From 3b27d2adda8d1cb6519dfcb70b791d4d02391ecf Mon Sep 17 00:00:00 2001
From: Gaming4JC <g4jc@bulletmail.org>
Date: Mon, 18 Mar 2019 18:19:34 -0400
Subject: backport uxp #998: Improve the http basic auth DoS protection
 heuristics

---
 base/content/browser.xul    | 3 ++-
 base/content/tabbrowser.xml | 6 +++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/base/content/browser.xul b/base/content/browser.xul
index e8c9e92..3d2a446 100644
--- a/base/content/browser.xul
+++ b/base/content/browser.xul
@@ -991,7 +991,8 @@
                     contentcontextmenu="contentAreaContextMenu"
                     autocompletepopup="PopupAutoComplete"
                     selectmenulist="ContentSelectDropdown"
-                    datetimepicker="DateTimePickerPanel"/>
+                    datetimepicker="DateTimePickerPanel"
+                    authdosprotected="true"/>
       </vbox>
       <vbox id="browser-border-end" hidden="true" layer="true"/>
     </hbox>
diff --git a/base/content/tabbrowser.xml b/base/content/tabbrowser.xml
index 287e402..68c77ed 100644
--- a/base/content/tabbrowser.xml
+++ b/base/content/tabbrowser.xml
@@ -25,7 +25,7 @@
               <xul:vbox flex="1" class="browserContainer">
                 <xul:stack flex="1" class="browserStack" anonid="browserStack">
                   <xul:browser anonid="initialBrowser" type="content-primary" message="true" messagemanagergroup="browsers"
-                               xbl:inherits="tooltip=contenttooltip,contextmenu=contentcontextmenu,autocompletepopup,selectmenulist,datetimepicker"/>
+                               xbl:inherits="tooltip=contenttooltip,contextmenu=contentcontextmenu,autocompletepopup,selectmenulist,datetimepicker,authdosprotected"/>
                 </xul:stack>
               </xul:vbox>
             </xul:hbox>
@@ -1916,6 +1916,10 @@
               b.setAttribute("datetimepicker", this.getAttribute("datetimepicker"));
             }
 
+            if (this.hasAttribute("authdosprotected")) {
+              b.setAttribute("authdosprotected", this.getAttribute("authdosprotected"));
+            }
+
             b.setAttribute("autoscrollpopup", this._autoScrollPopup.id);
 
             if (aParams.relatedBrowser) {
-- 
cgit v1.2.3