wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-04 06:48:38 +09:00
Code Issues Projects Releases Packages Wiki Activity
6,125 commits 7 branches 15 tags 557 MiB
Commit graph

349 commits

Author SHA1 Message Date
roytam1
9f1550fb53 Merge remote-tracking branch 'origin/tracking' into custom 2023-07-06 10:39:29 +08:00
Moonchild
96d1e2766f [network] Prepare for requiring Authorization in CORS ACAH preflight 
The Authorization header with a JSON Web Token (JWT) can be sent via
XMLHttpRequest without explicit authorization via Access-Control headers.
According to the spec, this must always explicitly be mentioned in ACAH
request headers and isn't allowed to be wildcarded. However, nobody
currently obeys this rule and many websites are misconfigured because
Chromium and Firefox always allowed it.

This patch adds the more stricter code but keeps it behind an #ifdef 0
to be released later on if and when there is enough consensus on the web
to obey this spec. This patch explicitly avoids the added complexity
Mozilla added to educate web devs since our role in that respect is not
significant. it's not preffed and it won't throw an explicit deprecation
warning.

See Mozilla bugs 1687364 and 1841019.
 2023-07-06 10:25:09 +08:00
roytam1
4fae28f059 Merge remote-tracking branch 'origin/tracking' into custom 2023-06-26 10:38:35 +08:00
Job Bautista
51ea0e4f3a Issue #1769 - Part 2: Implement JPEG-XL decoder and about:config and MIME plumbing. 
Backported from Mozilla bug 1707590 whereever possible.
 2023-06-24 12:16:27 +08:00
roytam1
725b27a0f5 Merge remote-tracking branch 'origin/tracking' into custom 2023-05-05 23:02:05 +08:00
Moonchild
a39fd9e75f Issue #1656 - Remove more vim control lines. 
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
 2023-05-05 22:59:16 +08:00
roytam1
beb68187e5 Merge remote-tracking branch 'origin/tracking' into custom 2023-04-30 21:26:08 +08:00
Brian Smith
1109559a5d Issue #1691 - Part 8: Fix --enable-debug builds and continue dynamic module import changes. https://bugzilla.mozilla.org/show_bug.cgi?id=1342012 Support import from timeout handlers by associating the initiating script with the compiled JSScript. Fix error message that covers all import() failures that don't throw a JS exception. https://bugzilla.mozilla.org/show_bug.cgi?id=1331662 Partial - Replace nsJSUtils::EvaluateString calls by ExecutionContext scopes. Left EvaluateString() in nsXBLProtoImplField.cpp until ExecutionContext errors can be fixed. 
(cherry picked from commit 22fcfc77971a9bb204df664c474681f4dcf54211)
 2023-04-30 21:21:06 +08:00
roytam1
e361ce2b32 Merge remote-tracking branch 'origin/tracking' into custom 2023-04-13 09:24:30 +08:00
Moonchild
c9d9616334 [network] Improve checks while parsing MIME parameters. 2023-04-13 09:23:30 +08:00
roytam1
ead737cb49 Merge remote-tracking branch 'origin/tracking' into custom 2023-03-29 11:07:18 +08:00
Moonchild
dc4bf9b823 Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel 2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode. 
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.

Resolves #1831
 2023-03-29 11:04:44 +08:00
roytam1
cad030d6cc Merge remote-tracking branch 'origin/tracking' into custom 2023-01-19 09:43:10 +08:00
Moonchild
525b4e1888 [network] Avoid queue manipulation inside a loop 2023-01-19 09:40:35 +08:00
roytam1
a48debaabe Merge remote-tracking branch 'origin/tracking' into custom 2023-01-10 08:22:51 +08:00
Martok
a6a420259c Issue #2073 - m-c 1546500: Avoid dispatching synchronous thread shutdown runnables 2023-01-10 07:31:26 +08:00
roytam1
8f801c5c31 turn on TLS_RSA_WITH_AES_128_GCM_SHA256 to fix download from mega 2023-01-07 07:40:29 +08:00
roytam1
120ac6d556 Merge remote-tracking branch 'origin/tracking' into custom 2022-12-30 09:29:56 +08:00
Moonchild
c95a802078 Issue #2070 - When multiple HSTS headers are received, only consider the first. 
This implements a plain interpretations of RFC 6797, which says to only consider
the first HSTS header.
This slightly conflicts with RFC 7230, which says that sending multiple headers
which can't be merged is illegal (except for a specific whitelist which HSTS isn't in),
so this situation should never occur in the first place (and would therefore not need
the explicit entry in RFC 6797).

It improves HSTS robustness dealing with non-compliant servers.

Resolves #2070
 2022-12-30 09:21:48 +08:00
roytam1
4ea078d68f Merge remote-tracking branch 'origin/tracking' into custom 2022-12-16 11:25:59 +08:00
Moonchild
f54f007d47 [network] Align cookie checks with RFC 6265 (bis) 2022-12-16 11:25:15 +08:00
Moonchild
6a1e540412 [network] move some generic websocket code to the baseclass 2022-12-16 11:24:17 +08:00
roytam1
de0b4ac202 Merge remote-tracking branch 'origin/tracking' into custom 2022-11-25 11:46:08 +08:00
Moonchild
6408291d76 [network] Fix Mac buffer overflow. 2022-11-25 11:43:19 +08:00
Moonchild
7fab5ebd11 WebSocketChannel::CleanupConnection should run on the socket thread 2022-11-25 11:42:30 +08:00
Moonchild
37f0199c79 [Network, DOM] Align our implementation with the current CORS/Fetch spec. 2022-11-25 11:41:52 +08:00
roytam1
f9dc0e6d15 Merge remote-tracking branch 'origin/tracking' into custom 2022-11-10 14:55:46 +08:00
Moonchild
0a079c2b90 Issue #2024 - Part 2: Add wildcard to Access-Control-Allow-{Method|Headers} 
For requests without credentials, add wildcard to Access-Control-Allow-Headers
and Access-Control-Allow-Method.

Resolves #2024
 2022-11-10 14:54:54 +08:00
roytam1
15458344bf Merge remote-tracking branch 'origin/tracking' into custom 2022-10-06 10:30:55 +08:00
Moonchild
1868e88741 Fix some debug assertions. 
refactored code porting in assertions causing debug build failures.
 2022-10-06 10:26:38 +08:00
roytam1
968135355d Merge remote-tracking branch 'origin/tracking' into custom 2022-09-22 10:19:31 +08:00
Moonchild
91b51a6509 [network] Reject cookies with no name and a __Secure- or __Host- prefix 2022-09-22 10:19:10 +08:00
roytam1
a9c379217d partly import changes from tenfourfox: 
- 102ESR: rev EV roots, TLDs, tzdata (c47bef11f)
 2022-09-19 15:13:43 +08:00
roytam1
866ded0b0a Merge remote-tracking branch 'origin/tracking' into custom 2022-09-07 11:03:19 +08:00
Moonchild
5dfded811d Issue #80 - reinstated unified building for some large chunks of our code. 
This should reduce compile complexity saving time and reducing linker stress.
 2022-09-07 10:36:23 +08:00
roytam1
e235eb81c6 Merge remote-tracking branch 'origin/tracking' into custom 2022-09-01 10:29:38 +08:00
Basilisk-Dev
b4c5ebf00a Issue #1991 - backport Mozilla bug 1266667 2022-09-01 10:18:39 +08:00
roytam1
1822f2031e Merge remote-tracking branch 'origin/tracking' into custom 2022-07-30 08:49:22 +08:00
Job Bautista
faa778ec9d Issue #1975 - Implement Origin header CSRF mitigation. 
Backported from Mozilla bug 446344.
 2022-07-30 08:43:44 +08:00
roytam1
206c9dcbbf Merge remote-tracking branch 'origin/tracking' into custom 2022-07-05 17:28:42 +08:00
Moonchild
991e2ffb4b [network] Clear PAC loader when the load failed 2022-07-05 17:24:31 +08:00
roytam1
d55284684f Merge remote-tracking branch 'origin/tracking' into custom 2022-06-27 21:51:39 +08:00
Moonchild
c43ed8d93e Issue #21 - Follow-up: Remove some left-over telemetry plumbing. 2022-06-27 21:48:09 +08:00
Job Bautista
54489c3029 Issue #326 - Part 4: Update Unicode data to release 10.0 
genUnicodePropertyData.pl's output:
 unknown ICU script MASARAM_GONDI at ../tools/genUnicodePropertyData.pl line 442, <FH> line 2641.
 unknown ICU script SOYOMBO at ../tools/genUnicodePropertyData.pl line 442, <FH> line 2663.
 unknown ICU script ZANABAZAR_SQUARE at ../tools/genUnicodePropertyData.pl line 442, <FH> line 2679.
 Data for CharProp2 = 14864
 Data for FullWidth = 2176
 Data for FullWidthInverse = 2688
 Total data = 19728
 2022-06-27 21:34:53 +08:00
roytam1
f0288d3d71 Merge remote-tracking branch 'origin/tracking' into custom 2022-06-23 08:55:51 +08:00
Job Bautista
275ea2bcf5 Issue #326 - Part 1a: Update character property table generator script for Unicode 9, and adjust APIs to fit the new identifier-type property model 
Backported from Mozilla bug 1281448.
 2022-06-23 08:54:37 +08:00
roytam1
e89a9eafb1 Merge remote-tracking branch 'origin/tracking' into custom 2022-06-22 09:04:44 +08:00
Brian Smith
95f1786bb4 Issue #1905 - Part 4c - Follow Firefox and Safari in reporting "Intel" for Mac ARM64 devices. Based on Mozilla bug 1655285. 2022-06-22 09:00:31 +08:00
roytam1
2cedfc1adf Merge remote-tracking branch 'origin/tracking' into custom 2022-05-31 10:17:22 +08:00