janekptacijarabaci
|
df880ae53f
|
nsIContentPolicy::TYPE_DOCUMENT - Use "aLoadInfo->ContextForTopLevelLoad()" instead of "aLoadInfo->LoadingNode()"
Issue #600
|
2019-02-16 00:07:41 +08:00 |
|
janekptacijarabaci
|
53c39834e6
|
Bug 1469150 - CSP: Scripts with valid nonce get blocked if URL redirects is fixed (follow up)
|
2019-02-16 00:04:37 +08:00 |
|
janekptacijarabaci
|
a6d927b167
|
Bug 1469150 - Tests added to check scripts with valid nonce is allowed if URL redirects (follow up)
|
2019-02-16 00:04:36 +08:00 |
|
janekptacijarabaci
|
c8131a687a
|
Bug 1469150 - CSP: Scripts with valid nonce get blocked if URL redirects
https://bugzilla.mozilla.org/show_bug.cgi?id=1469150
|
2019-02-16 00:04:34 +08:00 |
|
janekptacijarabaci
|
9578e970f0
|
Bug 1430758 - No CSP directive for nsIContentPolicy::TYPE_SAVEAS_DOWNLOAD
|
2019-02-16 00:03:19 +08:00 |
|
janekptacijarabaci
|
97c6ecff55
|
Bug 1398229 - Save-link-as feature should use the loading principal - implementation of nsIContentPolicy.TYPE_SAVE_AS_DOWNLOAD
|
2019-02-16 00:03:18 +08:00 |
|
Gaming4JC
|
d4ac94cf3e
|
Remove support and tests for HSTS priming from the tree. Fixes #384
|
2019-02-15 23:59:39 +08:00 |
|
wolfbeast
|
719ac1bc38
|
Remove MOZ_B2G leftovers and some dead B2G-only components.
|
2019-02-15 23:57:05 +08:00 |
|
janekptacijarabaci
|
69c0760b8b
|
Bug 1359204 - Do not query nested URI within CheckChannel in ContentSecurityManager
|
2019-02-15 23:54:50 +08:00 |
|
janekptacijarabaci
|
846daf6d3b
|
Bug 1182569: Update ContentSecurityManager to handle docshell loads
|
2019-02-15 23:54:22 +08:00 |
|
janekptacijarabaci
|
7f09dee539
|
moebius#187: DOM - nsIContentPolicy - context (document)
https://github.com/MoonchildProductions/moebius/pull/187
|
2019-02-15 23:49:47 +08:00 |
|
janekptacijarabaci
|
850879535a
|
Revert "Bug 1182569: Update ContentSecurityManager to handle docshell loads"
This reverts commit 2e33335820b2816bee111e78588ac82e401c86ae.
|
2019-02-15 23:49:44 +08:00 |
|
janekptacijarabaci
|
983926cce7
|
Bug 1182569: Update ContentSecurityManager to handle docshell loads
native in moebius
|
2019-02-15 23:49:30 +08:00 |
|
janekptacijarabaci
|
9e52126f1a
|
Bug 1329288: Allow content policy consumers to identify contentPolicy checks from docshell
|
2019-02-15 23:49:24 +08:00 |
|
janekptacijarabaci
|
79fb0b8506
|
Bug 1329288 - Test ContentPolicy blocks opening a new window
|
2019-02-15 23:49:23 +08:00 |
|
janekptacijarabaci
|
18d312235d
|
moebius#230: Consider blocking top level window data: URIs (part 3/3 without tests)
https://github.com/MoonchildProductions/moebius/pull/230
|
2019-02-15 23:49:20 +08:00 |
|
janekptacijarabaci
|
73f89fe562
|
moebius#226: Consider blocking top level window data: URIs (part 2/2 without tests)
https://github.com/MoonchildProductions/moebius/pull/226
|
2019-02-15 23:49:19 +08:00 |
|
janekptacijarabaci
|
712d19e1b7
|
moebius#223: Consider blocking top level window data: URIs (part 1/3 without tests)
https://github.com/MoonchildProductions/moebius/pull/223
|
2019-02-15 23:49:17 +08:00 |
|
janekptacijarabaci
|
8aa17f5b90
|
moebius#159: CSP - support for "frame-ancestors" in "Content-Security-Policy-Report-Only"
https://github.com/MoonchildProductions/moebius/pull/159
|
2019-02-15 23:45:38 +08:00 |
|
janekptacijarabaci
|
6509b677d3
|
Bug 1288768 - Better error reporting for network errors in workers
|
2019-02-15 23:42:47 +08:00 |
|
wolfbeast
|
0665a343a5
|
Add support for CSP v3 "worker-src" directive
|
2019-02-15 23:35:05 +08:00 |
|
janekptacijarabaci
|
96886141e1
|
CSP: connect-src 'self' should always include https: and wss: schemes
|
2019-02-15 23:33:23 +08:00 |
|
janekptacijarabaci
|
ee67abc801
|
CSP: Support IDNs in connect-src
|
2019-02-15 23:33:21 +08:00 |
|
janekptacijarabaci
|
7de286b67c
|
CSP: Ignore nonces on <img> per spec
|
2019-02-15 23:33:20 +08:00 |
|
janekptacijarabaci
|
54e7645cb6
|
CSP: Upgrade SO navigational requests per spec.
|
2019-02-15 23:33:18 +08:00 |
|
janekptacijarabaci
|
a01c9abce8
|
CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists
|
2019-02-15 23:33:17 +08:00 |
|
wolfbeast
|
4923ad3b10
|
Explicitly cancel channel after mixed content redirect.
|
2019-02-15 23:30:31 +08:00 |
|
wolfbeast
|
fd1bb58ea8
|
CSP should only check host (not including path) when performing frame ancestors checks.
This has been explicitly stated in the CSP-3 spec.
|
2019-02-15 23:29:42 +08:00 |
|
Roy Tam
|
dcd9973243
|
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
|
2018-01-19 03:59:58 +08:00 |
|