wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-07 00:08:39 +09:00
Code Issues Projects Releases Packages Wiki Activity
7,055 commits 7 branches 15 tags 559 MiB
Commit graph

1,715 commits

Author SHA1 Message Date
roytam1
e72f8a3a81 Merge remote-tracking branch 'origin/tracking' into custom 2025-05-14 14:36:05 +08:00
Moonchild
53a6f6349d Issue #2736 - Part 14: Make CSP-enabled available to workers. 2025-05-14 14:35:35 +08:00
Moonchild
60ad5b2ffd Issue #2736 - Part 12: Re-work style <link> href attribute. 
Use subject principal as triggering principal in style <link> "href"
attribute.
 2025-05-14 14:33:26 +08:00
Moonchild
dde21838de Issue #2736 - Part 11: Re-work <input> src attribute. 
Use subject principal as triggering principal in <input> "src" attribute.
 2025-05-14 14:33:09 +08:00
Moonchild
faf4f2c23f Issue #2736 - Part 10: Re-work <source> srcset attribute. 
Use subject principal as triggering principal in <source> "srcset"
attribute for <picture>.
 2025-05-14 14:32:54 +08:00
Moonchild
b1b5062dc4 Issue #2736 - Part 9: Re-work <source> src attribute. 
Use subject principal as triggering principal in <source> "src" attribute
for <audio>/<video> elements.
 2025-05-14 14:32:39 +08:00
Moonchild
b6bdce6f98 Issue #2736 - Part 8: Re-work <video> and <audio> src attribute. 
Use subject principal as triggering principal in <video>/<audio> "src"
attribute. We deviate from Mozilla here because we do not worry
about content isolation principals in Page Info.
 2025-05-14 14:32:24 +08:00
Moonchild
2416e71cd3 Issue #2736 - Part 7: Re-work <frame> and <iframe> src attribute. 
Use subject principal as triggering principal in <iframe>/<frame> "src" attribute.
 2025-05-14 14:26:23 +08:00
Moonchild
1f638b22ec Issue #2736 - Part 6: Re-work <script> src attribute. 
Use subject principal as triggering principal in <script> "src" attribute.
 2025-05-14 14:26:06 +08:00
Moonchild
2bdb9f3d85 Issue #2736 - Part 5: Re-work img <srcset> attribute. 
Use subject principal as triggering principal in <img> "srcset" attribute.
 2025-05-14 14:23:33 +08:00
Moonchild
c8db9efb3c Issue #2736 - Part 4: Re-work img <src> attribute. 
Use subject principal as triggering principal in <img> "src" attribute.
Also get rid of the `BeforeMaybeChangeAttr`/`AfterMaybeChangeAttr` dance:
It makes more logical sense for these effects to happen _after_ the
attribute has actually been changed.
 2025-05-14 14:23:17 +08:00
Moonchild
824d0cad58 Issue #2736 - Part 2: Pass subject principal to SetAttribute and friends. 
In order to tailor certain security checks to the caller that is
attempting to load a particular piece of content, we need to be able to
attach an appropriate triggering principal to the corresponding requests.

Since most HTML content is loaded based on attribute values, this means
capturing the subject principal of the caller who sets those attributes,
which in turn means we need to make it available to `AfterSetAttr` hooks
on all relevant element types.
 2025-05-14 14:22:13 +08:00
Moonchild
9ad680cfc4 Issue #2736 - Part 1: Provide more consistent principals to CSP. 
We're currently fairly vague and inconsistent about the values we provide to
content policy implementations for requestOrigin and requestPrincipal. In some
cases they're the triggering principal, sometimes the loading principal,
sometimes the channel principal.

Our existing content policy implementations which require or expect a
loading principal currently retrieve it from the context node.
Since no current callers require the principal to be the loading
principal, and some already expect it to be the triggering principal
(which there's currently no other way to retrieve), a choice was made
to pass the triggering principal whenever possible, but use the loading
principal to determine the origin URL.
 2025-05-14 14:21:46 +08:00
roytam1
6792dc4b66 Merge remote-tracking branch 'origin/tracking' into custom 2025-04-30 23:06:47 +08:00
Moonchild
fd4a224d1d Issue #2737 - Part 1: Base implementation of SVGGeometryElement. 
Mostly mechanical changes to generalize path geometry for all SVG draw
elements. No user-exposed changes.
 2025-04-30 23:02:16 +08:00
Moonchild
0331e633bd Issue #2728 - Remove obsolete CSP referrer policy. 
This has been superseded by the dedicated Referrer-policy header.
Resolves #2728
 2025-04-30 22:58:43 +08:00
roytam1
42e13fd8bf Merge remote-tracking branch 'origin/tracking' into custom 2025-04-18 10:32:18 +08:00
Moonchild
8bacedc9a9 Issue #2729 - Add missing jsonifier interfaces to DOM{Matrix|Rect|Point} 
Resolves #2729
Resolves #2705
 2025-04-18 10:31:48 +08:00
roytam1
b86d97747f Merge remote-tracking branch 'origin/tracking' into custom 2025-04-03 09:50:55 +08:00
Moonchild
0113b2715d [DOM] Check state before compiling/transforming. 2025-04-03 09:47:35 +08:00
roytam1
072f98c9ae Merge remote-tracking branch 'origin/tracking' into custom 2025-03-23 12:52:24 +08:00
Moonchild
f1c456c625 Issue #2713 - Check for NaN before std::min/max() in DOMQuad and DOMRect. 
If there is a NaN involved we should not return 0 here.
 2025-03-23 12:52:03 +08:00
roytam1
e2f07956fb Merge remote-tracking branch 'origin/tracking' into custom 2025-03-23 12:27:56 +08:00
Moonchild
6411abd43c Issue #2711 - Apply pattern transforms when using text-rendering on canvas. 
Resolves #2711
 2025-03-23 12:26:21 +08:00
Moonchild
6449b7514b No issue - Fix some deprot 2025-03-23 12:25:55 +08:00
roytam1
2a53c574f6 Merge remote-tracking branch 'origin/tracking' into custom 2025-03-13 23:05:24 +08:00
Moonchild
2e4620b5af Issue #2692 - Part 6: Don't #include js/SourceBufferHolder.h in jsapi.h. 
Instead, require users to do so. This is a minor translation-unit size
improvement for anyone who never has to use SourceBufferHolder other than
by reference.
 2025-03-13 23:01:46 +08:00
roytam1
a66a8fe8be Merge remote-tracking branch 'origin/tracking' into custom 2025-03-12 10:32:44 +08:00
Shadow
c318657acd Explicitly use javascript: instead of URI_INHERITS_SECURITY_CONTEXT within subjectToCSP() (#2696) 
Bug 1330035

Reviewed-on: https://repo.palemoon.org/MoonchildProductions/UXP/pulls/2696
Co-authored-by: Shadow <shadow@no-reply.palemoon.org>
Co-committed-by: Shadow <shadow@no-reply.palemoon.org>
 2025-03-12 10:31:54 +08:00
Shadow
a2c6127832 No Issue - Make nsCSPService cancel the channel if a redirect is blocked by CSP 
Bug 1338304
 2025-03-12 10:31:37 +08:00
roytam1
8a35744175 Merge remote-tracking branch 'origin/tracking' into custom 2025-03-07 21:50:11 +08:00
Moonchild
afefd0731b No Issue - NULL crash fix in nsExternalResourceMap::PendingLoad::OnDataAvailable 
Curiously, we should have had this at our fork point (as it was backported
by Mozilla to 52.5.2) by apparently Tobin's import wasn't actually 52.6.0.
:-/
 2025-03-07 21:44:02 +08:00
roytam1
0d63037e56 dom/security: remove terse static assert from upstream changes 2025-02-18 19:17:37 +08:00
roytam1
d4f1c1faed Merge remote-tracking branch 'origin/tracking' into custom 2025-02-18 19:13:36 +08:00
Moonchild
c41c1c63d5 [DOM] Honor security.csp.reporting.enabled pref in more places. 2025-02-18 19:11:24 +08:00
roytam1
f59ffe2826 dom/security: respect security.csp.reporting.enabled in other places 2025-02-13 21:00:20 +08:00
roytam1
f7298813f9 Merge remote-tracking branch 'origin/tracking' into custom 2025-02-06 09:30:57 +08:00
Moonchild
5141227896 Issue #2690 - Remove additional incorrect syntax error result values. 2025-02-06 09:28:11 +08:00
Moonchild
e1e7a0c5bc Issue #2690 - Allow 0-length keys/empty passwords for PBKDF2. 2025-02-06 09:27:57 +08:00
Moonchild
3d7a95ab44 Issue #2690 - Convert error from non-existing convenience function. 
Didn't check that the convenience function existed for this. Throw the
error manually, instead.
TO-DO: Add these convenience functions for one-shot errors.
 2025-02-06 09:27:43 +08:00
Moonchild
263bf279a7 Issue #2690 - Throw a NotSupportedError in case of unknown algorithm name. 
Syntax error is incorrect for this case.
 2025-02-06 09:27:25 +08:00
Moonchild
7039b5a95d Issue #2690 - Replace SyntaxError with TypeError for derive_bits_keys. 2025-02-06 09:27:11 +08:00
Moonchild
4da1b56b6a Issue #2690 - Add AES-KW purposed keys to list of allowable keys to unwrap. 2025-02-06 09:26:58 +08:00
Moonchild
9d8a3f0848 [DOM] Reset mCompileResult in txMozillaXSLTProcessor::ImportStylesheet. 2025-02-06 09:21:54 +08:00
Moonchild
511449e134 Issue #2557 - Remove URL Constructor(DOMString url, URL base). 
URL Constructor(DOMString url, URL base) doesn't exist anymore in the spec.

Resolves #2557
 2025-02-06 09:20:35 +08:00
roytam1
bf90272692 Merge remote-tracking branch 'origin/tracking' into custom 2025-01-29 12:26:22 +08:00
Martok
0590764f1f Issue #2686 - Don't rely on return value of ExecutionContext::Compile when the context may forbid running scripts 
This is relevant if scripting is terminated due to execution timeout but there are setTimeout/Interval callbacks pending
or if scripting is disabled altogether.
 2025-01-29 12:23:50 +08:00
roytam1
789327be17 Merge remote-tracking branch 'origin/tracking' into custom 2025-01-23 09:39:37 +08:00
FranklinDM
41eb02d1e1 No issue - Turn worker runnable assertion into something harmless in debug builds 
It's annoying.
 2025-01-23 09:37:42 +08:00
roytam1
f67e22d3f0 Issue #2678 - addendum to rev 139e7a7a 2025-01-20 21:31:50 +08:00