Commit graph

285 commits

Author SHA1 Message Date
roytam1
1822f2031e Merge remote-tracking branch 'origin/tracking' into custom 2022-07-30 08:49:22 +08:00
Job Bautista
faa778ec9d Issue #1975 - Implement Origin header CSRF mitigation.
Backported from Mozilla bug 446344.
2022-07-30 08:43:44 +08:00
Moonchild
5ed7e7d56d Issue #1805 - Improve stack size limits for all targets.
This allows us to use a greater rendering depth for exceedingly-deep DOM trees
in layout, better matching what mainstream browsers are capable of. Note that
for 32-bit Windows the stack size MUST be set to larger than the default or Bad
Things Will Happen™ - we use 1.5 MB for this as a carefully-tuned value.

This needs to be capped specifically for JS use because some JavaScript
obfuscators deliberately trigger stack overflows and would lock up the browser
otherwise as long as there's still stack space to abuse. For web compatibility
we therefore limit this to 2MB in JS only (3x for ASAN) while still allowing
a greater depth for the layout engine.
2022-07-26 22:26:38 +08:00
roytam1
206c9dcbbf Merge remote-tracking branch 'origin/tracking' into custom 2022-07-05 17:28:42 +08:00
Moonchild
7c429f525e [network] Clean up and update the list of external protocol handlers. 2022-07-05 17:20:22 +08:00
roytam1
1e871780fb Merge remote-tracking branch 'origin/tracking' into custom 2022-05-19 21:00:31 +08:00
Moonchild
8dfcd4553f Issue #1210 - Keep timepicker disabled for now.
This needs localization work before enabling.
2022-05-19 20:59:45 +08:00
Moonchild
40e9f40e89 Issue #1813 - Enable date and time picker by default.
Resolves #1813
2022-05-19 20:59:42 +08:00
roytam1
297adbdb2c pref: enable CSS grid 2022-05-10 21:17:58 +08:00
roytam1
7f068ecce3 Merge remote-tracking branch 'origin/tracking' into custom 2022-05-04 10:14:24 +08:00
Brian Smith
d5c43d1d35 Issue #1829 - Readd code cleanup that is not Mac related that got clobbered by reverting Issue #1751 2022-05-04 10:01:23 +08:00
Brian Smith
13fcc4a046 Issue #1829 - Revert "Issue #1751" 2022-05-04 09:40:24 +08:00
roytam1
6de07653b9 Merge remote-tracking branch 'origin/tracking' into custom 2022-04-28 10:45:19 +08:00
Moonchild
eaf9e756a0 Issue #21 - Remove remaining telemetry structs, callers and flags. 2022-04-28 10:33:44 +08:00
roytam1
304125d9e5 Merge remote-tracking branch 'origin/tracking' into custom 2022-04-25 20:53:39 +08:00
Moonchild
3f9cd2050f Issue #1879 - Revert changes to cryptox.h
The error when removing this code was an #if vs #elif. But since we're planning
to restore MacOSX anyway, may as well rever the entire file here :)
2022-04-25 20:51:56 +08:00
roytam1
96fb72ec56 Merge remote-tracking branch 'origin/tracking' into custom 2022-04-19 22:11:35 +08:00
Moonchild
a195efca40 Issue #1859 - Part 3: Replace bzip2 handling in MAR files with xz.
Since there really is no need to add file detection logic to the updater
if updating through AUS is old->new only anyway, replacing bzip2
handling with xz handling is fine, instead of adding it.
Considering the far superior compression of LZMA and MAR not being
a common archive format anyway, let's just K.I.S.S. it :)
2022-04-19 22:04:43 +08:00
Moonchild
fc95b11fae Issue #1859 - Part 2: xz-embedded build config changes
Always build as static lib for use in updater.
2022-04-19 22:04:36 +08:00
Moonchild
bf11d77c4c Issue #1859 - Part 1: Update xz-embedded library.
This also updates the script for updating and README.
2022-04-19 22:04:15 +08:00
FranklinDM
4f059d2c8b Issue #1838 - Part 1: Remove CSS grid preference
Based on https://bugzilla.mozilla.org/show_bug.cgi?id=1398492
2022-04-19 21:55:49 +08:00
roytam1
eb6e4fbafe zlib: also pick up 4346a16853 2022-04-10 23:05:55 +08:00
roytam1
7f4e10147f zlib: CVE-2018-25032 fix, from 5c44459c3b 2022-04-01 23:55:11 +08:00
roytam1
e5ac0b779f Merge remote-tracking branch 'origin/tracking' into custom 2021-09-16 10:24:34 +08:00
roytam1
cefef008d1 Bug 1721107 - block mk protocol, r=dveditz, a=RyanVM 2021-09-16 10:23:03 +08:00
roytam1
a49b1a5902 import change from tenfourfox:
- closes #647: M1724107 M1721107+backbugs M1716622 +TLDs (a3a4a114b)
2021-09-07 10:23:53 +08:00
roytam1
c0cea40182 Merge remote-tracking branch 'origin/master' into custom 2021-07-15 09:47:07 +08:00
Moonchild
3612f45a90 [network] Stop treating http and https as different for encoding schemes.
There is no reason to treat available encoding schemes for these protocols
differently.
2021-07-15 09:23:13 +08:00
roytam1
fe79e2a96a Merge remote-tracking branch 'origin/master' into custom 2021-07-08 10:54:34 +08:00
Moonchild
b33cc1faa8 [network] Enable brotli compression on http for sites that offer it. 2021-07-08 09:57:11 +08:00
roytam1
20c6498ca1 Merge remote-tracking branch 'origin/master' into custom 2021-06-24 11:13:09 +08:00
athenian200
efc6048941 Issue #1784 - Add -moz-dark-theme media query and allow prefers-color-scheme to follow it. 2021-06-24 11:10:22 +08:00
roytam1
d4582b821c Merge remote-tracking branch 'origin/master' into custom 2021-05-07 09:56:55 +08:00
Moonchild
a4b0f333ba Issue #1751 -- Remove XP_MACOSX conditionals from the rest of the tree.
This also removes some PP abuse and takes file entries out of PP when no longer
needed without XP_MACOSX conditionals.
2021-05-07 09:53:59 +08:00
roytam1
7f6520be1a Merge remote-tracking branch 'origin/master' into custom 2021-04-02 10:50:32 +08:00
athenian200
618fa768c8 Issue #1757 - Reinstate "dom.details_element.enabled" preference
The removal of this preference was botched, all other surrounding plumbing changes appear to be working okay. The ability to use prefs to control this stylesheet might be useful in the future, so perhaps this is one of those "if it ain't broke, don't fix it" bugs where leaving well enough alone in the first place would have been the best choice.
2021-04-02 10:33:54 +08:00
roytam1
f9ded55f98 Merge remote-tracking branch 'origin/master' into custom 2021-03-25 09:26:26 +08:00
athenian200
da2461fa57 Issue #1752 - Implement "prefers-color-scheme" as a user preference.
This PR passes all current tests for this feature, and implements the "prefers-color-scheme" media query as an enumerated keyword that is controlled by an integer preference.

Currently, the possible options are 0 to see a website's fallback code and essentially behave like this isn't implemented (our current behavior), 1 to express a preference for a light theme (the default for spec reasons), and 2 to express a preference for a dark theme. Over time, this list may expand to include other preferences like a preference for a sepia theme or something, and this leaves us prepared for that future.
2021-03-25 09:05:20 +08:00
roytam1
4a010b9495 Merge remote-tracking branch 'origin/master' into custom 2021-03-19 09:08:13 +08:00
Moonchild
a29e342411 [CSS] Enable scrollbar-width keyword by default.
I totally forgot this <.<
2021-03-19 09:07:46 +08:00
roytam1
e54fcd15f1 Merge remote-tracking branch 'origin/master' into custom 2021-03-12 09:00:51 +08:00
Moonchild
0ced696351 Issue #1053 - Remove Android-specific blocks from system headers and /dom 2021-03-12 08:57:47 +08:00
roytam1
d72c60c303 Merge remote-tracking branch 'origin/master' into custom 2021-01-27 21:05:06 +08:00
Matt A. Tobin
d4324dc064 Issue #1390 - Clean up presentation api leftovers 2021-01-27 21:01:56 +08:00
Moonchild
a828a5f321 Issue #1719 - Make <menuitem> pref-controlled and disable by default.
Resolves #1719
2021-01-27 21:01:54 +08:00
Moonchild
74680d59a1 Issue #1319 - Resolve RELEASE_OR_BETA questions in all.js
- Enabled SVG transform-box property. I've tested this extensively including the
bug that prevented Mozilla from shipping until 55 which does not seem to apply
to us (most likely a stylo issue). Should be good to go.
- Moved the getRootNode pref to a better place (no change)
- Enabled inputmode property for forms. This is n/a for physical keyboards but
should improve the experience for soft keyboards that can pop up various forms
of input (e.g. numeric) depending on the mode indicated. According to BZ this is
feature complete at our level but was problematic for Android which we don't
have support for anyway.
- Restricted crashing on insecure input of text to debug only.
- Enabled shutting down the async OSFile worker if not used for 30 seconds to
be more conscientious about resource use.
- Enabled blocking of autoplay of media in the background by default, since it
is a saner default to have for the OOBE and is commonly a desired setting by
users (see forum).
- Disabled the storage manager API by default. This fine-grained control over
stored website data is already handled by various extensions and we don't have
the front-end support for it. Assuming this was necessary for Mozilla due to
limited access of WebExtensions to this kind of data.
2021-01-27 21:01:51 +08:00
roytam1
3e1ffe6299 Merge remote-tracking branch 'origin/master' into custom 2021-01-21 14:42:57 +08:00
Moonchild
07ca4f6f03 Issue #1630 - Enable W3C pointer events by default.
Resolves #1630
2021-01-21 14:31:52 +08:00
Matt A. Tobin
1f54cfa658 [Media] Enable AV1 by default if built 2021-01-21 14:31:50 +08:00
Moonchild
de53821109 Issue #1689 - Part 5: Enable DOM Animations API except the preffed-off parts.
This enables the DOM Animations API core functions with the exception of those
parts that are either unimplemented or not ready for use, which have been
preffed off in this issue's previous parts.

Also tag #1319 for enabling a previous RELEASE_OR_BETA shielded API.
2021-01-21 14:31:25 +08:00