cbiesinger%web.de
d02f9c7f35
Bug 235504 Remove nsCString::EqualsWithConversion(const char*)
...
r=darin sr=dbaron
git-svn-id: svn://10.0.0.236/trunk@154891 18797224-902f-48f8-a5cc-f745e15eee43
2004-04-14 20:09:30 +00:00
jst%mozilla.jstenback.com
d73251183e
Backing out the fix for bug 235457 since it made typing URLs, and autocomplete in the the URL bar not work.
...
git-svn-id: svn://10.0.0.236/trunk@154028 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-16 19:06:10 +00:00
jst%mozilla.jstenback.com
5cc3ac88a9
Fixing bug 235457. Make new windows opened through window.open be opened on the context of the opener, and make caps not lie about when capabilities are enabled. r=danm-moz@comcast.net, r=caillon@aillon.org, sr=brendan@mozilla.org, a=dbaron@dbaron.org
...
git-svn-id: svn://10.0.0.236/trunk@154020 18797224-902f-48f8-a5cc-f745e15eee43
2004-03-16 06:57:54 +00:00
darin%meer.net
af98e4f306
landing dbaron's patch for bug 235735 "fix callers that cast away const on result of ns[C]String::get" r+sr=darin
...
git-svn-id: svn://10.0.0.236/trunk@153357 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-28 22:34:07 +00:00
darin%meer.net
9770631282
fixes bug 234916 "Remove global/static NS_NAMED_LITERAL_C?STRING usage [was: Firefox crashes on startup on Mac OS X]" r=jst sr=dbaron
...
git-svn-id: svn://10.0.0.236/trunk@153191 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-25 02:08:34 +00:00
jst%mozilla.jstenback.com
854468a176
Fixing bug 233307. deCOMtaminating nsIScript* and related interfaces. r+sr=bryner@brianryner.com.
...
git-svn-id: svn://10.0.0.236/trunk@152565 18797224-902f-48f8-a5cc-f745e15eee43
2004-02-09 22:48:53 +00:00
bsmedberg%covad.net
7e08b118b7
Continuing to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet.
...
git-svn-id: svn://10.0.0.236/trunk@150973 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-07 13:37:00 +00:00
bsmedberg%covad.net
9706f93476
Beginning to land the PACKAGING_20030906_BRANCH for bug 20640. Not part of the build, yet.
...
git-svn-id: svn://10.0.0.236/trunk@150961 18797224-902f-48f8-a5cc-f745e15eee43
2004-01-07 01:22:31 +00:00
pkw%us.ibm.com
bae37edcfd
Bug 228095 - AIX: 64-bit build error in nsScriptSecurityManager.cpp
...
r=caillon@aillon.org , sr=brendan@mozilla.org , a=brendan@mozilla.org
git-svn-id: svn://10.0.0.236/trunk@150326 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-15 18:16:09 +00:00
caillon%returnzero.com
660523df15
227079 - Mozilla asks for security privileges where it shouldn't
...
Make sure we check signed.applets.codebase_principal_support and special urls before going further.
r=jst sr=bzbarsky a=dbaron
git-svn-id: svn://10.0.0.236/trunk@150007 18797224-902f-48f8-a5cc-f745e15eee43
2003-12-04 02:14:07 +00:00
brendan%mozilla.org
57f2064642
Fix missing cx param problem (223041, r=caillon, sr=dbaron).
...
git-svn-id: svn://10.0.0.236/trunk@148748 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-03 04:26:55 +00:00
dbaron%dbaron.org
e86cbc3f65
Work around bustage. Temporary fix. b=223041
...
git-svn-id: svn://10.0.0.236/trunk@148710 18797224-902f-48f8-a5cc-f745e15eee43
2003-11-02 02:31:53 +00:00
caillon%returnzero.com
f401257c19
Permit content to link to about:logo
...
Bug 223293; r=timeless sr=jst
git-svn-id: svn://10.0.0.236/trunk@148490 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-30 01:35:09 +00:00
caillon%returnzero.com
c1914505cb
Re-land patch for bug 83536, merging principal objects.
...
Also includes fixes from bug 216041.
r=bzbarsky
sr=jst
git-svn-id: svn://10.0.0.236/trunk@148229 18797224-902f-48f8-a5cc-f745e15eee43
2003-10-21 22:11:49 +00:00
brendan%mozilla.org
da7fa465a7
Better version of last change, thanks to caillon for reminding me.
...
git-svn-id: svn://10.0.0.236/trunk@147384 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-28 04:55:50 +00:00
brendan%mozilla.org
4981e3ba49
Forgot to update calls to formerly-static SecurityCompareURI (r+sr=bz).
...
git-svn-id: svn://10.0.0.236/trunk@147383 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-28 04:44:33 +00:00
brendan%mozilla.org
53924f1a53
Expose nsIScriptSecurityManager::SecurityCompareURIs for use by nsGlobalWindow::SetNewDocument, to avoid spurious window.open same-origin violation errors (220421, r=caillon, sr=bzbarsky).
...
git-svn-id: svn://10.0.0.236/trunk@147382 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-28 04:22:01 +00:00
caillon%returnzero.com
38f33a981a
about:about
...
Bug 56061
r=bryner@brianryner.com
sr=darin@meer.net
git-svn-id: svn://10.0.0.236/trunk@146846 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-13 19:35:59 +00:00
bryner%brianryner.com
260b09f147
Fix build on gcc 3.4 by removing extra semicolons (bug 218551). r/sr=dbaron, a=brendan.
...
git-svn-id: svn://10.0.0.236/trunk@146613 18797224-902f-48f8-a5cc-f745e15eee43
2003-09-07 21:37:51 +00:00
caillon%returnzero.com
d55b44719f
Backing out the patch to bug 83536.
...
I will reland this when 1.6a re-opens.
r+sr=jst@netscape.com
a=chofmann
git-svn-id: svn://10.0.0.236/trunk@146256 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-22 03:06:53 +00:00
caillon%returnzero.com
8bd93e8b6d
Bug 216234
...
Calling operator delete on an nsAutoPtr isn't good.
r+sr=dbaron@dbaron.org
a=asa@mozilla.org
git-svn-id: svn://10.0.0.236/trunk@146208 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-20 00:40:13 +00:00
caillon%returnzero.com
916e757114
Bug 214949
...
Make XUL error pages work again by making GetOrigin() return the full spec for chrome: URIs and preventing principal lookups when the principals hash is empty.
r+sr=jst@netscape.com
a=rjesup@wgate.com
git-svn-id: svn://10.0.0.236/trunk@145830 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-10 02:26:11 +00:00
brendan%mozilla.org
95220b5330
Add shared DHashTableOps for [const] char *key use-cases, clean up dhash API abusages (214839, r=dougt, sr=dbaron).
...
git-svn-id: svn://10.0.0.236/trunk@145624 18797224-902f-48f8-a5cc-f745e15eee43
2003-08-05 20:09:21 +00:00
caillon%returnzero.com
7fe85266fd
Adding comments, per bzbarsky. bug 214050.
...
git-svn-id: svn://10.0.0.236/trunk@145342 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-29 19:03:00 +00:00
caillon%returnzero.com
c9af458d0a
Don't let success of string bundle calls dictate the return value, continue to return errors. Still bug 214050.
...
git-svn-id: svn://10.0.0.236/trunk@145325 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-29 09:07:43 +00:00
caillon%returnzero.com
742898a589
Bug 214050
...
Start to localize some of the more common user-visible error messages in caps.
r+sr=bzbarsky@mit.edu
git-svn-id: svn://10.0.0.236/trunk@145319 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-29 05:28:00 +00:00
caillon%returnzero.com
eb5d77e5d2
Init mSecurityPolicy. This somehow got lost in between the last two revisions of my patch to bug 83536.
...
r=timeless,sr=bzbarsky on IRC.
git-svn-id: svn://10.0.0.236/trunk@145242 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-27 07:00:25 +00:00
caillon%returnzero.com
ee8fbe535c
213796 - Crash In CAPS.DLL On Startup [@ nsPrincipal::GetHashValue]
...
r+sr+caillonIsStupid=bzbarsky@mit.edu
git-svn-id: svn://10.0.0.236/trunk@145241 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-27 04:08:48 +00:00
caillon%returnzero.com
aa18e68f01
Bug 213847. Prompt the user for what to do if we don't know whether we can grant a capability.
...
r+sr=bzbarsky@mit.edu
git-svn-id: svn://10.0.0.236/trunk@145206 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-25 19:23:17 +00:00
caillon%returnzero.com
cd46cbbaad
Bug 83536.
...
Merge script principal implementations into one class.
Should reduce footprint, speed up calls to caps a little bit, and fixes several memory leaks.
Also fixes bugs 211174 and 211263
r=jst@netscape.com
sr=bzbarsky@mit.edu
moa=mstoltz@netscape.com (he looked at an earlier patch and said it looked fine, and will do a retroactive review when he returns from vacation as well)
git-svn-id: svn://10.0.0.236/trunk@145137 18797224-902f-48f8-a5cc-f745e15eee43
2003-07-24 05:15:20 +00:00
jst%netscape.com
155632c501
Fixing bug 210730. ClassInfoData optimizations. r+sr=jaggernaut@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@144207 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-27 03:10:49 +00:00
timeless%mozdev.org
543383a0e6
Bug 194872 CAPS vulnerability when doing cross-site-scripting with frames from different origins and different CAPS settings (allAccess, noAccess).
...
bustage (const char*)
sr=jst
git-svn-id: svn://10.0.0.236/trunk@144181 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 03:27:01 +00:00
mstoltz%netscape.com
df95af7f9f
Bug 194872 - Cache zone-policy data on the subject principal instead of the callee. r=nisheeth, sr=jst.
...
git-svn-id: svn://10.0.0.236/trunk@144169 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-26 00:18:43 +00:00
jst%netscape.com
ecae24eff4
Fixing bug 209884. Writing an inline helper to safely get an nsIScriptContext from a JSContext and making direct callers of JS_GetContextPrivate() use the helper. r=caillon@aillon.org, sr=peterv@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@144108 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-24 21:43:01 +00:00
caillon%returnzero.com
588acb1f7c
Bug 163645 - User defined properties of window.navigator are not remembered when a new page is loaded.
...
Enable this for websites within the same domain only.
Also, fixes CheckSameOriginPrincipal to just check the principals, and not care whether we have anything on the JS stack.
r=mstoltz, sr=jst
git-svn-id: svn://10.0.0.236/trunk@143900 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-18 23:48:57 +00:00
harishd%netscape.com
893e8e41f1
Grant access to SOAP response document's properties and also allow the document to be serializable. b=193953, r=heikki@netscape.com, sr=jst@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@143644 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-12 20:18:34 +00:00
seawood%netscape.com
06e1507b0c
Removing old cfm build files. Use the CFM_LAST_RITES tag to resurrect. r=macdev
...
git-svn-id: svn://10.0.0.236/trunk@143527 18797224-902f-48f8-a5cc-f745e15eee43
2003-06-10 21:18:27 +00:00
dougt%meer.net
e70ad5a847
Disallowing javascript or data schemes in a redirect. r=mstoltz, sr=brendan, a=rjesup, b=195201
...
git-svn-id: svn://10.0.0.236/trunk@143054 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-29 21:56:38 +00:00
dougt%meer.net
43e230ebe2
Disallowing javascript or data schemes in a redirect. r=mstoltz, sr=brendan, a=rjesup, b=195201
...
git-svn-id: svn://10.0.0.236/trunk@143053 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-29 21:51:34 +00:00
timeless%mozdev.org
235ae5e2a0
Bug 207328 @mozilla.org/scriptsecuritymanager;1 isn't registering itself correctly as an app-startup observer service
...
r=mstoltz sr=alecf
git-svn-id: svn://10.0.0.236/trunk@143023 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-29 04:27:03 +00:00
mstoltz%netscape.com
d55cb10a60
Bug 163950 - allow opening connections for XML data transfer services when document.domain has been set. r=jst, sr=heikki.
...
git-svn-id: svn://10.0.0.236/trunk@143008 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-28 23:22:36 +00:00
dwitte%stanford.edu
dc7e857400
bug 100649: Length() being used where IsEmpty() is meant
...
treewide changes to convert incorrect usages of string.Length() to string.IsEmpty().
thanks to afatecha@idea.com.py (Ariel Fatecha) for the patch. r=dwitte, sr=jst.
got the ok from Asa to land into a closed tree.
git-svn-id: svn://10.0.0.236/trunk@142828 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-23 21:34:47 +00:00
dbradley%netscape.com
5878dbec4a
bug 205538 - Use hyphens instead of underscores in caps prefs for CID's. r=adamlock, sr=alecf, a=asa
...
git-svn-id: svn://10.0.0.236/trunk@142650 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-20 14:19:05 +00:00
jst%netscape.com
394e9fef7e
Fixing bug 202994. Make sure the proper security check is done when converting the result of a JS expression in a javascript: URL to a string. r=mstoltz@netscape.com, sr=brendan@mozilla.org, a=asa@mozilla.org
...
git-svn-id: svn://10.0.0.236/trunk@142350 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-12 22:23:52 +00:00
brendan%mozilla.org
409a6a96a8
Fix overbroad getter/setter access check to apply only to scripted getters/setters; fix wrong object class name in error messages (198660, r=mstoltz, sr=jst, a=asa).
...
git-svn-id: svn://10.0.0.236/trunk@142248 18797224-902f-48f8-a5cc-f745e15eee43
2003-05-09 00:40:50 +00:00
dbradley%netscape.com
60e176365d
Another dummy change to cause beast to rebuild caps
...
git-svn-id: svn://10.0.0.236/trunk@141968 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-30 09:19:50 +00:00
mkaply%us.ibm.com
435fbdbda5
IRIX bustage
...
git-svn-id: svn://10.0.0.236/trunk@141666 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-23 04:28:41 +00:00
mstoltz%netscape.com
0cc266ec31
Bug 180749 - when remembering granted privileges for file://pages, grant privilege for that page only, not the whole local file system. r=jst, sr=heikki.
...
git-svn-id: svn://10.0.0.236/trunk@141642 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-23 00:21:02 +00:00
jst%netscape.com
6f39df51bc
Fixing bug 201132. Always use the JSPrincipals from the target object when compiling event handlers, never use the principals of the global object in which the event handler is compiled. Also make sure we never use the principals that are precompiled into cloned Functions, always get the principal from the Function's scope in such cases. r=mstoltz@netscape.com (and heikki@netscape.com), sr=brendan@mozilla.org
...
git-svn-id: svn://10.0.0.236/trunk@141333 18797224-902f-48f8-a5cc-f745e15eee43
2003-04-17 20:21:00 +00:00
locka%iol.ie
19052a738f
Define XPC_IDISPATCH_SUPPORT when building caps if necessary. b=198117 r=dbradley@netscape.com sr=alec@netscape.com
...
git-svn-id: svn://10.0.0.236/trunk@139835 18797224-902f-48f8-a5cc-f745e15eee43
2003-03-20 12:10:04 +00:00