Commit graph

95 commits

Author SHA1 Message Date
Moonchild
525b4e1888 [network] Avoid queue manipulation inside a loop 2023-01-19 09:40:35 +08:00
Moonchild
c95a802078 Issue #2070 - When multiple HSTS headers are received, only consider the first.
This implements a plain interpretations of RFC 6797, which says to only consider
the first HSTS header.
This slightly conflicts with RFC 7230, which says that sending multiple headers
which can't be merged is illegal (except for a specific whitelist which HSTS isn't in),
so this situation should never occur in the first place (and would therefore not need
the explicit entry in RFC 6797).

It improves HSTS robustness dealing with non-compliant servers.

Resolves #2070
2022-12-30 09:21:48 +08:00
Moonchild
37f0199c79 [Network, DOM] Align our implementation with the current CORS/Fetch spec. 2022-11-25 11:41:52 +08:00
Moonchild
0a079c2b90 Issue #2024 - Part 2: Add wildcard to Access-Control-Allow-{Method|Headers}
For requests without credentials, add wildcard to Access-Control-Allow-Headers
and Access-Control-Allow-Method.

Resolves #2024
2022-11-10 14:54:54 +08:00
Moonchild
1868e88741 Fix some debug assertions.
refactored code porting in assertions causing debug build failures.
2022-10-06 10:26:38 +08:00
Moonchild
5dfded811d Issue #80 - reinstated unified building for some large chunks of our code.
This should reduce compile complexity saving time and reducing linker stress.
2022-09-07 10:36:23 +08:00
Basilisk-Dev
b4c5ebf00a Issue #1991 - backport Mozilla bug 1266667 2022-09-01 10:18:39 +08:00
Job Bautista
faa778ec9d Issue #1975 - Implement Origin header CSRF mitigation.
Backported from Mozilla bug 446344.
2022-07-30 08:43:44 +08:00
Brian Smith
95f1786bb4 Issue #1905 - Part 4c - Follow Firefox and Safari in reporting "Intel" for Mac ARM64 devices. Based on Mozilla bug 1655285. 2022-06-22 09:00:31 +08:00
roytam1
9f078ac580 [network] fix build 2022-04-28 11:40:11 +08:00
Moonchild
eaf9e756a0 Issue #21 - Remove remaining telemetry structs, callers and flags. 2022-04-28 10:33:44 +08:00
Moonchild
8d800b1cb0 Issue #21 - Remove Telemetry plumbing and fix build.
Note this won't give working applications. Requires FE changes and
additional js module changes (next part).
2022-04-28 10:25:48 +08:00
Moonchild
e45fbf91ce [Network] Add a socket thread check and early exit for corner cases. 2022-03-22 23:24:09 +08:00
roytam1
8fb608b22d remove OSX support 2021-11-10 09:10:25 +08:00
Moonchild
3612f45a90 [network] Stop treating http and https as different for encoding schemes.
There is no reason to treat available encoding schemes for these protocols
differently.
2021-07-15 09:23:13 +08:00
Moonchild
b83d024efb [network] Hold mutex when accessing mSecurityInfo. 2021-01-27 21:03:07 +08:00
Brian Smith
e4030ad075 Issue #1690 - Part 1: Fix MacOS version detection above 10.15.
Changes based on Mozilla bug 1616404 but supporting back to 10.7.
2020-12-02 09:57:28 +08:00
Moonchild
63a7c7f90e [http] Use a copy of nsHttpConnectionInfo.
The root cause in this bug is that the connection info used by
'SpdyConnectTransaction' is the same instance as the connection info in
'nsHttpTransaction', so we should clone it and let 'SpdyConnectTransaction' use
the cloned one.
2020-11-20 09:31:27 +08:00
Moonchild
0cd673d720 Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00
Moonchild
d7a4abc3d4 Issue #1656 - Part 4: Tackle *.idl, *.css, *.ipdlh, *.webidl, *.cc 2020-09-25 22:04:18 +08:00
Moonchild
30df895eb2 Issue #1656 - Part 3: Nuke more vim config lines in the tree.
Another S&R run with some smarter matching.
2020-09-25 22:04:17 +08:00
Moonchild
8c395520d9 Issue #1656 - Part 1: Nuke most vim config lines in the tree.
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
Moonchild
52c03190ee [network/dom] Improve sanitization of download filenames. 2020-07-31 08:07:47 +08:00
Moonchild
be78f46bae Issue #80 - De-unify netwerk/protocol/http 2020-05-23 06:52:58 +08:00
wolfbeast
4337a5f1a8 Issue #1505 - Part 3: Make native mode actually native again. 2020-04-11 09:40:32 +08:00
wolfbeast
11f8f80826 Issue #1505 - Part 2: Store application build ID in nsHttpHandler
Since we're needing to reuse this several times, it makes it simpler to
just get it once in init and storing it.
2020-04-11 09:40:31 +08:00
wolfbeast
41a3028a67 Issue #1505 - Rebuild application version string
To respond dynamically to the pref change, the mAppVersion string needs
to be rebuilt.
Includes some minor improvements for corner cases and removes leftover
b2g junk.
2020-04-11 09:40:30 +08:00
wolfbeast
052b2e70a3 Issue #1280 - Un-bust certerror pages and ForgetAboutSite 2020-04-03 09:30:07 +08:00
JustOff
6aa52af7ac Issue #1473 - Fix building %OS_SLICE% on non-Windows platforms 2020-04-03 09:26:52 +08:00
JustOff
4f0a0c4606 Issue #1482 - Give dynamic SSUAO rules priority over static ones 2020-03-20 08:58:11 +08:00
JustOff
efb161c255 Issue #1053 - Remove no longer used function and modules from UserAgentUpdates.jsm 2020-03-13 10:24:01 +08:00
JustOff
0333159186 Issue #1473 - Add %OS_SLICE% macro to SSUAO to refine OS info 2020-03-13 10:23:59 +08:00
Matt A. Tobin
bb8b180863 Issue #1053 - Remove android support from netwerk/protocol/http/nsHttpHandler.cpp 2020-02-27 07:31:16 +08:00
Matt A. Tobin
93a435ae22 Issue #1053 - Remove android support from netwerk 2020-02-27 07:31:14 +08:00
wolfbeast
47cc63bc6c [Network] Bump http channel default Firefox CompatMode init value. 2020-02-14 22:46:00 +08:00
New Tobin Paradigm
57809c759f Fix preprocessor directive in UserAgentUpdates.jsm 2020-02-07 07:56:01 +08:00
Matt A. Tobin
ef27cc7fd0 Issue #65 - Remove AppConstants from netwerk/ 2020-02-07 07:52:32 +08:00
wolfbeast
c8f73fb28e No issue - Fix unsafe http methods on HTTP/2 with TLSv1.3 0RTT. 2020-01-24 09:10:40 +08:00
wolfbeast
d43f7275d0 Handle missing base64 challenge in NegotiateAuth and NTLMAuth. 2020-01-10 17:07:02 +08:00
Gaming4JC
eb555aaa47 Issue #1288 - Use NS_DECL_THREADSAFE_ISUPPORTS in HttpBaseChannel.cpp
Fixes a regression in Part 1b which caused HTML5 parser to fall off the main thread.
2019-11-22 10:45:19 +08:00
wolfbeast
fe92ae641a Issue #1275 - Add pref to disable warning prompts for SuperfluousAuth
and AutomaticAuth, and default to not prompting.

This resolves #1275.
2019-11-08 09:38:17 +08:00
wolfbeast
96cb9e1c39 Add null check in Http2Session::RecvAltSvc 2019-10-25 12:00:14 +08:00
win7-7
e6f376f5ef Convert dom/base/nsImageLoadingContent.cpp to use AsyncOpen2 and followups along with it (1445670 and 1373780 part 2 and 3)
Convert dom/base/nsImageLoadingContent.cpp to use AsyncOpen2 and followups along with it (1445670 and 1373780 part 2 and 3)
2019-08-10 06:26:08 +08:00
wolfbeast
8346f7c082 Implement a threadsafe & revised version of http2PushedStream.
This re-applies the patch for this with added typename declaration.
2019-07-22 19:56:01 +08:00
wolfbeast
6666e772e0 Revert "Implement a threadsafe & revised version of http2PushedStream."
Backed out because of gcc build failures.

This reverts commit 66fae1d81013a2321e7d607a426f834a01b847ce.
2019-07-22 19:55:58 +08:00
Honza Bambas
2b7e8039f2 Bug 1548822. 2019-07-22 19:45:14 +08:00
wolfbeast
4e15e1fec0 Check port safety for AltSvc 2019-07-22 19:44:59 +08:00
Honza Bambas
31b1431ea1 Bug 1550498. 2019-07-20 06:25:25 +08:00
wolfbeast
28e15ed590 Implement a threadsafe & revised version of http2PushedStream. 2019-07-19 10:04:43 +08:00
wolfbeast
8ad0b46284 Block http auth prompt for cross-origin image subresources by default.
Still allow this to be bypassed with a pref for those really rare corner
cases where images are loaded cross-origin by design and the session
hasn't been/can't be authenticated ahead of time.
2019-07-19 10:03:21 +08:00