Commit graph

99 commits

Author SHA1 Message Date
wolfbeast
d358080b7f Clarify comment with security.fileuri.unique_origin 2019-07-22 19:45:05 +08:00
wolfbeast
64191e15cb Treat all file: URIs as having a unique origin.
This prevents cross-file access from files loaded into the browser from
the local file system, further restricting the origin policy of file:
URIs.

Added a pref to control this behavior for local file access if required
for certain applications, since this change might break using the
browser to run applications on the local file system that require
access to local files.
2019-07-22 19:45:02 +08:00
wolfbeast
8ad0b46284 Block http auth prompt for cross-origin image subresources by default.
Still allow this to be bypassed with a pref for those really rare corner
cases where images are loaded cross-origin by design and the session
hasn't been/can't be authenticated ahead of time.
2019-07-19 10:03:21 +08:00
wolfbeast
797f3eae35 Add preference to allow the loading of FTP subresources for corner cases 2019-07-19 10:03:17 +08:00
wolfbeast
f5923f0626 Add Atomics.notify instead of Atomics.wake according to revised spec.
- Keep .wake as an alias until we're certain it can be removed.
- Enable SAB memory
2019-06-15 06:27:46 +08:00
wolfbeast
8ad58ee574 Disallow res external protocol handler. 2019-05-31 07:21:35 +08:00
Gaming4JC
4ab1401ee6 Issue #1102 - Disable <meta http-equiv=set-cookie>
Create a new pref 'dom.meta-set-cookie.enabled' which is set to 'false', disabling http-equiv meta cookies.
2019-05-31 07:17:21 +08:00
wolfbeast
3c6346afa9 Unhook Unboxed Objects option 2019-05-24 21:55:41 +08:00
Ascrod
c6b9a5aa9f Remove geo-specific search engine default preferences. Tag #245. 2019-04-27 08:25:27 +08:00
wolfbeast
c64dc935f9 Remove Firefox Accounts service and tie-ins.
See previous commit for removal of browser identity module.
2019-04-19 09:40:31 +08:00
wolfbeast
eb32b5d7e4 Pref the use of unboxed plain objects in JS and disable by default.
This should be all that's needed for #1017, but verification of
impact is definitely desired.
2019-03-23 06:44:08 +08:00
wolfbeast
c8412ad501 Part 1: network component changes. 2019-03-16 07:02:11 +08:00
wolfbeast
c283102a46 Move default-enable pref to application. 2019-03-02 12:19:25 +08:00
wolfbeast
c50284d997 Revert "Port several Skia upstream fixes."
This reverts commit 260b06c1c96285459947231a93f08e413be89dd0.

This fixes #976
2019-02-17 22:17:28 +08:00
wolfbeast
80610e5548 Port several Skia upstream fixes. 2019-02-16 00:28:31 +08:00
wolfbeast
191530d0cf Set incremental GC slice to 20 ms duration 2019-02-16 00:27:41 +08:00
wolfbeast
3cc2485e42 Properly camelCase dom.intersectionObserver.enabled pref. 2019-02-16 00:24:32 +08:00
wolfbeast
125d551bd6 Revert "Disable IntersectionObserver API because of crashes."
This reverts commit ac1beef5c10a114afe18897d5d3ced24ac378b92.
2019-02-16 00:24:31 +08:00
wolfbeast
bc84969432 Disable IntersectionObserver API because of crashes.
See #934 and #935.
2019-02-16 00:24:27 +08:00
Ascrod
57ca286478 Add preference for fully disabling HSTS. 2019-02-16 00:24:23 +08:00
wolfbeast
69919870c1 Add performance warnings to Deprecated module.
Adds a dedicated handler for performance warnings to be logged to
consoles if known performance-impacting methods are called.
Search service init is changed from a deprecation warning to a
performance warning for synchronous init.
This also re-enables the warning for the Basilisk & Co. search service
initialization which was previously removed in [a930a79]

See also the discussion on #916.
2019-02-16 00:23:07 +08:00
wolfbeast
4294fe3e81 Re-enable intersection observers with WD spec patches.
This resolves #249
2019-02-16 00:23:02 +08:00
trav90
93510088fb Remove DirectShowReader Part 1: Conditional code 2019-02-16 00:20:54 +08:00
wolfbeast
11d4109cb8 Update GMP AUS URL 2019-02-16 00:20:36 +08:00
wolfbeast
9b1124ccbd Remove VR hardware support.
This resolves #881
2019-02-16 00:20:27 +08:00
wolfbeast
54b231bfb6 Update reported Firefox version in compatmode.
This resolves #864
2019-02-16 00:19:06 +08:00
wolfbeast
0c4fe21435 #863 part 2: Make opportunistic encryption opt-in for UXP
This exposes the new pref and also sets the Alt-Svc pref for OE to false.
Basilisk gets a default opt-in for both to stay close to Firefox.
2019-02-16 00:19:01 +08:00
wolfbeast
e53942ffe8 Backout opportunistic encryption changes.
Apparently there is some functional and naming confusion here.
Backing out to re-land after evaluation and possible changes.
Tag #863.
2019-02-16 00:18:57 +08:00
wolfbeast
8fb5b349d5 Swap default platform state for opportunistic encryption.
Tag #863
2019-02-16 00:18:54 +08:00
wolfbeast
d24ac0c406 Change captive portal detection URL to our own. 2019-02-16 00:18:53 +08:00
wolfbeast
363a47c4c1 Make opportunistic encryption configurable.
This adds a pref "network.http.opportunistic-encryption" that controls whether
we send an "Upgrade-Insecure-Requests : 1" header on document navigation or not.
This patch modifies the platform network parts. Default for the platform is "true".
Part 1 for #863
2019-02-16 00:18:51 +08:00
wolfbeast
5baa10b59a Set CSS error console reporting default to false for performance.
Dev note needed upon release. This resolves #444.
2019-02-16 00:18:10 +08:00
trav90
6676331d30 Put AV1 codec behind a pref
Disabled by default.
2019-02-16 00:17:48 +08:00
wolfbeast
b79fedc200 Expose browser.download.lastDir.savePerSite
Resolves #823 (alternative suggestion)
2019-02-16 00:15:30 +08:00
wolfbeast
bbb1a766e2 Make caret width normal/thick behind CJK char configurable.
Fixes #820 (regression).
2019-02-16 00:15:15 +08:00
wolfbeast
3230eb96fc Set the default action to not lock content scrolling when a menu is open.
This resolves issues with the bookmarks and other menus with submenus if scrollable in case of many items displayed.
2019-02-16 00:15:12 +08:00
wolfbeast
4b0b628cdd Remove IndexedDB for content pref.
Tag Issue #765
2019-02-16 00:14:34 +08:00
Leorize
f67b2f0342 gfx: add pref for enabling APZ without e10s 2019-02-16 00:14:21 +08:00
wolfbeast
b85696b196 Regression fix: enable ICC v4 profiles by default. 2019-02-16 00:14:18 +08:00
wolfbeast
58f6d1953c Add findbar.termPerTab
Allow the pref to switch between global search term and per-tab search term
2019-02-16 00:13:37 +08:00
wolfbeast
adca8376ea Introduce ui.menu.allow_content_scroll
When true, overrides the OS convention to prevent scrolling of content when contextual menus are open.
This resolves #730.
2019-02-16 00:12:02 +08:00
wolfbeast
8e6c0a852f Stop pointless recording of telemetry data
Also clear the telemetry URLs and metas "just in case" so nothing can go anywhere even in the case of PEBCAK.
2019-02-16 00:11:59 +08:00
JustOff
c402ee2148 Use "browser.newtabpage.add_to_session_history" to decide whether to store "about:newtab" in the session history 2019-02-16 00:11:54 +08:00
wolfbeast
9531d12c10 Re-implement custom background color of standalone images.
This resolves #717.

Note: this does not affect other applications because the platform
default is to use the "darknoise" background image for standalone
image, which effectively overrides a bg color.
2019-02-16 00:11:44 +08:00
trav90
67fa7e4146 Disable battery API by default to reduce private data exposure to the web 2019-02-16 00:10:14 +08:00
wolfbeast
963d2844aa Tune the network stack
This resolves #684
2019-02-16 00:10:12 +08:00
wolfbeast
1a4beb5f91 Enable d3d9 accelerated layers as a fallback.
If d3d 11 can't be used for whatever reason (limited integrated/mobile chipset, etc.)
we should fall back to d3d9. Mozilla blocked this based on experiences with Intel
GPUs/drawing artefacts, but those drivers are blacklisted already. No reason to
disable this path for everyone.
2019-02-16 00:10:09 +08:00
wolfbeast
6bcca5706c Allow AsyncDrawing for plugins in all versions. 2019-02-16 00:09:30 +08:00
wolfbeast
f03a90ab86 Update redundant comment 2019-02-16 00:08:45 +08:00
wolfbeast
ca5c2ba100 Add pref to control CanOptimizeToImageLayer for large downscale factors.
This resolves #626
2019-02-16 00:08:44 +08:00