Moonchild
ace69a4d32
Issue #2736 - Part 1: Provide more consistent principals to CSP.
...
We're currently fairly vague and inconsistent about the values we provide to
content policy implementations for requestOrigin and requestPrincipal. In some
cases they're the triggering principal, sometimes the loading principal,
sometimes the channel principal.
Our existing content policy implementations which require or expect a
loading principal currently retrieve it from the context node.
Since no current callers require the principal to be the loading
principal, and some already expect it to be the triggering principal
(which there's currently no other way to retrieve), a choice was made
to pass the triggering principal whenever possible, but use the loading
principal to determine the origin URL.
2025-04-26 20:07:16 +02:00
Moonchild
c0db767c25
Issue #1710 - Check for triggering principal URI in FTP subresource check.
...
Resolves #1710
2021-01-09 19:19:39 +00:00
Moonchild
eb8a6523b8
Issue #80 - De-unify dom/security
...
Exception: CSPUtils relies on something in CSPContext, but on
Windows it throws in an MSVC include which provides no hints.
2020-04-23 14:13:58 +00:00
win7-7
deae241f5e
Convert dom/base/nsImageLoadingContent.cpp to use AsyncOpen2 and followups along with it (1445670 and 1373780 part 2 and 3)
...
Convert dom/base/nsImageLoadingContent.cpp to use AsyncOpen2 and followups along with it (1445670 and 1373780 part 2 and 3)
2019-08-08 16:44:51 +03:00
wolfbeast
4491ec5eac
Selectively allow ftp subresources in the blocked mode.
...
- Allow "Save As..." downloads
- Allow subresource use if the top-level document is also on FTP
2019-07-15 13:20:53 +02:00
wolfbeast
d9aff90f06
Add preference to allow the loading of FTP subresources for corner cases
2019-07-14 22:41:01 +02:00
wolfbeast
6b4d81521f
Prevent loading of document subresources over FTP.
2019-03-09 08:15:36 +01:00
janekptacijarabaci
7eee8a9c39
nsIContentPolicy::TYPE_DOCUMENT - Use "aLoadInfo->ContextForTopLevelLoad()" instead of "aLoadInfo->LoadingNode()"
...
Issue #600
2018-07-05 19:40:43 +02:00
janekptacijarabaci
07ee0792c9
Bug 1398229 - Save-link-as feature should use the loading principal - implementation of nsIContentPolicy.TYPE_SAVE_AS_DOWNLOAD
2018-06-17 09:35:48 +02:00
Gaming4JC
bd85173562
Remove support and tests for HSTS priming from the tree. Fixes #384
2018-05-26 15:42:45 -04:00
janekptacijarabaci
7c759805d0
Bug 1359204 - Do not query nested URI within CheckChannel in ContentSecurityManager
2018-04-30 23:53:22 +02:00
janekptacijarabaci
f799598d65
Bug 1182569: Update ContentSecurityManager to handle docshell loads
2018-04-30 21:04:56 +02:00
janekptacijarabaci
ccbd5ecf57
moebius#187: DOM - nsIContentPolicy - context (document)
...
https://github.com/MoonchildProductions/moebius/pull/187
2018-04-23 00:13:56 +02:00
janekptacijarabaci
115cf1e322
Revert "Bug 1182569: Update ContentSecurityManager to handle docshell loads"
...
This reverts commit 2e33335820
2018-04-22 22:17:09 +02:00
janekptacijarabaci
2e33335820
Bug 1182569: Update ContentSecurityManager to handle docshell loads
...
native in moebius
2018-04-22 21:51:49 +02:00
janekptacijarabaci
660d01438a
moebius#230: Consider blocking top level window data: URIs (part 3/3 without tests)
...
https://github.com/MoonchildProductions/moebius/pull/230
2018-04-22 20:28:18 +02:00
janekptacijarabaci
f1e5578718
moebius#226: Consider blocking top level window data: URIs (part 2/2 without tests)
...
https://github.com/MoonchildProductions/moebius/pull/226
2018-04-22 19:03:22 +02:00
janekptacijarabaci
1b4c4256ee
moebius#223: Consider blocking top level window data: URIs (part 1/3 without tests)
...
https://github.com/MoonchildProductions/moebius/pull/223
2018-04-22 18:51:38 +02:00
Matt A. Tobin
5f8de423f1
Add m-esr52 at 52.6.0
2018-02-02 04:16:08 -05:00
Moonchild
win7-7
wolfbeast
janekptacijarabaci
Gaming4JC
Matt A. Tobin