mstoltz%netscape.com b51a5f7784 bug 77485 - exploit inserting a function into another window using targeted ...

javascript URL links. Two-part fix: moving the call to GetCurrentDocumentOwner
in nsDocShell::LoadInternal to before the target docshell is called, and
changing nsScriptSecurityManager::GetFunctionObjectPrincipal to only get
the principal from the function object's scope chain if the function object's
principal is the system principal. r=jst, sr=vidur, a=asa.


git-svn-id: svn://10.0.0.236/trunk@96045 18797224-902f-48f8-a5cc-f745e15eee43

2001-05-30 02:22:22 +00:00

..

jar.mn

Landing jar packaging from jar_restructuring_branch. r=hyatt,dprice,sfraser,dveditz,vishy,sgehani

2000-09-20 19:35:24 +00:00

Makefile.in

more REQUIRES bustage fixing for senna; unicharutil dependency has been introduced because caps wants nsIDocShell which wants nsIPresContext

2001-05-10 18:48:46 +00:00

makefile.win

Landing jar packaging from jar_restructuring_branch. r=hyatt,dprice,sfraser,dveditz,vishy,sgehani

2000-09-20 19:35:24 +00:00

MANIFEST_PROPERTIES

Fix 25062 Reload vulnerability

2000-02-10 04:56:56 +00:00

nsAggregatePrincipal.cpp

Bug 66369, adding support for per-file permissions granting to caps. r=jst, sr=jband.

2001-01-27 01:42:20 +00:00

nsBasePrincipal.cpp

Fix warning which requires a return value from functions

2000-09-13 11:29:18 +00:00

nsCertificatePrincipal.cpp

Fixing 41876 r=hyatt, also 48724, 49768, and crasher in nsBasePrincipal.cpp, r=jtaylor

2000-08-22 02:06:52 +00:00

nsCodebasePrincipal.cpp

sr=rpotts, r=gagan. 70743. switching over to new extensible URI::SchemeIs() api

2001-03-13 02:02:05 +00:00

nsJSPrincipals.cpp

#76913

2001-05-02 00:02:59 +00:00

nsScriptSecurityManager.cpp

bug 77485 - exploit inserting a function into another window using targeted

2001-05-30 02:22:22 +00:00

nsSecurityManagerFactory.cpp

Landing the XPCDOM_20010329_BRANCH branch, changes mostly done by jband@netscape.com and jst@netscape.com, also some changes done by shaver@mozilla.org, peterv@netscape.com and markh@activestate.com. r= and sr= by vidur@netscape.com, jband@netscape.com, jst@netscpae.com, danm@netscape.com, hyatt@netscape.com, shaver@mozilla.org, dbradley@netscape.com, rpotts@netscape.com.

2001-05-08 16:46:42 +00:00

nsSystemPrincipal.cpp

Fixes for 32878, 37739. Added PR_CALLBACK macros. Changed security.principal pref syntax to a nicer syntax. Removed "security.checkxpconnect" hack.

2000-05-16 03:40:51 +00:00

security.properties

Work around bug where dialog message is truncated.

2000-02-19 00:37:02 +00:00

win32.order

65845 - new order files

2001-04-05 06:02:32 +00:00