Kershaw Chang
600142110d
Bug 1736385 - Make sure thread is alive in CacheIOThread::ThreadFunc
2023-12-21 10:18:53 +08:00
roytam1
5a362aa15b
Merge remote-tracking branch 'origin/tracking' into custom
2023-12-15 10:29:04 +08:00
Moonchild
f96001ba7c
No issue - Allow redirects for requests that require preflight
...
Spec update, see Bug 1312864
2023-12-15 09:07:32 +08:00
roytam1
b47d46219f
Merge remote-tracking branch 'origin/tracking' into custom
2023-11-24 17:07:26 +08:00
Moonchild
d55111c4fd
[Network] Fix relative URL path starting with multiple slashes
2023-11-24 17:05:20 +08:00
roytam1
bac9ec9a84
Merge remote-tracking branch 'origin/tracking' into custom
2023-10-26 10:55:31 +08:00
Moonchild
38f8fde3e3
[network] Block more invalid cookie name characters.
...
This blocks the following characters from use in the cookie name:
0x3B (semi-colon), 0x3D (equals) and 0x7F (del)
2023-10-26 10:51:50 +08:00
roytam1
ecd3cd8676
Merge remote-tracking branch 'origin/tracking' into custom
2023-10-18 11:48:06 +08:00
Moonchild
50ad087351
Issue #1721 - Implement GlobalPrivacyControl
...
(and get rid of failed DoNotTrack)
2023-10-18 10:17:23 +08:00
roytam1
ca9d8d3960
Merge remote-tracking branch 'origin/tracking' into custom
2023-10-18 10:03:32 +08:00
Moonchild
0315aeee73
Issue #1721 - Follow-up: Properly protect GPC header
...
Make it a singleton so it cannot be overwritten.
2023-10-18 09:54:42 +08:00
roytam1
7a3845abaf
Merge remote-tracking branch 'origin/tracking' into custom
2023-09-29 10:05:50 +08:00
Basilisk-Dev
21c624222f
Issue #2058 - add patches from dbsoft to fix Mac and FreeBSD builds
2023-09-29 09:41:03 +08:00
Basilisk-Dev
0e0bd83fe2
Issue #2058 - apply additional patches from dbsoft for OS defines
2023-09-29 09:28:49 +08:00
Basilisk-Dev
81d8af6565
Issue #2058 - Apply patches from dbsoft to fix Mac and FreeBSD builds
2023-09-29 09:28:21 +08:00
Basilisk-Dev
cc42e14a23
Issue #2058 - Fix build issues in DataChannel.cpp after sctp upgrade
2023-09-29 09:27:53 +08:00
Basilisk-Dev
de80c8a019
Issue #2058 - Initial update of usrsctp library
2023-09-29 09:23:42 +08:00
roytam1
ad0a69ae15
Merge remote-tracking branch 'origin/tracking' into custom
2023-09-28 11:51:45 +08:00
Moonchild
fb38f6d74e
[network] Refactor TransactionObserver::OnDataAvailable()
2023-09-28 11:51:24 +08:00
roytam1
e27e1cd712
Issue #2058 - Fix build issues in DataChannel.cpp after sctp upgrade
2023-09-01 11:35:30 +08:00
roytam1
6e3c4f40bf
partly import changes from tenfourfox:
...
- update usrsctp (55284dd80)
- build fixes for usrsctp (09a64c8b5)
2023-09-01 11:15:50 +08:00
roytam1
c32aeee874
partly import changes from tenfourfox:
...
- update ESR base to 115; update EV roots, pins, TLDs, TZs; security pullup (55284dd80)
2023-09-01 10:07:24 +08:00
roytam1
92d9218cf1
Merge remote-tracking branch 'origin/tracking' into custom
2023-08-31 22:43:48 +08:00
Moonchild
613cd8f4cb
[network] Hold a strong ref to mChannel in OpenConn
2023-08-31 22:42:16 +08:00
Moonchild
058e936f62
[network] Add locking around access to WebSocketChannel::mPMCECompressor
2023-08-31 22:41:14 +08:00
roytam1
9f1550fb53
Merge remote-tracking branch 'origin/tracking' into custom
2023-07-06 10:39:29 +08:00
Moonchild
96d1e2766f
[network] Prepare for requiring Authorization in CORS ACAH preflight
...
The Authorization header with a JSON Web Token (JWT) can be sent via
XMLHttpRequest without explicit authorization via Access-Control headers.
According to the spec, this must always explicitly be mentioned in ACAH
request headers and isn't allowed to be wildcarded. However, nobody
currently obeys this rule and many websites are misconfigured because
Chromium and Firefox always allowed it.
This patch adds the more stricter code but keeps it behind an #ifdef 0
to be released later on if and when there is enough consensus on the web
to obey this spec. This patch explicitly avoids the added complexity
Mozilla added to educate web devs since our role in that respect is not
significant. it's not preffed and it won't throw an explicit deprecation
warning.
See Mozilla bugs 1687364 and 1841019.
2023-07-06 10:25:09 +08:00
roytam1
4fae28f059
Merge remote-tracking branch 'origin/tracking' into custom
2023-06-26 10:38:35 +08:00
Job Bautista
51ea0e4f3a
Issue #1769 - Part 2: Implement JPEG-XL decoder and about:config and MIME plumbing.
...
Backported from Mozilla bug 1707590 whereever possible.
2023-06-24 12:16:27 +08:00
roytam1
725b27a0f5
Merge remote-tracking branch 'origin/tracking' into custom
2023-05-05 23:02:05 +08:00
Moonchild
a39fd9e75f
Issue #1656 - Remove more vim control lines.
...
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 22:59:16 +08:00
roytam1
beb68187e5
Merge remote-tracking branch 'origin/tracking' into custom
2023-04-30 21:26:08 +08:00
Brian Smith
1109559a5d
Issue #1691 - Part 8: Fix --enable-debug builds and continue dynamic module import changes. https://bugzilla.mozilla.org/show_bug.cgi?id=1342012 Support import from timeout handlers by associating the initiating script with the compiled JSScript. Fix error message that covers all import() failures that don't throw a JS exception. https://bugzilla.mozilla.org/show_bug.cgi?id=1331662 Partial - Replace nsJSUtils::EvaluateString calls by ExecutionContext scopes. Left EvaluateString() in nsXBLProtoImplField.cpp until ExecutionContext errors can be fixed.
...
(cherry picked from commit 22fcfc77971a9bb204df664c474681f4dcf54211)
2023-04-30 21:21:06 +08:00
roytam1
e361ce2b32
Merge remote-tracking branch 'origin/tracking' into custom
2023-04-13 09:24:30 +08:00
Moonchild
c9d9616334
[network] Improve checks while parsing MIME parameters.
2023-04-13 09:23:30 +08:00
roytam1
ead737cb49
Merge remote-tracking branch 'origin/tracking' into custom
2023-03-29 11:07:18 +08:00
Moonchild
dc4bf9b823
Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel
2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d
Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
...
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.
Resolves #1831
2023-03-29 11:04:44 +08:00
roytam1
cad030d6cc
Merge remote-tracking branch 'origin/tracking' into custom
2023-01-19 09:43:10 +08:00
Moonchild
525b4e1888
[network] Avoid queue manipulation inside a loop
2023-01-19 09:40:35 +08:00
roytam1
a48debaabe
Merge remote-tracking branch 'origin/tracking' into custom
2023-01-10 08:22:51 +08:00
Martok
a6a420259c
Issue #2073 - m-c 1546500: Avoid dispatching synchronous thread shutdown runnables
2023-01-10 07:31:26 +08:00
roytam1
8f801c5c31
turn on TLS_RSA_WITH_AES_128_GCM_SHA256 to fix download from mega
2023-01-07 07:40:29 +08:00
roytam1
120ac6d556
Merge remote-tracking branch 'origin/tracking' into custom
2022-12-30 09:29:56 +08:00
Moonchild
c95a802078
Issue #2070 - When multiple HSTS headers are received, only consider the first.
...
This implements a plain interpretations of RFC 6797, which says to only consider
the first HSTS header.
This slightly conflicts with RFC 7230, which says that sending multiple headers
which can't be merged is illegal (except for a specific whitelist which HSTS isn't in),
so this situation should never occur in the first place (and would therefore not need
the explicit entry in RFC 6797).
It improves HSTS robustness dealing with non-compliant servers.
Resolves #2070
2022-12-30 09:21:48 +08:00
roytam1
4ea078d68f
Merge remote-tracking branch 'origin/tracking' into custom
2022-12-16 11:25:59 +08:00
Moonchild
f54f007d47
[network] Align cookie checks with RFC 6265 (bis)
2022-12-16 11:25:15 +08:00
Moonchild
6a1e540412
[network] move some generic websocket code to the baseclass
2022-12-16 11:24:17 +08:00
roytam1
de0b4ac202
Merge remote-tracking branch 'origin/tracking' into custom
2022-11-25 11:46:08 +08:00
Moonchild
6408291d76
[network] Fix Mac buffer overflow.
2022-11-25 11:43:19 +08:00
