 08:38:10 +00:00
norris%netscape.com
e4653042f2 Files:
caps/include/nsScriptSecurityManager.h
	caps/src/nsScriptSecurityManager.cpp
	modules/libpref/src/init/all.js
Fix
24565 nsScriptSecurityManager::GetSecurityLevel() is a performance
24567 re-write DOM glue security checks to avoid NS_WITH_SERVICE()
r=waterson

Files:
	dom/src/base/nsGlobalWindow.cpp
	layout/base/src/nsDocument.cpp
	layout/base/src/nsGenericElement.cpp
Fix assertion failure for 1-character property names.


Files:
	dom/src/jsurl/nsJSProtocolHandler.cpp
	webshell/src/nsDocLoader.cpp
Fix 18653 "javascript:" URLs cross windows problems (probably regressi
r=nisheeth

Files:
	layout/events/src/nsEventListenerManager.cpp
Fix
23834 document.onkeypress allows sniffing keystrokes
24152 document.onclick shows links from other window
r=joki


git-svn-id: svn://10.0.0.236/trunk@58429 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-23 04:23:14 +00:00
mstoltz%netscape.com
c5d4b0fbae Fixed build blocker on HPUX, AIX, and Solaris by adding a cast. r=norris a=jar bug=24322
git-svn-id: svn://10.0.0.236/trunk@58276 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-20 00:19:30 +00:00
norris%netscape.com
c76212942e Fix bug 24378 All DOM security checks inadvertently disabled
r=mstoltz,rogerl;a=jar


git-svn-id: svn://10.0.0.236/trunk@58269 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-19 23:39:07 +00:00
norris%netscape.com
f1c520946d Fix build bustage caused by mismatch of NS_IMETHOD usage.
git-svn-id: svn://10.0.0.236/trunk@58143 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-18 22:45:05 +00:00
waterson%netscape.com
95142c6124 Fix build bustage.
git-svn-id: svn://10.0.0.236/trunk@58134 18797224-902f-48f8-a5cc-f745e15eee43
2000-01-18 22:35:27 +00:00