Commit graph

1,770 commits

Author SHA1 Message Date
Brian Smith
37d4df19a8 Issue #2402 - Factor out code to set WorkerPrivate CSP from headers. https://bugzilla.mozilla.org/show_bug.cgi?id=1337543 2024-01-11 09:44:25 +08:00
Brian Smith
971fc4b838 Issue #2402 - Improve ServiceWorker asserts and verify load principal does not inherit CSP. https://bugzilla.mozilla.org/show_bug.cgi?id=1337543 2024-01-11 09:44:11 +08:00
Brian Smith
1703d936af Issue #2402 - ServiceWorker should not inherit CSP from registration principal. https://bugzilla.mozilla.org/show_bug.cgi?id=1337543 2024-01-11 09:43:57 +08:00
Brian Smith
bfa8ea9368 Issue #2402 - Sanitize the nsIPrincipal used to register a service worker to ensure CSP is not persisted. https://bugzilla.mozilla.org/show_bug.cgi?id=1337543 2024-01-11 09:43:42 +08:00
Brian Smith
1e0851158e Issue #2402 - Fix SecurityPolicyViolationEvent.violatedDirective. https://bugzilla.mozilla.org/show_bug.cgi?id=1418243 2024-01-11 09:43:27 +08:00
Brian Smith
ec29404083 Issue #2402 - Implement security policy violation event. https://bugzilla.mozilla.org/show_bug.cgi?id=1037335 2024-01-11 09:43:10 +08:00
Brian Smith
1349cf2d01 Issue #2402 - Remove child-src deprecation warning. https://bugzilla.mozilla.org/show_bug.cgi?id=1486331 2024-01-11 09:42:51 +08:00
Brian Smith
bfabbcd311 Issue #2402 - Ignore empty CSP directives. https://bugzilla.mozilla.org/show_bug.cgi?id=1439425 2024-01-11 09:42:36 +08:00
roytam1
d4a80aa2c4 Merge remote-tracking branch 'origin/tracking' into custom 2024-01-09 12:01:14 +08:00
Martok
90eb83819c Issue #2435 - Re-Implement rejected Promises events according to spec
Own implementation; upstream gets several things wrong.
2024-01-09 12:00:53 +08:00
Martok
65d72c5682 Issue #2435 - Add onrejectionhandled and onunhandledrejection EventHandler
Based-on: m-c 1362272
2024-01-09 12:00:14 +08:00
Martok
511a9376e3 Issue #2435 - Declare PromiseRejectionEvent WebIDL
Based-on: m-c 1338059
2024-01-09 11:59:55 +08:00
Martok
f059bb0a59 Issue #2240 - Align Microtasks and promises scheduling with spec
Microtasks, resolved Promises and Observers are handled after the sync
task that caused them, in the order they were generated.
Also simplifies reentrancy handling.

Based-on: m-c 1193394
2024-01-09 11:59:32 +08:00
Martok
73b14eae31 Issue #2435 - Make CycleCollectedJSContext.h dependency explicit 2024-01-09 11:59:09 +08:00
roytam1
fa72b197d9 Merge remote-tracking branch 'origin/tracking' into custom 2024-01-05 10:11:42 +08:00
Gaming4JC
644b8680b2 Debug: Remove assertion for nsDOMNavigationTiming.
As mentioned in issue #2410, this aggressive assertion can cause an uneeded crash during debug build runs.
2024-01-05 10:10:01 +08:00
Moonchild
b47cb0f6a4 Issue #2407 - Rename full-screen-api.ignore-widgets
Renames to full-screen-api.restrict-to-window and clarifies comments for
its intended use.
Resolves #2407.
2024-01-05 10:07:43 +08:00
roytam1
a907bc3c17 Merge remote-tracking branch 'origin/tracking' into custom 2023-12-21 10:19:16 +08:00
Moonchild
bcbe73119f [dom] Better handling of aborted websocket workers.
Catch the case where we are in worker-shutdown but are still connecting
and make filing and closing connections a bit more robust with a RefPtr.
2023-12-21 10:18:28 +08:00
Moonchild
f1f9dde29e Issue #2405 - Add a pref to disable CSP reporting.
Resolves #2405
2023-12-21 10:15:17 +08:00
roytam1
5a362aa15b Merge remote-tracking branch 'origin/tracking' into custom 2023-12-15 10:29:04 +08:00
Moonchild
eba87b03fd [DOM] Fix double-free crash in MessagePort.cpp 2023-12-15 09:07:10 +08:00
roytam1
774822105f Merge remote-tracking branch 'origin/tracking' into custom 2023-12-06 15:14:19 +08:00
Moonchild
dc253ce953 Issue #2362 - Fix click handling according to the spec.
This removes some hackery surrounding preventing content clicks, and in
general handles auxclick as it should, firing that event on secondary
buttons (wheel/right on default setup for right-handed mouse).
2023-12-06 14:50:08 +08:00
roytam1
c889903081 Merge remote-tracking branch 'origin/tracking' into custom 2023-11-30 10:05:11 +08:00
Moonchild
73bf6f95f8 Revert "No issue - Stop supporting data: scheme in SVG <use> elements."
This reverts commit 7e60482d8090a43e00957f3d6fc87f31d7ea65a1.

Of course it's not that simple. In Mozilla land they are also running
into issues but of a different variety and it was backed out there also.
2023-11-30 10:04:21 +08:00
trav90
6807675123 Issue #2393 - Part 4 - Reduce VideoQueue size for GPU based images 2023-11-30 09:53:36 +08:00
trav90
b09b3771c6 Issue #2393 - Part 3 - Remove extra copy of YUV buffer on Windows 2023-11-30 09:53:08 +08:00
Brian Smith
3e9fd21a38 Issue #2387 - Remove a missed AddRef() which could cause leaks. Update comments explaining how the reference counting works. 2023-11-30 09:52:07 +08:00
Brian Smith
eef37b2cd5 Issue #2387 - Collection of fixes related to a crash while canceling a dynamic import. Add AddRef/Release hooks for embedding's script or module private value and set this script source object where appropriate. https://bugzilla.mozilla.org/show_bug.cgi?id=1519140 Partial, no Value passing changes. Clear the list of dynamic import requests after cancelling them in ScriptLoader::ParsingComplete as we do for other requests. https://bugzilla.mozilla.org/show_bug.cgi?id=1291535 ScriptLoader::OnStreamComplete never returns a failure. https://bugzilla.mozilla.org/show_bug.cgi?id=1627275 Also cancel the correct kind of parser for Modules. 2023-11-30 09:51:50 +08:00
roytam1
b47d46219f Merge remote-tracking branch 'origin/tracking' into custom 2023-11-24 17:07:26 +08:00
Moonchild
114daae894 [DOM] Improve MessagePort state machine. 2023-11-24 17:05:57 +08:00
Moonchild
71ce058b03 [DOM] Check if rootDoc is secure context for web compat 2023-11-24 17:04:52 +08:00
Moonchild
acd204e85e [WebGL] Turn on more validation/error checking in webgl (when not on Win) 2023-11-24 17:04:07 +08:00
Moonchild
e0a7c35dcc Issue #2361 - Remove clipboard-read code
Web content should never read the clipboard; extensions have other APIs
they can use through XPCOM so do not need to go through
Navigator.Clipboard, removing the only reason why it would even be here.
2023-11-24 17:02:32 +08:00
Moonchild
3478c01fc8 Issue #2361 - Base implementation of Navigator.Clipboard
This hard-refuses any reads from clipboard with a promise rejection.
2023-11-24 17:01:55 +08:00
roytam1
a1608dd4c7 Merge remote-tracking branch 'origin/tracking' into custom 2023-11-18 07:08:31 +08:00
Moonchild
b004af07d0 Revert "No Issue - add mutex in EventSource"
This reverts commit e4643f5bed2cdc600fc29900fe3b4d22e25763bc.

Apparently causes deadlocks in Linux.
2023-11-16 10:21:01 +08:00
roytam1
5f85f202a4 Merge remote-tracking branch 'origin/tracking' into custom 2023-11-14 15:35:06 +08:00
Moonchild
b19fe58909 No issue - Stop supporting data: scheme in SVG <use> elements. 2023-11-14 15:34:40 +08:00
roytam1
dd337fad41 Merge remote-tracking branch 'origin/tracking' into custom 2023-11-10 15:33:35 +08:00
Moonchild
6c37943e1c No Issue - add mutex in EventSource
Potentially avoids a gc crash when load is high.
2023-11-10 15:33:13 +08:00
Basilisk-Dev
ae5bfc9ff2 No Issue - StructuredClone serialize and deserialize should treat back reference consistently
Backport of https://bugzilla.mozilla.org/show_bug.cgi?id=1538622
2023-11-10 15:31:51 +08:00
roytam1
f08dd1422d Merge remote-tracking branch 'origin/tracking' into custom 2023-11-04 11:42:50 +08:00
Moonchild
8d42309580 [DOM] For now, use C++11 static_asserts only.
Single-param static_assert is C++17 or later.
Follow-up to 3d92b8212595769c40da7ccfbafb3898cfaaf7bd
2023-11-04 11:39:19 +08:00
roytam1
db8e04921c dom/media: follow-up rev eb44f633, add reference symbol `&' to prevent unneeded AddRef()ing
mozilla wrote in same style in bd2c9f62b3/dom/locks/LockManagerParent.cpp (L49)
2023-10-26 22:41:34 +08:00
roytam1
941902c878 Crypto: follow-up rev 9e6a0c08, don't use c++17 feature here. 2023-10-26 11:49:47 +08:00
roytam1
bac9ec9a84 Merge remote-tracking branch 'origin/tracking' into custom 2023-10-26 10:55:31 +08:00
Basilisk-Dev
9e6a0c089f No Issue - Implement crypto.randomUUID
We already have code in the platform to generate random UUIDs. This simply exposes that functionality via the crypto.UUID function
2023-10-26 10:55:10 +08:00
Moonchild
aae5866390 [DOM] Drop mWrappedRunnable early in workers.
This should prevent some intermittent crashes.
2023-10-26 10:53:41 +08:00