517 Commits

Author SHA1 Message Date
dveditz%cruzio.com
48060e3409 Improve enablePrivilege confirmation dialog text and presentation, sanity-check
privilege names (bug 253942, bug 253944) r=caillon,sr=brendan,a=chofmann,mkaply


git-svn-id: svn://10.0.0.236/trunk@161570 18797224-902f-48f8-a5cc-f745e15eee43
2004-09-01 07:53:32 +00:00
cbiesinger%web.de
1962617772 removing myself from DEBUG_CAPS_HACKER list
git-svn-id: svn://10.0.0.236/trunk@159010 18797224-902f-48f8-a5cc-f745e15eee43
2004-07-10 19:38:28 +00:00
roc+%cs.cmu.edu
0b0fa89131 Bug 226439. Convert codebase to use AppendLiteral/AssignLiteral/LowerCaseEqualsLiteral. r+sr=darin
git-svn-id: svn://10.0.0.236/trunk@157992 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-17 00:13:25 +00:00
cbiesinger%web.de
19f2df33b3 fix DEBUG_CAPS_HACKER bustage due to bug 240106
r=caillon sr=darin


git-svn-id: svn://10.0.0.236/trunk@157968 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-16 15:58:22 +00:00
dveditz%cruzio.com
701ccb5c8d bug 162020 option to delay enabling confirmation buttons r=mkaply,sr=sspitzer
git-svn-id: svn://10.0.0.236/trunk@157430 18797224-902f-48f8-a5cc-f745e15eee43
2004-06-05 09:26:01 +00:00
mkaply%us.ibm.com
365db455e3 #239580
r=danm, sr=dveditz
Extend ConfirmEx to allow setting the default button - change default button for script security to no


git-svn-id: svn://10.0.0.236/trunk@156844 18797224-902f-48f8-a5cc-f745e15eee43
2004-05-24 13:33:51 +00:00
roc+%cs.cmu.edu
bdc7e5f59b Bug 226439. Convert Seamonkey to EqualsLiteral. rs=darin
git-svn-id: svn://10.0.0.236/trunk@156785 18797224-902f-48f8-a5cc-f745e15eee43
2004-05-22 22:15:22 +00:00
bzbarsky%mit.edu
dce306232a Add a version of CheckLoadURI that takes a source principal instead of a source
URI.  Update a bunch of callers to use it.  Bug 233108, r=caillon, sr=dveditz


git-svn-id: svn://10.0.0.236/trunk@155487 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-25 16:55:27 +00:00
bryner%brianryner.com
3b4b8ed6c9 deCOMtaminate nsIScriptObjectPrincipal (bug 240745). This also fixes some code in nsCrypto.cpp that sems to have been mis-braced (I don't think it was working as intended). r+sr=jst.
git-svn-id: svn://10.0.0.236/trunk@155049 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-18 00:28:47 +00:00
gerv%gerv.net
98831918fc Bug 236613: change to MPL/LGPL/GPL tri-license.
git-svn-id: svn://10.0.0.236/trunk@155044 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-17 21:52:36 +00:00
cbiesinger%web.de
d02f9c7f35 Bug 235504 Remove nsCString::EqualsWithConversion(const char*)
r=darin sr=dbaron


git-svn-id: svn://10.0.0.236/trunk@154891 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-14 20:09:30 +00:00
jst%mozilla.jstenback.com
d73251183e Backing out the fix for bug 235457 since it made typing URLs, and autocomplete in the the URL bar not work.
git-svn-id: svn://10.0.0.236/trunk@154028 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-16 19:06:10 +00:00
jst%mozilla.jstenback.com
5cc3ac88a9 Fixing bug 235457. Make new windows opened through window.open be opened on the context of the opener, and make caps not lie about when capabilities are enabled. r=danm-moz@comcast.net, r=caillon@aillon.org, sr=brendan@mozilla.org, a=dbaron@dbaron.org
git-svn-id: svn://10.0.0.236/trunk@154020 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-16 06:57:54 +00:00
cbiesinger%web.de
2f64fe280a one more tweak, r=caillon
git-svn-id: svn://10.0.0.236/trunk@153638 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-06 20:54:47 +00:00
cbiesinger%web.de
add0c456f0 making this sound less like it's PSM, rs=caillon
git-svn-id: svn://10.0.0.236/trunk@153637 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-06 20:47:21 +00:00
darin%meer.net
af98e4f306 landing dbaron's patch for bug 235735 "fix callers that cast away const on result of ns[C]String::get" r+sr=darin
git-svn-id: svn://10.0.0.236/trunk@153357 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-28 22:34:07 +00:00
darin%meer.net
9770631282 fixes bug 234916 "Remove global/static NS_NAMED_LITERAL_C?STRING usage [was: Firefox crashes on startup on Mac OS X]" r=jst sr=dbaron
git-svn-id: svn://10.0.0.236/trunk@153191 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-25 02:08:34 +00:00
jst%mozilla.jstenback.com
854468a176 Fixing bug 233307. deCOMtaminating nsIScript* and related interfaces. r+sr=bryner@brianryner.com.
git-svn-id: svn://10.0.0.236/trunk@152565 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-09 22:48:53 +00:00
bsmedberg%covad.net
7e08b118b7 Continuing to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet.
git-svn-id: svn://10.0.0.236/trunk@150973 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-07 13:37:00 +00:00
bsmedberg%covad.net
9706f93476 Beginning to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet.
git-svn-id: svn://10.0.0.236/trunk@150961 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-07 01:22:31 +00:00
neil%parkwaycc.co.uk
8619f5bc53 Bug 227758 make subjectPrincipalIsSystem unscriptable and checkSameOriginURI scriptable r=caillon sr=dveditz
git-svn-id: svn://10.0.0.236/trunk@150538 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-19 21:51:37 +00:00
pkw%us.ibm.com
bae37edcfd Bug 228095 - AIX: 64-bit build error in nsScriptSecurityManager.cpp
r=caillon@aillon.org, sr=brendan@mozilla.org, a=brendan@mozilla.org


git-svn-id: svn://10.0.0.236/trunk@150326 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-15 18:16:09 +00:00
caillon%returnzero.com
660523df15 227079 - Mozilla asks for security privileges where it shouldn't
Make sure we check signed.applets.codebase_principal_support and special urls before going further.
r=jst sr=bzbarsky a=dbaron


git-svn-id: svn://10.0.0.236/trunk@150007 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-04 02:14:07 +00:00
brendan%mozilla.org
57f2064642 Fix missing cx param problem (223041, r=caillon, sr=dbaron).
git-svn-id: svn://10.0.0.236/trunk@148748 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-03 04:26:55 +00:00
dbaron%dbaron.org
e86cbc3f65 Work around bustage. Temporary fix. b=223041
git-svn-id: svn://10.0.0.236/trunk@148710 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-02 02:31:53 +00:00
caillon%returnzero.com
f401257c19 Permit content to link to about:logo
Bug 223293; r=timeless sr=jst


git-svn-id: svn://10.0.0.236/trunk@148490 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-30 01:35:09 +00:00
caillon%returnzero.com
c1914505cb Re-land patch for bug 83536, merging principal objects.
Also includes fixes from bug 216041.
r=bzbarsky
sr=jst


git-svn-id: svn://10.0.0.236/trunk@148229 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-21 22:11:49 +00:00
brendan%mozilla.org
da7fa465a7 Better version of last change, thanks to caillon for reminding me.
git-svn-id: svn://10.0.0.236/trunk@147384 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-28 04:55:50 +00:00
brendan%mozilla.org
4981e3ba49 Forgot to update calls to formerly-static SecurityCompareURI (r+sr=bz).
git-svn-id: svn://10.0.0.236/trunk@147383 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-28 04:44:33 +00:00
brendan%mozilla.org
53924f1a53 Expose nsIScriptSecurityManager::SecurityCompareURIs for use by nsGlobalWindow::SetNewDocument, to avoid spurious window.open same-origin violation errors (220421, r=caillon, sr=bzbarsky).
git-svn-id: svn://10.0.0.236/trunk@147382 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-28 04:22:01 +00:00
caillon%returnzero.com
38f33a981a about:about
Bug 56061
r=bryner@brianryner.com
sr=darin@meer.net


git-svn-id: svn://10.0.0.236/trunk@146846 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-13 19:35:59 +00:00
bryner%brianryner.com
260b09f147 Fix build on gcc 3.4 by removing extra semicolons (bug 218551). r/sr=dbaron, a=brendan.
git-svn-id: svn://10.0.0.236/trunk@146613 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-07 21:37:51 +00:00
caillon%returnzero.com
d55b44719f Backing out the patch to bug 83536.
I will reland this when 1.6a re-opens.
r+sr=jst@netscape.com
a=chofmann


git-svn-id: svn://10.0.0.236/trunk@146256 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-22 03:06:53 +00:00
caillon%returnzero.com
8bd93e8b6d Bug 216234
Calling operator delete on an nsAutoPtr isn't good.
r+sr=dbaron@dbaron.org
a=asa@mozilla.org


git-svn-id: svn://10.0.0.236/trunk@146208 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-20 00:40:13 +00:00
cls%seawood.org
6352367a62 Set MODULE in makefiles at the top of a heirarchy so that module-deps lists are more precise and builds will have the proper order if some subdirs contain other modules.
git-svn-id: svn://10.0.0.236/trunk@146076 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-16 00:42:35 +00:00
caillon%returnzero.com
916e757114 Bug 214949
Make XUL error pages work again by making GetOrigin() return the full spec for chrome: URIs and preventing principal lookups when the principals hash is empty.
r+sr=jst@netscape.com
a=rjesup@wgate.com


git-svn-id: svn://10.0.0.236/trunk@145830 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-10 02:26:11 +00:00
brendan%mozilla.org
95220b5330 Add shared DHashTableOps for [const] char *key use-cases, clean up dhash API abusages (214839, r=dougt, sr=dbaron).
git-svn-id: svn://10.0.0.236/trunk@145624 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-05 20:09:21 +00:00
caillon%returnzero.com
7fe85266fd Adding comments, per bzbarsky. bug 214050.
git-svn-id: svn://10.0.0.236/trunk@145342 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-29 19:03:00 +00:00
caillon%returnzero.com
c9af458d0a Don't let success of string bundle calls dictate the return value, continue to return errors. Still bug 214050.
git-svn-id: svn://10.0.0.236/trunk@145325 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-29 09:07:43 +00:00
caillon%returnzero.com
742898a589 Bug 214050
Start to localize some of the more common user-visible error messages in caps.
r+sr=bzbarsky@mit.edu


git-svn-id: svn://10.0.0.236/trunk@145319 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-29 05:28:00 +00:00
caillon%returnzero.com
eb5d77e5d2 Init mSecurityPolicy. This somehow got lost in between the last two revisions of my patch to bug 83536.
r=timeless,sr=bzbarsky on IRC.


git-svn-id: svn://10.0.0.236/trunk@145242 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-27 07:00:25 +00:00
caillon%returnzero.com
ee8fbe535c 213796 - Crash In CAPS.DLL On Startup [@ nsPrincipal::GetHashValue]
r+sr+caillonIsStupid=bzbarsky@mit.edu


git-svn-id: svn://10.0.0.236/trunk@145241 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-27 04:08:48 +00:00
caillon%returnzero.com
aa18e68f01 Bug 213847. Prompt the user for what to do if we don't know whether we can grant a capability.
r+sr=bzbarsky@mit.edu


git-svn-id: svn://10.0.0.236/trunk@145206 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-25 19:23:17 +00:00
mkaply%us.ibm.com
4f792ecf69 Ports bustage - remove NS_COM per bsmedberg
git-svn-id: svn://10.0.0.236/trunk@145161 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-24 18:58:30 +00:00
caillon%returnzero.com
cd46cbbaad Bug 83536.
Merge script principal implementations into one class.
Should reduce footprint, speed up calls to caps a little bit, and fixes several memory leaks.
Also fixes bugs 211174 and 211263
r=jst@netscape.com
sr=bzbarsky@mit.edu
moa=mstoltz@netscape.com (he looked at an earlier patch and said it looked fine, and will do a retroactive review when he returns from vacation as well)


git-svn-id: svn://10.0.0.236/trunk@145137 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-24 05:15:20 +00:00
seawood%netscape.com
82f61e52c5 Removing extra ^M. Fixing Irix cc bustage
git-svn-id: svn://10.0.0.236/trunk@144243 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-28 05:15:41 +00:00
jst%netscape.com
155632c501 Fixing bug 210730. ClassInfoData optimizations. r+sr=jaggernaut@netscape.com
git-svn-id: svn://10.0.0.236/trunk@144207 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-27 03:10:49 +00:00
timeless%mozdev.org
543383a0e6 Bug 194872 CAPS vulnerability when doing cross-site-scripting with frames from different origins and different CAPS settings (allAccess, noAccess).
bustage (const char*)
sr=jst


git-svn-id: svn://10.0.0.236/trunk@144181 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 03:27:01 +00:00
mstoltz%netscape.com
df95af7f9f Bug 194872 - Cache zone-policy data on the subject principal instead of the callee. r=nisheeth, sr=jst.
git-svn-id: svn://10.0.0.236/trunk@144169 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 00:18:43 +00:00
jst%netscape.com
ecae24eff4 Fixing bug 209884. Writing an inline helper to safely get an nsIScriptContext from a JSContext and making direct callers of JS_GetContextPrivate() use the helper. r=caillon@aillon.org, sr=peterv@netscape.com
git-svn-id: svn://10.0.0.236/trunk@144108 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-24 21:43:01 +00:00