Commit graph

1,088 commits

Author SHA1 Message Date
wolfbeast
90fc779437 Don't include MediaKeySystemAccess without EME.
This also removes checks for EME content in documents.
This removes practical use of EME by no longer having a keying system. (no-op)
tag #26
2019-02-15 23:34:00 +08:00
janekptacijarabaci
97f1f35371 Propagate plugin permissions from top-level to XO iframes. 2019-02-15 23:33:25 +08:00
janekptacijarabaci
96886141e1 CSP: connect-src 'self' should always include https: and wss: schemes 2019-02-15 23:33:23 +08:00
janekptacijarabaci
ee67abc801 CSP: Support IDNs in connect-src 2019-02-15 23:33:21 +08:00
janekptacijarabaci
7de286b67c CSP: Ignore nonces on <img> per spec 2019-02-15 23:33:20 +08:00
janekptacijarabaci
54e7645cb6 CSP: Upgrade SO navigational requests per spec. 2019-02-15 23:33:18 +08:00
janekptacijarabaci
a01c9abce8 CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists 2019-02-15 23:33:17 +08:00
wolfbeast
020e884bb8 Add site-specific overrides and remove the overruling global. 2019-02-15 23:33:11 +08:00
janekptacijarabaci
49ffafc979 JS - make window.pageYOffset/pageXOffset/scrollX/scrollY double 2019-02-15 23:32:55 +08:00
janekptacijarabaci
13ff8f0dd1 JS - URL - add toJSON support 2019-02-15 23:32:52 +08:00
wolfbeast
62de792edf Remove arbitrary NPAPI plugin whitelist for 64-bit.
This resolves #204.
2019-02-15 23:32:28 +08:00
wolfbeast
64bb8d1d33 Remove leftover flashOnly checks in the plugin registry. 2019-02-15 23:32:03 +08:00
wolfbeast
ad7526894c Remove flash-only plugin pref.
Tag issue #38.
2019-02-15 23:31:52 +08:00
NTD
9c4d520dbb Fix test paths for WebExAM 2019-02-15 23:31:40 +08:00
NTD
fb319fb148 Hook up the Tycho Add-on Manager to the build system 2019-02-15 23:31:13 +08:00
wolfbeast
0a03067ee3 Workaround for cloned videos not retaining their muted state. 2019-02-15 23:30:53 +08:00
wolfbeast
25622bbf03 Bug 1420507 2019-02-15 23:30:50 +08:00
wolfbeast
60036bd843 Use a static mutex for getting deviceId keys in MediaParent. 2019-02-15 23:30:45 +08:00
wolfbeast
3df0152d88 Implement "cookie-averse document objects".
See: https://html.spec.whatwg.org/multipage/dom.html#cookie-averse-document-object
This resolves #196.
2019-02-15 23:30:32 +08:00
wolfbeast
4923ad3b10 Explicitly cancel channel after mixed content redirect. 2019-02-15 23:30:31 +08:00
wolfbeast
03fe589f41 Fix a rare crash with asm.js caching. 2019-02-15 23:30:25 +08:00
wolfbeast
2029eff3f1 Re-enable asm.js caching 2019-02-15 23:30:23 +08:00
wolfbeast
2c29b5a5c1 Fix ReadCompressedIndexDataValuesFromBlob(). 2019-02-15 23:30:19 +08:00
wolfbeast
b67e03dc90 Check for integer overflow in AesTask::DoCrypto() (DiD)
After calling mResult.SetLength(mData.Length() + 16) we should check
that the integer addition didn't overflow. It seems at the moment
impossible to create ArrayBuffers of size >= 0x0xfffffff0, however
adding a check here doesn't hurt.

mResult.Length() is passed to the PK11 API functions as a
maxOut parameter and should be checked by the
softoken crypto algorithm implementations.
AES-ECB and AES-GCM seem to do that correctly.
2019-02-15 23:30:14 +08:00
wolfbeast
faf5d8c1c4 Fix errant comma in 4470f78754246bbd134b65cad2e0a9638418677f 2019-02-15 23:30:01 +08:00
wolfbeast
9a0997d28b Avoid unnecessary string creation. 2019-02-15 23:29:59 +08:00
trav90
384e1e2734 Update FFmpeg code to n3.2-65-gee56777 2019-02-15 23:29:48 +08:00
wolfbeast
fd1bb58ea8 CSP should only check host (not including path) when performing frame ancestors checks.
This has been explicitly stated in the CSP-3 spec.
2019-02-15 23:29:42 +08:00
wolfbeast
8aa201ff06 Add -moz-windows-accent-color-is-dark
#31 point 4
2019-02-15 23:29:12 +08:00
wolfbeast
6a03b3bc1a Add @media(-moz-windows-accent-color-applies)
#31 point 3
2019-02-15 23:29:05 +08:00
wolfbeast
97a0673483 Remove GCZeal: Base cleanup
UXP repo issue #8
2019-02-14 14:37:49 +08:00
NTD
28bbfef589 Use MOZ_PHOENIX instead of checking for 'browser' in MOZ_BUILD_APP 2019-02-14 14:35:08 +08:00
wolfbeast
2dc214fa3b Add canvas data poisoning option.
Tag #61.
2019-02-14 14:28:39 +08:00
wolfbeast
0ff3276b09 Switch GeoLocation to IP-API.com with minimal requests. 2019-02-14 14:28:37 +08:00
wolfbeast
935b074787 Implement configuration pref for Generational Garbage Collection.
Pref: javascript.options.mem.gc_generational
This resolves #20
2019-02-14 14:28:26 +08:00
wolfbeast
64fa5a9aad Support "SourceMap" header along with "X-SourceMap" 2019-02-14 14:28:23 +08:00
NTD
fe8028fa2e Add Pale Moon 2018-02-02 03:35:06 -05:00
Roy Tam
dcd9973243 import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00