Commit Graph

114 Commits

Author SHA1 Message Date
wolfbeast 408ca49a02 Clarify comment with security.fileuri.unique_origin 2019-07-20 15:02:04 +02:00
wolfbeast 33b6f178d1 Treat all file: URIs as having a unique origin.
This prevents cross-file access from files loaded into the browser from
the local file system, further restricting the origin policy of file:
URIs.

Added a pref to control this behavior for local file access if required
for certain applications, since this change might break using the
browser to run applications on the local file system that require
access to local files.
2019-07-20 14:56:26 +02:00
wolfbeast 45cb5ab729 Block http auth prompt for cross-origin image subresources by default.
Still allow this to be bypassed with a pref for those really rare corner
cases where images are loaded cross-origin by design and the session
hasn't been/can't be authenticated ahead of time.
2019-07-15 14:13:14 +02:00
wolfbeast d9aff90f06 Add preference to allow the loading of FTP subresources for corner cases 2019-07-14 22:41:01 +02:00
wolfbeast 284b4cffd7 Add Atomics.notify instead of Atomics.wake according to revised spec.
- Keep .wake as an alias until we're certain it can be removed.
- Enable SAB memory
2019-06-12 03:38:40 +02:00
wolfbeast 65991dc1f2 Disallow res external protocol handler. 2019-05-28 14:44:57 +02:00
Gaming4JC ca9e6a4fa9 Issue #1102 - Disable <meta http-equiv=set-cookie>
Create a new pref 'dom.meta-set-cookie.enabled' which is set to 'false', disabling http-equiv meta cookies.
2019-05-24 20:14:44 -04:00
wolfbeast 3ded48cbe3 Unhook Unboxed Objects option 2019-05-13 15:45:32 +00:00
Ascrod c78cd6fb97 Remove geo-specific search engine default preferences. Tag #245. 2019-04-20 07:29:59 -04:00
wolfbeast de75f133a7 Remove Firefox Accounts service and tie-ins.
See previous commit for removal of browser identity module.
2019-04-19 02:02:56 +02:00
wolfbeast 095ea55685 Remove some BEOS 1st party code leftovers. 2019-04-14 15:47:58 +02:00
wolfbeast a2786c0511 Remove AIX 1st party code OS checks, part 2
Issue #186
2019-04-01 00:11:06 +02:00
Florian Quèze cac3f9678d Bug 1338306 - nsIPrefBranch.get*Pref should support providing a default value, r=bsmedberg. 2019-03-23 19:35:32 -04:00
wolfbeast 890bb438b0 Pref the use of unboxed plain objects in JS and disable by default.
This should be all that's needed for #1017, but verification of
impact is definitely desired.
2019-03-21 09:53:24 +01:00
wolfbeast d38ddd92e1 Part 1: network component changes. 2019-03-07 12:45:54 +01:00
wolfbeast c08b490c5c Move default-enable pref to application. 2019-02-28 13:58:23 +01:00
wolfbeast c13bd1bba2 Revert "Port several Skia upstream fixes."
This reverts commit 260b06c1c9.

This fixes #976
2019-02-17 14:58:18 +01:00
wolfbeast a6ddde9097 Port several Skia upstream fixes. 2019-02-14 16:59:52 +01:00
wolfbeast 278eda6a09 Set incremental GC slice to 20 ms duration 2019-01-31 14:55:30 +01:00
wolfbeast 9a954e2d16 Properly camelCase dom.intersectionObserver.enabled pref. 2019-01-19 22:06:35 +01:00
wolfbeast 5ef0018a56 Revert "Disable IntersectionObserver API because of crashes."
This reverts commit ac1beef5c1.
2019-01-19 16:26:35 +01:00
wolfbeast ac1beef5c1 Disable IntersectionObserver API because of crashes.
See #934 and #935.
2019-01-19 11:18:41 +01:00
Ascrod 3afb818f20 Add preference for fully disabling HSTS. 2019-01-16 19:33:09 -05:00
wolfbeast 202e78b731 Add performance warnings to Deprecated module.
Adds a dedicated handler for performance warnings to be logged to
consoles if known performance-impacting methods are called.
Search service init is changed from a deprecation warning to a
performance warning for synchronous init.
This also re-enables the warning for the Basilisk & Co. search service
initialization which was previously removed in [a930a79]

See also the discussion on #916.
2018-12-24 05:06:54 +01:00
wolfbeast 4319edc1a6 Re-enable intersection observers with WD spec patches.
This resolves #249
2018-12-22 15:02:49 +01:00
trav90 f68b57c0bd Remove DirectShowReader Part 1: Conditional code 2018-12-01 09:35:02 -06:00
wolfbeast da447504dd Update GMP AUS URL 2018-11-30 06:39:36 +01:00
wolfbeast 7504ca8ab4 Remove VR hardware support.
This resolves #881
2018-11-26 16:41:20 +01:00
wolfbeast 5c83a18cde Update reported Firefox version in compatmode.
This resolves #864
2018-11-07 06:44:17 +01:00
wolfbeast d29d1cc84b #863 part 2: Make opportunistic encryption opt-in for UXP
This exposes the new pref and also sets the Alt-Svc pref for OE to false.
Basilisk gets a default opt-in for both to stay close to Firefox.
2018-11-05 15:51:39 +01:00
wolfbeast 79487a1a05 Backout opportunistic encryption changes.
Apparently there is some functional and naming confusion here.
Backing out to re-land after evaluation and possible changes.
Tag #863.
2018-11-04 23:39:37 +01:00
wolfbeast 801382dd66 Swap default platform state for opportunistic encryption.
Tag #863
2018-11-04 17:50:52 +01:00
wolfbeast 359c9e5467 Change captive portal detection URL to our own. 2018-11-04 16:06:05 +01:00
wolfbeast 4a188c7b99 Make opportunistic encryption configurable.
This adds a pref "network.http.opportunistic-encryption" that controls whether
we send an "Upgrade-Insecure-Requests : 1" header on document navigation or not.
This patch modifies the platform network parts. Default for the platform is "true".
Part 1 for #863
2018-11-04 16:05:27 +01:00
wolfbeast 3332144211 Set CSS error console reporting default to false for performance.
Dev note needed upon release. This resolves #444.
2018-10-29 22:41:12 +01:00
trav90 6ddf66542b Put AV1 codec behind a pref
Disabled by default.
2018-10-20 08:24:28 -05:00
wolfbeast 6efff99edb Expose browser.download.lastDir.savePerSite
Resolves #823 (alternative suggestion)
2018-10-08 08:47:45 +02:00
wolfbeast 6e48f5e140 Make caret width normal/thick behind CJK char configurable.
Fixes #820 (regression).
2018-10-07 19:46:00 +02:00
wolfbeast 866ea8dfa5 Set the default action to not lock content scrolling when a menu is open.
This resolves issues with the bookmarks and other menus with submenus if scrollable in case of many items displayed.
2018-10-06 17:46:21 +02:00
wolfbeast 097f982b32 Remove IndexedDB for content pref.
Tag Issue #765
2018-09-29 00:16:29 +02:00
Moonchild 326611aaae Merge pull request #788 from alaviss/apz-experimental
gfx: add pref for enabling APZ without e10s
2018-09-26 13:55:38 +02:00
wolfbeast 575f07db09 Regression fix: enable ICC v4 profiles by default. 2018-09-25 20:44:04 +02:00
Leorize 1c159bf4dc gfx: add pref for enabling APZ without e10s 2018-09-25 14:55:50 +07:00
wolfbeast 7c9b62ee0a Add findbar.termPerTab
Allow the pref to switch between global search term and per-tab search term
2018-09-09 15:41:15 +02:00
wolfbeast 74c6c585ab Introduce ui.menu.allow_content_scroll
When true, overrides the OS convention to prevent scrolling of content when contextual menus are open.
This resolves #730.
2018-08-24 13:21:17 +02:00
wolfbeast c78bee9c13 Stop pointless recording of telemetry data
Also clear the telemetry URLs and metas "just in case" so nothing can go anywhere even in the case of PEBCAK.
2018-08-23 16:06:53 +02:00
JustOff de50d15d28 Use "browser.newtabpage.add_to_session_history" to decide whether to store "about:newtab" in the session history 2018-08-22 13:40:19 +03:00
wolfbeast b5ee49d85a Re-implement custom background color of standalone images.
This resolves #717.

Note: this does not affect other applications because the platform
default is to use the "darknoise" background image for standalone
image, which effectively overrides a bg color.
2018-08-20 13:31:38 +02:00
Moonchild ddb2b97680 Merge pull request #685 from trav90/default-pref-updates
Disable battery API by default
2018-08-01 08:01:19 +02:00
wolfbeast b450f90cd7 Tune the network stack
This resolves #684
2018-08-01 07:55:40 +02:00