upstream/UXP-mirror
2
0 Fork 1
mirror of https://github.com/Basilisk-Development-Team/UXP-mirror.git synced 2026-11-06 01:52:32 -05:00
Code Releases Activity
8,524 Commits 59 Branches 285 Tags
currentScript-work
Commit Graph
35 Commits
Author SHA1 Message Date
Moonchild 206afa0642 Revert "Issue #2258 - Part 1: Support XCTO:nosniff when navigating." 
This reverts commit f48c770701.
 2025-09-23 18:17:52 +02:00
Moonchild 32be60a48f Revert "Issue #2258 - Part 2: Move XCTO:nosniff check into sniffers." 
This reverts commit 51e1650d42.
 2025-09-23 18:17:45 +02:00
Moonchild fd232c1468 Revert "Issue #2258 - Part 3: Allow sniffing with XCTO:nosniff + empty MIME type." 
This reverts commit a56f978f70.
 2025-09-23 18:17:39 +02:00
Moonchild a56f978f70 Issue #2258 - Part 3: Allow sniffing with XCTO:nosniff + empty MIME type. 
This moves the checking code back to NS_SniffContent and specifically
checks requests for either:
- Empty `Content-type` header, OR
- A known JSON MIME type

If present, sniffing is allowed despite `nosniff` because in the first
case this is webmaster error (conflicting `nosniff` without MIME type
would always fail, so sniff it), and in the second case we need this
carveout or our json viewer will break.
 2025-08-12 19:04:34 +02:00
Moonchild 51e1650d42 Issue #2258 - Part 2: Move XCTO:nosniff check into sniffers. 
This fixes a regression for the JSON viewer from part 1 as it relies on
sniffing to prettify (and should carve out the exception even if `nosniff`
headers are sent).
No real functional changes otherwise. Just catering to a corner case.
 2025-08-12 17:01:36 +02:00
Moonchild f48c770701 Issue #2258 - Part 1: Support XCTO:nosniff when navigating. 2025-08-12 16:18:38 +02:00
Moonchild add1037bb8 Issue #2542 - Part 7: Move SecFetch.* to /netwerk where it belongs. 2024-07-05 14:05:45 +02:00
Moonchild c62cc61613 Issue #2542 - Part 2: Base implementation of Sec-Fetch-* header code. 
Currently following Mozilla putting stuff in /dom for additional porting,
but it's actually the wrong location since it belongs in /netwerk with
the other code that deals with http headers.
 2024-07-03 11:00:53 +02:00
Brian Smith a86b4c35f1 Issue #2402 - Optionally strictly enforce the MIME type of scripts loaded by importScripts(). 
https://bugzilla.mozilla.org/show_bug.cgi?id=1514680
This is default on in Firefox 67 but Moonchild requested it be set off by default.
 2024-01-07 08:29:30 -06:00
Moonchild 9fafaedafb Issue #2146 - Remove nsChannelClassifier/nsIURIClassifier 
Resolves #2146
 2023-03-08 01:19:47 +01:00
Job Bautista b20b9797dc Issue #1975 - Implement Origin header CSRF mitigation. 
Backported from Mozilla bug 446344.
 2022-07-25 18:56:46 +08:00
Moonchild 534de5cc5b Issue #21 - Remove remaining telemetry structs, callers and flags. 2022-04-02 14:49:45 +02:00
Moonchild ee86d3eb9c Issue #21 - Remove Telemetry plumbing and fix build. 
Note this won't give working applications. Requires FE changes and
additional js module changes (next part).
 2022-04-02 14:39:54 +02:00
Moonchild a95439db61 Issue #1822 - Part 3: Remove LOAD_CLASSIFIER_URI and various 
helper functions.
 2022-04-01 16:03:01 +02:00
Moonchild c030a50228 Issue #1721 - Implement GlobalPrivacyControl 
(and get rid of failed DoNotTrack)
 2022-04-01 14:41:51 +02:00
Moonchild 539fb0aea2 Issue #80 - De-unify netwerk/protocol/http 2020-05-18 09:23:17 +00:00
wolfbeast a205ee7040 Issue #1280 - Un-bust certerror pages and ForgetAboutSite 2020-03-31 09:44:30 +02:00
wolfbeast 17a4b4f6db Implement a threadsafe & revised version of http2PushedStream. 
This re-applies the patch for this with added typename declaration.
 2019-07-22 04:53:44 +02:00
wolfbeast 91de3341df Revert "Implement a threadsafe & revised version of http2PushedStream." 
Backed out because of gcc build failures.

This reverts commit 66fae1d810.
 2019-07-21 21:31:04 +02:00
wolfbeast 66fae1d810 Implement a threadsafe & revised version of http2PushedStream. 2019-07-18 17:52:46 +02:00
wolfbeast d38ddd92e1 Part 1: network component changes. 2019-03-07 12:45:54 +01:00
adeshkp 5335681cd2 Telemetry: Remove stubs and related code 2019-01-12 06:20:31 -05:00
wolfbeast 512f78874a #863 Part 1: Make sending of http upgrade-insecure-requests optional 
Defaults to false if not configured.
 2018-11-05 15:48:49 +01:00
wolfbeast 79487a1a05 Backout opportunistic encryption changes. 
Apparently there is some functional and naming confusion here.
Backing out to re-land after evaluation and possible changes.
Tag #863.
 2018-11-04 23:39:37 +01:00
wolfbeast 4a188c7b99 Make opportunistic encryption configurable. 
This adds a pref "network.http.opportunistic-encryption" that controls whether
we send an "Upgrade-Insecure-Requests : 1" header on document navigation or not.
This patch modifies the platform network parts. Default for the platform is "true".
Part 1 for #863
 2018-11-04 16:05:27 +01:00
wolfbeast ab961aeb54 Remove all C++ Telemetry Accumulation calls. 
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
 2018-09-03 10:11:38 +02:00
SpockMan02 e5064882f1 Issue #686: Un-deprecate the Application Cache API 2018-08-05 04:08:37 -07:00
wolfbeast 535e9399e6 Remove SSL Error Reporting telemetry 2018-06-29 17:40:01 +02:00
Gaming4JC bd85173562 Remove support and tests for HSTS priming from the tree. Fixes #384 2018-05-26 15:42:45 -04:00
JustOff 1c9d6206cb Revert incorrect UAO optimization that broke SSUAO 2018-05-15 00:32:07 +03:00
janekptacijarabaci e040ed9250 moebius#158: The Performance Resource Timing (added support for "workerStart") 
https://github.com/MoonchildProductions/moebius/pull/158
 2018-04-29 11:49:50 +02:00
janekptacijarabaci 3968897fb4 Bug 1431095 - Change Content-Type-Options: nosniff allowed script MIME types to match the spec 2018-04-03 19:50:55 +02:00
janekptacijarabaci 644e9db109 DevTools - network - implement the secureConnectionStart property for the PerformanceTiming 
https://github.com/MoonchildProductions/moebius/pull/116
("/testing" and "/toolkit" in in the previous commit)
 2018-03-01 11:52:50 +01:00
janekptacijarabaci 83c4b04a70 Two (and more) extensions together - http resume - basilisk crashes 2018-02-18 10:30:15 +01:00
Matt A. Tobin 5f8de423f1 Add m-esr52 at 52.6.0 2018-02-02 04:16:08 -05:00