15 Commits

Author SHA1 Message Date
norris%netscape.com
fd6ba38987 Adding nsAggregatePrincipal support. r=norris
git-svn-id: svn://10.0.0.236/trunk@63535 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-21 04:05:35 +00:00
norris%netscape.com
d83622d4ac * Fix the following bugs by tightening the default security policy.
17977 [DOGFOOD] Reading documents using document.body
17538 document.lastModified is exposed
17537 document.images vulnerabilities
16036 [DOGFOOD] document.Element exposes the DOM of documents from
15757 [DOGFOOD] Injecting JS code using setAttribute and getElemen
15550 Injecting text in documents from any domain using createText
15067 [DOGFOOD] getElementsByTagName() allows reading of arbitrary
* Create an array of dom property policy types and initialize it when the script security manager is created.
* Move some implementation code to a new shared implementation base class.
* Implement privilege enabling, disabling and reverting
* Implement stack walking for checking privileges.
r=mstoltz@netscape.com

* Modify nsIPref to support security policy work.
r=neeti@netscape.com


git-svn-id: svn://10.0.0.236/trunk@53254 18797224-902f-48f8-a5cc-f745e15eee43
1999-11-11 22:10:36 +00:00
norris%netscape.com
63c0017d86 Remove nsPrincipalManager.h
git-svn-id: svn://10.0.0.236/trunk@47658 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-15 21:30:10 +00:00
norris%netscape.com
82330711f4 Remove unused files.
git-svn-id: svn://10.0.0.236/trunk@47148 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-13 20:10:24 +00:00
norris%netscape.com
34b474302b Add all-powerful system principals. Remove some dead code from the build.
git-svn-id: svn://10.0.0.236/trunk@45380 18797224-902f-48f8-a5cc-f745e15eee43
1999-09-01 00:54:35 +00:00
arielb%netscape.com
ad40dbfcd5 includes updates to codbase matching security checks currently turned off
but in place.  redefined the script security manager in caps and it is
now generating codebase principals.


git-svn-id: svn://10.0.0.236/trunk@43798 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-20 09:51:02 +00:00
arielb%netscape.com
f5d498bbba removed zip support from caps module. from now on all that stuff will
be used by libjar.  should also remove a lot of memory leaks reported on
nsZip


git-svn-id: svn://10.0.0.236/trunk@42668 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-07 21:40:33 +00:00
arielb%netscape.com
a12b820894 added a new and improved factory to caps module. fixed some bugs and
cleared some warnings.  also move some methods of privilege manager to
principal manager.


git-svn-id: svn://10.0.0.236/trunk@42563 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-06 22:44:35 +00:00
arielb%netscape.com
576dedd032 add a principal manager to caps api. everything is now xpidled so
i removed the public directory from the module.


git-svn-id: svn://10.0.0.236/trunk@41771 18797224-902f-48f8-a5cc-f745e15eee43
1999-08-01 21:26:02 +00:00
arielb%netscape.com
395aa47003 removed some enums and migrated them into nsPrivilege, nsIPrivilege and
nsPrivilegemanager. cleaning up some old code from the security module
and refining their api's and such like.


git-svn-id: svn://10.0.0.236/trunk@41184 18797224-902f-48f8-a5cc-f745e15eee43
1999-07-27 00:50:59 +00:00
arielb%netscape.com
35dc473dd3 Fix to the caps security module. I removed the nsPrincipal struct, from now
on you can access principals by their xpcomed interface nsIPrincipal.


git-svn-id: svn://10.0.0.236/trunk@40961 18797224-902f-48f8-a5cc-f745e15eee43
1999-07-24 03:58:23 +00:00
arielb%netscape.com
e8083aedee idled principals interfaces and some fixes to caps manager...
git-svn-id: svn://10.0.0.236/trunk@39741 18797224-902f-48f8-a5cc-f745e15eee43
1999-07-16 20:31:18 +00:00
beard%netscape.com
576429899f 09171998 LiveConnect Carpool
git-svn-id: svn://10.0.0.236/trunk@10296 18797224-902f-48f8-a5cc-f745e15eee43
1998-09-17 19:20:20 +00:00
warren%netscape.com
3c42f93bf9 Landing changes in the OJI_19980727_BRANCH since the OJI_19980727_TIP_MERGE tag.
git-svn-id: svn://10.0.0.236/trunk@6967 18797224-902f-48f8-a5cc-f745e15eee43
1998-07-31 20:19:50 +00:00
raman
8547f117f6 This is not part of any build system. caps is part of OJI effort. It will be used by JavaScript in future. Approved by warren/jar/jsw.
git-svn-id: svn://10.0.0.236/trunk@5307 18797224-902f-48f8-a5cc-f745e15eee43
1998-07-10 21:12:19 +00:00