Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Clean up a number of unused variables. | wolfbeast | 2018-09-29 |
| | | | | Tag #21. | ||
* | Merge pull request #791 from g4jc/session_supercookie | Moonchild | 2018-09-27 |
|\ | | | | | Issue #792 - backport mozbug 1334776 - CVE-2017-7797 Header name interning leaks across origins | ||
| * | backport mozbug 1334776 - CVE-2017-7797 Header name interning leaks across ↵ | Gaming4JC | 2018-09-25 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | origins Potential attack: session supercookie. [Moz Notes](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c5): "The problem is that for unknown header names we store the first one we see and then later we case-insensitively match against that name *globally*. That means you can track if a user agent has already seen a certain header name used (by using a different casing and observing whether it gets normalized). This would allow you to see if a user has used a sensitive service that uses custom header names, or allows you to track a user across sites, by teaching the browser about a certain header case once and then observing if different casings get normalized to that. What we should do instead is only store the casing for a header name for each header list and not globally. That way it only leaks where it's expected (and necessary) to leak." [Moz fix note](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c8): "nsHttpAtom now holds the old nsHttpAtom and a string that is case sensitive (only for not standard headers). So nsHttpAtom holds a pointer to a header name. (header names are store on a static structure). This is how it used to be. I left that part the same but added a nsCString which holds a string that was used to resoled the header name. So when we parse headers we call ResolveHeader with a char*. If it is a new header name the char* will be stored in a HttpHeapAtom, nsHttpAtom::_val will point to HttpHeapAtom::value and the same strings will be stored in mLocalCaseSensitiveHeader. For the first resolve request they will be the same but for the following maybe not. At the end this nsHttpAtom will be stored in nsHttpHeaderArray. For all operation we will used the old char* except when we are returning it to a script using VisitHeaders." | ||
* | | Build nsJSInspector regardless of devtools | Matt A. Tobin | 2018-09-26 |
|/ | |||
* | Remove all C++ Telemetry Accumulation calls. | wolfbeast | 2018-09-03 |
| | | | | | This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables). Stub resolution/removal should be a follow-up to this. | ||
* | Remove support for TLS session caches in TLSServerSocket. | wolfbeast | 2018-09-01 |
| | | | | This resolves #738 | ||
* | DevTools - display newlines in some console messages | janekptacijarabaci | 2018-07-09 |
| | | | | Issue #614 | ||
* | Fix typos in comments - memory.properties | janekptacijarabaci | 2018-07-07 |
| | |||
* | Fix typo in a comment - performance.dtd | janekptacijarabaci | 2018-07-01 |
| | |||
* | Fix typos in comments - animationinspector.properties | janekptacijarabaci | 2018-06-29 |
| | |||
* | Use MOZ_AUSTRALIS to define common shared Australis features | Matt A. Tobin | 2018-06-28 |
| | |||
* | Merge pull request #545 from janekptacijarabaci/devtools_eyedropper_slow_1 | Moonchild | 2018-06-25 |
|\ | | | | | DevTools - Eyedropper Tool - Used "createImageBitmap(canvas.toBlob())" instead of "createImageBitmap(ctx.getImageData())" | ||
| * | DevTools - Eyedropper Tool - Used "createImageBitmap(canvas.toBlob())" ↵ | janekptacijarabaci | 2018-06-24 |
| | | | | | | | | | | | | instead of "createImageBitmap(ctx.getImageData())" Issue #544 | ||
* | | Replace Firefox with "the browser" in webide.properties. | JustOff | 2018-06-25 |
|/ | |||
* | Add extra `Firefox` -> `browser` changes in `webide.properties` | JustOff | 2018-06-18 |
| | |||
* | Correct the browser and platform names in `devtools\client` | JustOff | 2018-06-18 |
| | |||
* | Added Ci.nsIContentPolicy.TYPE_SAVEAS_DOWNLOAD to next files | janekptacijarabaci | 2018-06-17 |
| | |||
* | Fix typos in comments - scratchpad.properties | janekptacijarabaci | 2018-06-15 |
| | |||
* | Remove Social API. | Ascrod | 2018-05-30 |
| | |||
* | Remove support and tests for HSTS priming from the tree. Fixes #384 | Gaming4JC | 2018-05-26 |
| | |||
* | Revert "Remove the Social API" | Moonchild | 2018-05-25 |
| | |||
* | Remove the Social API | Ascrod | 2018-05-24 |
| | |||
* | Don't linkify data: or javascript: URLs in the web console. | wolfbeast | 2018-05-15 |
| | |||
* | Remove other gonk widget conditionals and unused files. | wolfbeast | 2018-05-13 |
| | | | | Tag #288. | ||
* | Merge pull request #339 from janekptacijarabaci/devtools_browserconsole_bodies_1 | Moonchild | 2018-05-08 |
|\ | | | | | DevTools - fix a comment in webConsole.dtd (Web Console and Browser Console) | ||
| * | [follow up] DevTools - fix a comment in webConsole.dtd (Web Console and ↵ | janekptacijarabaci | 2018-05-08 |
| | | | | | | | | | | | | Browser Console - not in the context menu) Issue #102 and #337 | ||
| * | DevTools - fix a comment in webConsole.dtd (Web Console and Browser Console) | janekptacijarabaci | 2018-05-07 |
| | | | | | | | | Issue #102 | ||
* | | Merge pull request #337 from janekptacijarabaci/devtools_browserconsole_bodies_1 | Moonchild | 2018-05-07 |
|\| | | | | | [regression] DevTools - Web and Browser console - Added "Log request and response bodies" preference | ||
| * | [regression] DevTools - Web and Browser console - Added "Log request and ↵ | janekptacijarabaci | 2018-05-07 |
| | | | | | | | | | | | | response bodies" preference Issue #102 | ||
* | | moebius#231: Consider blocking top level window data: URIs (tests) | janekptacijarabaci | 2018-05-06 |
|/ | | | | https://github.com/MoonchildProductions/moebius/pull/231 | ||
* | Merge pull request #319 from janekptacijarabaci/debug_warning_1 | Moonchild | 2018-05-02 |
|\ | | | | | moebius#146: Building with "--enable-debug" - fix some warnings | ||
| * | Building with "--enable-debug" - fix some warnings | janekptacijarabaci | 2018-05-02 |
| | | | | | | | | | | https://github.com/MoonchildProductions/moebius/pull/146 https://github.com/MoonchildProductions/Pale-Moon/pull/1400 | ||
* | | Merge pull request #320 from janekptacijarabaci/instanceof_negations_1 | Moonchild | 2018-05-02 |
|\ \ | | | | | | | palemoon#1173: Fix unsafe "instanceof" negations | ||
| * | | Fix unsafe "instanceof" negations | janekptacijarabaci | 2018-05-02 |
| |/ | | | | | | | https://github.com/MoonchildProductions/Pale-Moon/pull/1173 | ||
* / | Issue #316 - Always build heapsnapshot regardless of the rest of the ↵ | Matt A. Tobin | 2018-05-01 |
|/ | | | | devtools for now | ||
* | Bug 1329032 - Extend loadURIWithOptions by a triggeringPrincipal (without an ↵ | janekptacijarabaci | 2018-04-30 |
| | | | | hard e10s) | ||
* | Merge pull request #297 from janekptacijarabaci/css_text-justify_1 | Moonchild | 2018-04-29 |
|\ | | | | | CSS - implement text-justify property | ||
| * | moebius#90: CSS - implement text-justify property | janekptacijarabaci | 2018-04-01 |
| | | |||
* | | moebius#158: The Performance Resource Timing (added support for "workerStart") | janekptacijarabaci | 2018-04-29 |
| | | | | | | | | https://github.com/MoonchildProductions/moebius/pull/158 | ||
* | | Merge pull request #280 from ↵ | Moonchild | 2018-04-28 |
|\ \ | | | | | | | | | | | | | janekptacijarabaci/devtools_storage_style-clean-up_1 [DevTools] Storage - style clean up - a check of the variable to see if it exists | ||
| * | | [DevTools] Storage - style clean up - a check of the variable to see if it ↵ | janekptacijarabaci | 2018-04-28 |
| | | | | | | | | | | | | | | | | | | exists (an empty line) Issue #102 | ||
| * | | [DevTools] Storage - style clean up - a check of the variable to see if it ↵ | janekptacijarabaci | 2018-04-28 |
| | | | | | | | | | | | | | | | | | | exists Issue #102 | ||
* | | | [DevTools] Storage inspector throws an error when use arrow keys | janekptacijarabaci | 2018-04-28 |
|/ / | | | | | | | Issue #102 | ||
* | | Merge pull request #225 from janekptacijarabaci/data-transfer_1 | Moonchild | 2018-04-22 |
|\ \ | | | | | | | moebius#56: DataTransfer - Pasting image from clipboard fails in some cases | ||
| * | | moebius#56: Fix: DataTransfer - Pasting image from clipboard fails in some cases | janekptacijarabaci | 2018-04-20 |
| | | | | | | | | | | | | https://github.com/MoonchildProductions/moebius/pull/56 | ||
* | | | [DevTools] Fix warnings: "Property contained reference to invalid variable" | janekptacijarabaci | 2018-04-22 |
|/ / | | | | | | | Issue #121 | ||
* | | [PALEMOON] [DevTools] Added support of the appmenu for DevTools menuitems ↵ | janekptacijarabaci | 2018-04-12 |
| | | | | | | | | | | | | | | (follow up) Issue #96 Issue #102 | ||
* | | Merge pull request #109 from janekptacijarabaci/devtools_appmenu_2 | New Tobin Paradigm | 2018-04-08 |
|\ \ | | | | | | | [PALEMOON] [DevTools] Added support of the appmenu for DevTools menuitems (follow up) | ||
| * | | [PALEMOON] [DevTools] Added support of the appmenu for DevTools menuitems ↵ | janekptacijarabaci | 2018-04-08 |
| | | | | | | | | | | | | | | | | | | | | | (follow up) Issue #96 Issue #102 | ||
* | | | [DEVTOOLS] Resolve issues with dynamically created devtools menu items vs ↵ | Matt A. Tobin | 2018-04-08 |
|/ / | | | | | | | | | | | hardcoded vs overlay Follow up to 1a36001 |