404 Commits

Author SHA1 Message Date
dprice%netscape.com
38cab83075 65845 First cut of the order files
git-svn-id: svn://10.0.0.236/trunk@86879 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-13 02:34:59 +00:00
beard%netscape.com
86c68b32ff fix for bug #63466, r=mstoltz, sr=brendan, a=leaf
git-svn-id: svn://10.0.0.236/trunk@86811 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-12 07:47:28 +00:00
gagan%netscape.com
f3f5b36700 Optimization for scheme comparison of URIs. See bug 66577 for details. r=darin, sr=brendan@mozilla.org
git-svn-id: svn://10.0.0.236/trunk@85797 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-31 01:33:03 +00:00
mstoltz%netscape.com
579b002a49 Bug 66369, adding support for per-file permissions granting to caps. r=jst, sr=jband.
git-svn-id: svn://10.0.0.236/trunk@85606 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-27 01:42:20 +00:00
jband%netscape.com
1920eba705 fix bug 55506. If seman was initialized too early then it was failing to register its nameset. This happened on first run when JS Component Loader would use the secman. The result was that all calls to the security manager via JavaScript would fail for that session. This fixes that by continuing to try to register the nameset until it actually succeeds. r=mstoltz a=brendan
git-svn-id: svn://10.0.0.236/trunk@83113 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-30 05:32:08 +00:00
cls%seawood.org
6088dfbf6b Resurrect REQUIRES so that we have some sort of means to track intermodule dependencies. Bug #59454 r=blizzard@mozilla.org
git-svn-id: svn://10.0.0.236/trunk@82785 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-20 07:16:06 +00:00
dbaron%fas.harvard.edu
256a605351 Make nsDestroyJSPrincipals stop confusing the leak stats by calling AddRef, but not when the refcount is 0. r=mstoltz@netscape.com sr=brendan@mozilla.org b=59135
git-svn-id: svn://10.0.0.236/trunk@82414 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-08 03:06:57 +00:00
mstoltz%netscape.com
5b27bdf415 Fixing bugscape 3109, LiveConnect exploit. sr=jband, brendan.
Fixing 58021, exploit in "open in new window," bug 55237. sr=brendan


git-svn-id: svn://10.0.0.236/trunk@82368 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-07 01:14:08 +00:00
mstoltz%netscape.com
7e0791842a Bug 57937, signed frames denied access to unsigned frames. r=mccabe, sr=brendan
git-svn-id: svn://10.0.0.236/trunk@82014 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-30 20:05:07 +00:00
warren%netscape.com
a8b9664a8c Bug 47207. Backing out logging/PRINTF changes until we can fix stopwatch.h, introduce double parens, etc.
git-svn-id: svn://10.0.0.236/trunk@81967 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-28 22:17:53 +00:00
warren%netscape.com
c6b67eceeb Bug 47207. Changing printf to PRINTF to use new logging facility. r=valeski,sr=waterson
git-svn-id: svn://10.0.0.236/trunk@81885 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-27 22:43:51 +00:00
mscott%netscape.com
0c698ba87a Bug #48403 --> don't allow JS running in a mailnews sand box to change the name of it's containing iframe.
this code was contributed by mstoltz.
r=beard, sr=mscott


git-svn-id: svn://10.0.0.236/trunk@81632 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-24 00:52:02 +00:00
pollmann%netscape.com
c08a906df3 Bug 13871: Prevent frameset spoofing r=mstoltz, sr=mscott, a=rpotts
git-svn-id: svn://10.0.0.236/trunk@81449 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-19 10:25:49 +00:00
mstoltz%netscape.com
9351f77d32 Fixing 56009, exploit allowing XPConnect access. r,a=hyatt, sr=scc
git-svn-id: svn://10.0.0.236/trunk@81158 18797224-902f-48f8-a5cc-f745e15eee43
2000-10-13 22:59:47 +00:00
mstoltz%netscape.com
676f6215b3 Fixing 52497, security problem in document.implementation, r=jst a=brendan
git-svn-id: svn://10.0.0.236/trunk@79671 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-20 23:38:28 +00:00
warren%netscape.com
cdc56bbf4c Landing jar packaging from jar_restructuring_branch. r=hyatt,dprice,sfraser,dveditz,vishy,sgehani
git-svn-id: svn://10.0.0.236/trunk@79641 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-20 19:35:24 +00:00
jband%netscape.com
c620f7cc96 fix memory corruption bug 52382. r=mstoltz
git-svn-id: svn://10.0.0.236/trunk@79105 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-14 08:48:53 +00:00
rayw%netscape.com
d9228441a4 Bug 37275, Changing value of all progids, and changing everywhere a progid
is mentioned to mention a contractid, including in identifiers.

r=warren


git-svn-id: svn://10.0.0.236/trunk@79036 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-13 23:57:52 +00:00
jdunn%netscape.com
6ab857e60e Fix warning which requires a return value from functions
r= brendan@mozilla.org scc@mozilla.org
#= 52254


git-svn-id: svn://10.0.0.236/trunk@79015 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-13 11:29:18 +00:00
mstoltz%netscape.com
70914e878d bug 44147, caps grant dialog now being created from DOMWindow->GetPrompter instead of nsIPrompt service. r=dbragg
git-svn-id: svn://10.0.0.236/trunk@78560 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-09 00:53:21 +00:00
mstoltz%netscape.com
891766eb9e bug 50304, adding "static" to security policy struct, should save some memory and time. r=rogerl
git-svn-id: svn://10.0.0.236/trunk@78408 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-07 19:03:23 +00:00
scc%mozilla.org
c03fb594e2 more GCC fixes
git-svn-id: svn://10.0.0.236/trunk@78068 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-03 06:41:18 +00:00
jtaylor%netscape.com
ef09d1d30a Not part of build. Adding security regression test suite driver (mozDriver).
git-svn-id: svn://10.0.0.236/trunk@77491 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-29 21:50:56 +00:00
dp%netscape.com
88d94c12d2 bug#49786 Caching frequently used progid: nsThreadJSContextStack r=waterson
git-svn-id: svn://10.0.0.236/trunk@76865 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-22 06:02:14 +00:00
mstoltz%netscape.com
02eaec4711 Fixing 41876 r=hyatt, also 48724, 49768, and crasher in nsBasePrincipal.cpp, r=jtaylor
git-svn-id: svn://10.0.0.236/trunk@76849 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-22 02:06:52 +00:00
warren%netscape.com
895569159c Fix for hash code performance problem discovered by bienvenu. 'Sampling' hash code was statistically evil.
git-svn-id: svn://10.0.0.236/trunk@76761 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-20 21:29:10 +00:00
shaver%mozilla.org
84ea4561c3 Fix 47354 and 39975 by providing a system-privileged scope backstop for
JS Components, and teaching the ScriptSecurityManager to check for
XPC-wrapped native objects in the scope chain when looking for an
object's principal. r=jband/a=brendan


git-svn-id: svn://10.0.0.236/trunk@76407 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-16 04:01:02 +00:00
dougt%netscape.com
6591791df9 Changing the nsDirectoryService define. This should have been done with the rest of the nsDirectorySerivce changes. r=conrad.
git-svn-id: svn://10.0.0.236/trunk@76309 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-14 22:38:27 +00:00
jtaylor%netscape.com
0a53eb51a1 Fixes bug #45877. r=mstoltz.
git-svn-id: svn://10.0.0.236/trunk@76081 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-11 03:11:24 +00:00
warren%netscape.com
e5706a7236 Bug 46711. Removed nsAutoString travisty from nsStringKey. Introduced nsCStringKey. Made them both share the underlying string when possible. r=waterson
git-svn-id: svn://10.0.0.236/trunk@75975 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-10 06:19:37 +00:00
jband%netscape.com
278cbd4584 fix bug 47410. Allow JS components to implement nsISecurityCheckedComponent and have sidebar componnet implement it to allow access from untrusted scripts. a=brendan@mozilla.org a=johng@netscape.com
git-svn-id: svn://10.0.0.236/trunk@75834 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-08 23:59:32 +00:00
warren%netscape.com
5941ddaa3e Getting jar files in shape. Mostly works on unix, status bar missing (not in build yet).
git-svn-id: svn://10.0.0.236/trunk@75393 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-02 06:48:45 +00:00
mstoltz%netscape.com
6bfe9c11ce Fixing 40159, nasty infinite recursion on startup. r&a=beard
git-svn-id: svn://10.0.0.236/trunk@74797 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-26 04:53:01 +00:00
mstoltz%netscape.com
0d04dfcd48 fix for 42387, r=dveditz
git-svn-id: svn://10.0.0.236/trunk@74510 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-20 01:16:15 +00:00
mstoltz%netscape.com
9e2ab39e7d Fixing 40159 and 44822, both [nsbeta2+] regressions on signed scripts. r=sgehani
git-svn-id: svn://10.0.0.236/trunk@74078 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-12 03:10:33 +00:00
cls%seawood.org
50a5bb697c Start tedious process of removing obsolete mozilla/include files from build. This patch should take us down to 19 of 101. Bug #38061
git-svn-id: svn://10.0.0.236/trunk@73904 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-10 07:13:31 +00:00
mstoltz%netscape.com
2566397fdc DOM properties default to same origin access only. Bug 28443. r=rginda
git-svn-id: svn://10.0.0.236/trunk@73681 18797224-902f-48f8-a5cc-f745e15eee43
2000-07-05 19:08:20 +00:00
dcone%netscape.com
4d3af51cc1 Added the IDL file for Vidur.
git-svn-id: svn://10.0.0.236/trunk@73074 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-23 15:22:38 +00:00
vidur%netscape.com
0ff74154af Checking in for mccabe, since he had to leave town. Partial fix for bug 41429. Adding a new interface that components can implement to control the capabilities needed for XPConnect access to them - default is UniversalXPConnect. r=vidur
git-svn-id: svn://10.0.0.236/trunk@73066 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-23 14:32:38 +00:00
joki%netscape.com
948602adcc Part of fix for 38117, prevent scripts from running event handlers on windows from other domains. r:mstoltz
git-svn-id: svn://10.0.0.236/trunk@72698 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-21 00:21:50 +00:00
mstoltz%netscape.com
3d1b833a1e Dogfood bug 42076 - allowing file:// urls to load chrome:// URLs. r=evaughan.
git-svn-id: svn://10.0.0.236/trunk@72442 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-16 22:22:38 +00:00
warren%netscape.com
cc5d426fbe Renaming nsIAllocator to nsIMemory (and nsAllocator to nsMemory). API cleanup/freeze. Bug #18433
git-svn-id: svn://10.0.0.236/trunk@71450 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-03 09:46:12 +00:00
mstoltz%netscape.com
02532660a5 On Mac, we should look for systemSignature.jar in Essential FIles, not the bin directory. Bug 40468, r=sgehani, a=clayton.
git-svn-id: svn://10.0.0.236/trunk@71397 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-02 22:22:11 +00:00
mstoltz%netscape.com
8d64704489 Fix for 16858 w/o breaking directory browser. r=waterson a=beard
git-svn-id: svn://10.0.0.236/trunk@71307 18797224-902f-48f8-a5cc-f745e15eee43
2000-06-01 23:57:48 +00:00
mstoltz%netscape.com
21edbcf9bf Fixed bug in DOM security checks, fixes bug 37907, 23516. Added security check for htmlelement.innerhtml, fixes 39083. Added location check to BASE HREF=, fixes 35859. r=vidur. Added check to style= tag, fixes 16858, r=pierre.
git-svn-id: svn://10.0.0.236/trunk@70965 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-26 23:28:40 +00:00
cls%seawood.org
87c20e0328 Mass replace of -lmozjs with $(MOZ_JS_LIBS) needed for OS/2 and consistency.
git-svn-id: svn://10.0.0.236/trunk@70360 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-17 06:45:45 +00:00
mstoltz%netscape.com
0fdc57f6f2 Allow scripting of plugins by untrusted web scripts. Bug 36375.
git-svn-id: svn://10.0.0.236/trunk@70246 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-17 02:38:22 +00:00
mstoltz%netscape.com
65b118d587 Removing archive attribute from nsCertificatePrincipal. This will not be used.
git-svn-id: svn://10.0.0.236/trunk@70127 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-16 22:37:38 +00:00
mstoltz%netscape.com
a91654aee3 Fixing bustage in nsCertificatePrincipal.cpp
git-svn-id: svn://10.0.0.236/trunk@69975 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-16 04:15:56 +00:00
mstoltz%netscape.com
a24d345d24 Fixes for 32878, 37739. Added PR_CALLBACK macros. Changed security.principal pref syntax to a nicer syntax. Removed "security.checkxpconnect" hack.
git-svn-id: svn://10.0.0.236/trunk@69963 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-16 03:40:51 +00:00