seawood%netscape.com
82f61e52c5
Removing extra ^M. Fixing Irix cc bustage
...
git-svn-id: svn://10.0.0.236/trunk@144243 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-28 05:15:41 +00:00
jst%netscape.com
155632c501
Fixing bug 210730. ClassInfoData optimizations. r+sr=jaggernaut@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@144207 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-27 03:10:49 +00:00
timeless%mozdev.org
543383a0e6
Bug 194872 CAPS vulnerability when doing cross-site-scripting with frames from different origins and different CAPS settings (allAccess, noAccess).
...
bustage (const char*)
sr=jst
git-svn-id: svn://10.0.0.236/trunk@144181 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 03:27:01 +00:00
mstoltz%netscape.com
df95af7f9f
Bug 194872 - Cache zone-policy data on the subject principal instead of the callee. r=nisheeth, sr=jst.
...
git-svn-id: svn://10.0.0.236/trunk@144169 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 00:18:43 +00:00
jst%netscape.com
ecae24eff4
Fixing bug 209884. Writing an inline helper to safely get an nsIScriptContext from a JSContext and making direct callers of JS_GetContextPrivate() use the helper. r=caillon@aillon.org, sr=peterv@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@144108 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-24 21:43:01 +00:00
caillon%returnzero.com
588acb1f7c
Bug 163645 - User defined properties of window.navigator are not remembered when a new page is loaded.
...
Enable this for websites within the same domain only.
Also, fixes CheckSameOriginPrincipal to just check the principals, and not care whether we have anything on the JS stack.
r=mstoltz, sr=jst
git-svn-id: svn://10.0.0.236/trunk@143900 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-18 23:48:57 +00:00
harishd%netscape.com
893e8e41f1
Grant access to SOAP response document's properties and also allow the document to be serializable. b=193953, r=heikki@netscape.com, sr=jst@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@143644 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-12 20:18:34 +00:00
seawood%netscape.com
06e1507b0c
Removing old cfm build files. Use the CFM_LAST_RITES tag to resurrect. r=macdev
...
git-svn-id: svn://10.0.0.236/trunk@143527 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-10 21:18:27 +00:00
seawood%netscape.com
9e4caeaa92
Removing old cfm build files. Use the CFM_LAST_RITES tag to resurrect. r=macdev
...
git-svn-id: svn://10.0.0.236/trunk@143522 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-10 20:12:33 +00:00
dougt%meer.net
e70ad5a847
Disallowing javascript or data schemes in a redirect. r=mstoltz, sr=brendan, a=rjesup, b=195201
...
git-svn-id: svn://10.0.0.236/trunk@143054 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-29 21:56:38 +00:00
dougt%meer.net
43e230ebe2
Disallowing javascript or data schemes in a redirect. r=mstoltz, sr=brendan, a=rjesup, b=195201
...
git-svn-id: svn://10.0.0.236/trunk@143053 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-29 21:51:34 +00:00
timeless%mozdev.org
235ae5e2a0
Bug 207328 @mozilla.org/scriptsecuritymanager;1 isn't registering itself correctly as an app-startup observer service
...
r=mstoltz sr=alecf
git-svn-id: svn://10.0.0.236/trunk@143023 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-29 04:27:03 +00:00
mstoltz%netscape.com
d55cb10a60
Bug 163950 - allow opening connections for XML data transfer services when document.domain has been set. r=jst, sr=heikki.
...
git-svn-id: svn://10.0.0.236/trunk@143008 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-28 23:22:36 +00:00
dwitte%stanford.edu
dc7e857400
bug 100649: Length() being used where IsEmpty() is meant
...
treewide changes to convert incorrect usages of string.Length() to string.IsEmpty().
thanks to afatecha@idea.com.py (Ariel Fatecha) for the patch. r=dwitte, sr=jst.
got the ok from Asa to land into a closed tree.
git-svn-id: svn://10.0.0.236/trunk@142828 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-23 21:34:47 +00:00
dbradley%netscape.com
5878dbec4a
bug 205538 - Use hyphens instead of underscores in caps prefs for CID's. r=adamlock, sr=alecf, a=asa
...
git-svn-id: svn://10.0.0.236/trunk@142650 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-20 14:19:05 +00:00
jst%netscape.com
394e9fef7e
Fixing bug 202994. Make sure the proper security check is done when converting the result of a JS expression in a javascript: URL to a string. r=mstoltz@netscape.com, sr=brendan@mozilla.org, a=asa@mozilla.org
...
git-svn-id: svn://10.0.0.236/trunk@142350 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-12 22:23:52 +00:00
brendan%mozilla.org
409a6a96a8
Fix overbroad getter/setter access check to apply only to scripted getters/setters; fix wrong object class name in error messages (198660, r=mstoltz, sr=jst, a=asa).
...
git-svn-id: svn://10.0.0.236/trunk@142248 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-09 00:40:50 +00:00
dbradley%netscape.com
60e176365d
Another dummy change to cause beast to rebuild caps
...
git-svn-id: svn://10.0.0.236/trunk@141968 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-30 09:19:50 +00:00
mkaply%us.ibm.com
435fbdbda5
IRIX bustage
...
git-svn-id: svn://10.0.0.236/trunk@141666 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-23 04:28:41 +00:00
mstoltz%netscape.com
0cc266ec31
Bug 180749 - when remembering granted privileges for file://pages, grant privilege for that page only, not the whole local file system. r=jst, sr=heikki.
...
git-svn-id: svn://10.0.0.236/trunk@141642 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-23 00:21:02 +00:00
jst%netscape.com
6f39df51bc
Fixing bug 201132. Always use the JSPrincipals from the target object when compiling event handlers, never use the principals of the global object in which the event handler is compiled. Also make sure we never use the principals that are precompiled into cloned Functions, always get the principal from the Function's scope in such cases. r=mstoltz@netscape.com (and heikki@netscape.com), sr=brendan@mozilla.org
...
git-svn-id: svn://10.0.0.236/trunk@141333 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-17 20:21:00 +00:00
bzbarsky%mit.edu
880779ab82
Removing stray windows newline that causes build warning... No reviews, sorry.
...
git-svn-id: svn://10.0.0.236/trunk@140850 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-08 20:26:41 +00:00
locka%iol.ie
19052a738f
Define XPC_IDISPATCH_SUPPORT when building caps if necessary. b=198117 r=dbradley@netscape.com sr=alec@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@139835 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-20 12:10:04 +00:00
rginda%netscape.com
819a79d39d
bug 170585, Scriptable streams are broken; r=darinf, sr=dougt
...
update to readdata caller
git-svn-id: svn://10.0.0.236/trunk@139399 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-13 21:24:37 +00:00
mstoltz%netscape.com
00529830be
Bug 188229 - adding new security check function that allows component instantiation by CID. r=dveditz, sr=heikki. *not part of build yet*
...
git-svn-id: svn://10.0.0.236/trunk@139306 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-12 02:17:37 +00:00
timeless%mozdev.org
7f19212039
Bug 196340 Change NS_REINTERPRET_CAST(nsIScriptContext*, JS_GetContextPrivate(cx)) to use Static Cast
...
r=mstoltz sr=heikki
git-svn-id: svn://10.0.0.236/trunk@139117 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-07 21:54:28 +00:00
brendan%mozilla.org
a5ad42fb1b
Generalize the JS_SetCheckObjectAccessCallback hook implemented here to deal with user-defined getters and setters (92773, r=mstoltz, sr=jst).
...
git-svn-id: svn://10.0.0.236/trunk@139037 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-06 19:40:14 +00:00
rginda%netscape.com
ce1ca0b4c1
bug 191773, r=mstoltz, a=dbaron@dbaron.org
...
only allow x-jsd: urls from chrome: and resource:
git-svn-id: svn://10.0.0.236/trunk@137399 18797224-902f-48f8-a5cc-f745e15eee43
2003-02-05 01:27:56 +00:00
seawood%netscape.com
5e5146a122
Whitespace change to trigger rebuild of libs that depend upon zlib.
...
git-svn-id: svn://10.0.0.236/trunk@137127 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-30 05:53:29 +00:00
bryner%netscape.com
471802c3fa
fixing IRIX bustage (^M's from mstoltz's checkin)
...
git-svn-id: svn://10.0.0.236/trunk@136953 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-25 03:58:38 +00:00
mstoltz%netscape.com
c837a27778
Bug 189799 - Ignore username:password portion of URL when making URL comparisons for security. r=heikki, sr=jst, a=asa
...
git-svn-id: svn://10.0.0.236/trunk@136946 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-25 01:43:37 +00:00
sfraser%netscape.com
fa2a919889
Fix bug 127185: don't crash with a null JS context if running without XPT files. Fixes nsScriptSecurityManager to do more thorough error checking on initialization. r=mstoltz, sr=jst. Fixes bustage.
...
git-svn-id: svn://10.0.0.236/trunk@136470 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 02:00:01 +00:00
sfraser%netscape.com
b3ed7e7caf
Fix bug 127185: don't crash with a null JS context if running without XPT files. Fixes nsScriptSecurityManager to do more thorough error checking on initialization. r=mstoltz, sr=jst.
...
git-svn-id: svn://10.0.0.236/trunk@136464 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-17 01:00:15 +00:00
dbaron%dbaron.org
30879d2c9e
Bug 178643: Remove uses of NS_INIT_ISUPPORTS, since it's no longer needed. r=timeless sr=jag
...
git-svn-id: svn://10.0.0.236/trunk@135991 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 19:24:38 +00:00
caillon%returnzero.com
360f61e8a1
184257 - Updating pref callers. r=timeless sr=bzbarsky
...
git-svn-id: svn://10.0.0.236/trunk@135983 18797224-902f-48f8-a5cc-f745e15eee43
2003-01-08 08:40:41 +00:00
seawood%netscape.com
f8f86e7f05
Start installing GRE libraries & components into a separate dist/gre directory as part of the default build.
...
Bug #186241 r=dougt
git-svn-id: svn://10.0.0.236/trunk@135661 18797224-902f-48f8-a5cc-f745e15eee43
2002-12-28 01:15:07 +00:00
alecf%netscape.com
e38457c675
take two at fixing bug 177401 - convert nsIBinaryStream over to using nsAString/nsACString for string values, to speed up fastload
...
sr=darin, r=dougt
(the previous checkin had a typo which disabled fastload entirely!)
git-svn-id: svn://10.0.0.236/trunk@133832 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-14 18:16:31 +00:00
alecf%netscape.com
1c16ef7f73
argh, back out my last checkin because Ts went UP not down!
...
git-svn-id: svn://10.0.0.236/trunk@133447 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-09 01:31:32 +00:00
alecf%netscape.com
aac40e7aa5
fix for bug 177401 - use nsAString& classes instead of wstring in nsIBinaryInputStream, to speed up fastload startup
...
sr=darin, r=dougt
git-svn-id: svn://10.0.0.236/trunk@133429 18797224-902f-48f8-a5cc-f745e15eee43
2002-11-08 23:30:53 +00:00
mstoltz%netscape.com
51f2a63b0c
Bug 168316 - When calling from Java into JS, add a "dummy" JS stack frame with
...
principal information for the security manager. r=dveditz, sr=jst, a=chofmann.
git-svn-id: svn://10.0.0.236/trunk@132679 18797224-902f-48f8-a5cc-f745e15eee43
2002-10-30 03:15:59 +00:00
sspitzer%netscape.com
05fe9776e8
fix for #168136 . r=mstoltz, sr=dveditz.
...
for pref controlled schemes, allow access if source scheme is chrome or res.
needed for the new "view filter log UI".
git-svn-id: svn://10.0.0.236/trunk@129410 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-12 20:27:07 +00:00
dougt%netscape.com
e289284076
166917. Clean up xpcom SDK includes. r=rpotts@netscape.com, sr=alecf@netscape.com, a=rjesup@wgate.com
...
git-svn-id: svn://10.0.0.236/trunk@129050 18797224-902f-48f8-a5cc-f745e15eee43
2002-09-07 17:13:19 +00:00
jkeiser%netscape.com
00f9a12d62
Make anonymous content inaccessible to web content (bug 164086), r=sicking@bigfoot.com, sr=jst@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@128436 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-29 04:05:39 +00:00
bbaetz%student.usyd.edu.au
4e8a1e0dc7
Backing out jkeiser's checkin for bug 164086 (not bug 96537) because he
...
left a file out, and the tree turned red....
git-svn-id: svn://10.0.0.236/trunk@128332 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-28 10:13:28 +00:00
jkeiser%netscape.com
958a25b600
Make anonymous content inaccessible to web content (bug 96537), r=sicking@bigfoot.com, sr=jst@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@128330 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-28 08:19:43 +00:00
henry.jia%sun.com
d4a65691fd
Fix bug 159889: replace the hardcode of "@mozilla.org/preferences;1" with NS_PREF_CONTRACTID
...
Patch by leon.zhang@sun.com
r=Henry, sr=alecf
git-svn-id: svn://10.0.0.236/trunk@127594 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-19 04:29:58 +00:00
seawood%netscape.com
0b3ff474f3
Removing old nmake build makefiles. Bug #158528 r=pavlov
...
git-svn-id: svn://10.0.0.236/trunk@126975 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-10 07:55:43 +00:00
henry.jia%sun.com
3f9b0291d9
5th patch for bug 158080
...
Description: replace the hardcode of @mozilla.org/embedcomp/window-watcher;1 with NS_WINDOWWATCHER_CONTRACTID
Patch by Henry.Jia@sun.com
r=anto, sr=alecf
git-svn-id: svn://10.0.0.236/trunk@126458 18797224-902f-48f8-a5cc-f745e15eee43
2002-08-06 06:32:02 +00:00
sicking%bigfoot.com
9f524ba3a3
Use principals instead of URIs for same-origin checks.
...
b=159348, r=bz, sr=jst, a=asa
git-svn-id: svn://10.0.0.236/trunk@126081 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-30 21:26:32 +00:00
mstoltz%netscape.com
58a849eae5
Bug 154930 - If one page has explicitly set document.domain and another has not,
...
do not consider them to be of the same origin for security checks. r=dveditz, sr=jst
git-svn-id: svn://10.0.0.236/trunk@124781 18797224-902f-48f8-a5cc-f745e15eee43
2002-07-09 00:10:02 +00:00