roytam1
6d9126c486
Merge remote-tracking branch 'origin/tracking' into custom
2024-06-12 15:16:10 +08:00
Moonchild
bcdf7dc845
[network] Avoid accessing raw pointers in nsTransportEventSinkProxy.
2024-06-12 15:12:37 +08:00
Moonchild
bfb171c783
[network] Perform a case-insensitive match on special cookie prefixes.
2024-06-12 15:11:50 +08:00
roytam1
f8f3b3ee43
Merge remote-tracking branch 'origin/tracking' into custom
2024-05-22 15:26:11 +08:00
Moonchild
f3413e94b9
[network] Make http digest auth cnonce length configurable.
2024-05-22 15:20:46 +08:00
roytam1
552db66da0
Merge remote-tracking branch 'origin/tracking' into custom
2024-04-19 09:37:04 +08:00
Moonchild
1ddd3ea76b
[network] Keep track of and check HTTP/2 header sizes.
2024-04-19 09:34:14 +08:00
roytam1
a944026bae
Merge remote-tracking branch 'origin/tracking' into custom
2024-04-02 22:57:21 +08:00
FranklinDM
656ee639c5
Issue #2112 - Part 1: Remove Stylo tests
2024-04-02 22:29:48 +08:00
roytam1
1804fcb5d1
Merge remote-tracking branch 'origin/tracking' into custom
2024-02-23 10:53:26 +08:00
Moonchild
9d320dac80
[network] Block set-cookie from multipart/x-mixed-replace
2024-02-23 10:53:04 +08:00
roytam1
b0345ff809
Merge remote-tracking branch 'origin/tracking' into custom
2024-01-18 10:17:09 +08:00
Moonchild
79b4c36ef8
Issue #2451 - Send referrer headers with CORS preflight requests.
...
This is dependent on referrer policy.
Fixes #2451
2024-01-18 10:04:42 +08:00
roytam1
80c4f1d745
Merge remote-tracking branch 'origin/tracking' into custom
2024-01-11 09:52:46 +08:00
Brian Smith
811bcbefd4
Issue #2402 - Optionally strictly enforce the MIME type of scripts loaded by importScripts(). https://bugzilla.mozilla.org/show_bug.cgi?id=1514680 This is default on in Firefox 67 but Moonchild requested it be set off by default.
2024-01-11 09:46:39 +08:00
roytam1
fa72b197d9
Merge remote-tracking branch 'origin/tracking' into custom
2024-01-05 10:11:42 +08:00
Martok
c451531d54
Issue #2430 - No longer force tcp send buffer size on HTTP/2 uploads > 128KB
...
With connection-level and stream-level flow control, it is not needed.
On fast connections with large-ish BWP, this can improve upload speed by > 5x
2024-01-05 10:11:19 +08:00
Martok
3e65ae353a
Issue #2430 - Allow network.http.spdy.chunk-size to be larger than 16K
...
According to https://datatracker.ietf.org/doc/html/rfc7540#section-4.2 The size of a frame payload is limited by the maximum size that a
receiver advertises in the SETTINGS_MAX_FRAME_SIZE setting. This
setting can have any value between 2^14 (16,384) and 2^24-1
(16,777,215) octets, inclusive.
2024-01-05 10:10:50 +08:00
roytam1
3039da2cb2
websocket: workaround of mSocketThread use-after-free when application is terminating
2023-12-27 19:18:18 +08:00
roytam1
a907bc3c17
Merge remote-tracking branch 'origin/tracking' into custom
2023-12-21 10:19:16 +08:00
Kershaw Chang
600142110d
Bug 1736385 - Make sure thread is alive in CacheIOThread::ThreadFunc
2023-12-21 10:18:53 +08:00
roytam1
5a362aa15b
Merge remote-tracking branch 'origin/tracking' into custom
2023-12-15 10:29:04 +08:00
Moonchild
f96001ba7c
No issue - Allow redirects for requests that require preflight
...
Spec update, see Bug 1312864
2023-12-15 09:07:32 +08:00
roytam1
b47d46219f
Merge remote-tracking branch 'origin/tracking' into custom
2023-11-24 17:07:26 +08:00
Moonchild
d55111c4fd
[Network] Fix relative URL path starting with multiple slashes
2023-11-24 17:05:20 +08:00
roytam1
bac9ec9a84
Merge remote-tracking branch 'origin/tracking' into custom
2023-10-26 10:55:31 +08:00
Moonchild
38f8fde3e3
[network] Block more invalid cookie name characters.
...
This blocks the following characters from use in the cookie name:
0x3B (semi-colon), 0x3D (equals) and 0x7F (del)
2023-10-26 10:51:50 +08:00
roytam1
ecd3cd8676
Merge remote-tracking branch 'origin/tracking' into custom
2023-10-18 11:48:06 +08:00
Moonchild
50ad087351
Issue #1721 - Implement GlobalPrivacyControl
...
(and get rid of failed DoNotTrack)
2023-10-18 10:17:23 +08:00
roytam1
ca9d8d3960
Merge remote-tracking branch 'origin/tracking' into custom
2023-10-18 10:03:32 +08:00
Moonchild
0315aeee73
Issue #1721 - Follow-up: Properly protect GPC header
...
Make it a singleton so it cannot be overwritten.
2023-10-18 09:54:42 +08:00
roytam1
7a3845abaf
Merge remote-tracking branch 'origin/tracking' into custom
2023-09-29 10:05:50 +08:00
Basilisk-Dev
21c624222f
Issue #2058 - add patches from dbsoft to fix Mac and FreeBSD builds
2023-09-29 09:41:03 +08:00
Basilisk-Dev
0e0bd83fe2
Issue #2058 - apply additional patches from dbsoft for OS defines
2023-09-29 09:28:49 +08:00
Basilisk-Dev
81d8af6565
Issue #2058 - Apply patches from dbsoft to fix Mac and FreeBSD builds
2023-09-29 09:28:21 +08:00
Basilisk-Dev
cc42e14a23
Issue #2058 - Fix build issues in DataChannel.cpp after sctp upgrade
2023-09-29 09:27:53 +08:00
Basilisk-Dev
de80c8a019
Issue #2058 - Initial update of usrsctp library
2023-09-29 09:23:42 +08:00
roytam1
ad0a69ae15
Merge remote-tracking branch 'origin/tracking' into custom
2023-09-28 11:51:45 +08:00
Moonchild
fb38f6d74e
[network] Refactor TransactionObserver::OnDataAvailable()
2023-09-28 11:51:24 +08:00
roytam1
e27e1cd712
Issue #2058 - Fix build issues in DataChannel.cpp after sctp upgrade
2023-09-01 11:35:30 +08:00
roytam1
6e3c4f40bf
partly import changes from tenfourfox:
...
- update usrsctp (55284dd80)
- build fixes for usrsctp (09a64c8b5)
2023-09-01 11:15:50 +08:00
roytam1
c32aeee874
partly import changes from tenfourfox:
...
- update ESR base to 115; update EV roots, pins, TLDs, TZs; security pullup (55284dd80)
2023-09-01 10:07:24 +08:00
roytam1
92d9218cf1
Merge remote-tracking branch 'origin/tracking' into custom
2023-08-31 22:43:48 +08:00
Moonchild
613cd8f4cb
[network] Hold a strong ref to mChannel in OpenConn
2023-08-31 22:42:16 +08:00
Moonchild
058e936f62
[network] Add locking around access to WebSocketChannel::mPMCECompressor
2023-08-31 22:41:14 +08:00
roytam1
9f1550fb53
Merge remote-tracking branch 'origin/tracking' into custom
2023-07-06 10:39:29 +08:00
Moonchild
96d1e2766f
[network] Prepare for requiring Authorization in CORS ACAH preflight
...
The Authorization header with a JSON Web Token (JWT) can be sent via
XMLHttpRequest without explicit authorization via Access-Control headers.
According to the spec, this must always explicitly be mentioned in ACAH
request headers and isn't allowed to be wildcarded. However, nobody
currently obeys this rule and many websites are misconfigured because
Chromium and Firefox always allowed it.
This patch adds the more stricter code but keeps it behind an #ifdef 0
to be released later on if and when there is enough consensus on the web
to obey this spec. This patch explicitly avoids the added complexity
Mozilla added to educate web devs since our role in that respect is not
significant. it's not preffed and it won't throw an explicit deprecation
warning.
See Mozilla bugs 1687364 and 1841019.
2023-07-06 10:25:09 +08:00
roytam1
4fae28f059
Merge remote-tracking branch 'origin/tracking' into custom
2023-06-26 10:38:35 +08:00
Job Bautista
51ea0e4f3a
Issue #1769 - Part 2: Implement JPEG-XL decoder and about:config and MIME plumbing.
...
Backported from Mozilla bug 1707590 whereever possible.
2023-06-24 12:16:27 +08:00
roytam1
725b27a0f5
Merge remote-tracking branch 'origin/tracking' into custom
2023-05-05 23:02:05 +08:00
