1
0
mirror of https://github.com/roytam1/UXP.git synced 2026-05-26 13:58:49 +00:00
Commit Graph

99 Commits

Author SHA1 Message Date
Moonchild 69bd6af877 [security] Ensure DispatchToMainThreadAndWait isn't interrupted.
In some cases, `lock.wait()` can be interrupted by spurious wake-ups
before processing is done. To ensure things are, in fact, synchronous,
loop over `wait()` until it is actually done.
2026-04-27 10:38:27 +08:00
Moonchild 5960178802 Issue #2723 - Remove obsolete NPN prefs and callbacks.
NPN was removed from NSS a long time ago, this effectively does nothing.
ALPN also should be default-enabled (we do this by pref but the component
itself should have a sane default) so this was flipped as a drive-by fix.

Resolves #2723
2025-06-17 09:29:57 +08:00
Moonchild 462aac7d98 [HSTS] Let parent hosts determine whether HSTS subs should be applied.
This aligns with the wording in RFC 6797.
2024-01-25 12:14:06 +08:00
Moonchild a39fd9e75f Issue #1656 - Remove more vim control lines.
Vim control lines were re-introduced or not entirely cleaned up.
This nukes them again.
Removing from modules, netwerk, security, storage, testing, toolkit, and
a few scattered misc files. More to come.
2023-05-05 22:59:16 +08:00
Moonchild f6f0a495a7 Issue #2180 - Follow-up: Move sentinel check up a bit. 2023-03-29 11:05:39 +08:00
Moonchild dc4bf9b823 Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel 2023-03-29 11:05:16 +08:00
Moonchild ca93d4b42d Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.

Resolves #1831
2023-03-29 11:04:44 +08:00
Moonchild eaf9e756a0 Issue #21 - Remove remaining telemetry structs, callers and flags. 2022-04-28 10:33:44 +08:00
Moonchild 8d800b1cb0 Issue #21 - Remove Telemetry plumbing and fix build.
Note this won't give working applications. Requires FE changes and
additional js module changes (next part).
2022-04-28 10:25:48 +08:00
FranklinDM 031a928950 Issue #738 - Follow-up: Remove explicit session cache cleanup routine from ShutdownNSS
This is no longer needed because the call to SSL_ConfigServerSessionIDCache on startup was already removed (see 1425f020c47b3cbe134f71717299714aead28502), meaning LocksInitializedEarly does not become true and only causes an assertion on debug builds.

On the other hand, SSL_ClearSessionCache is already called on XPCOM shutdown and calling it again here is redundant.

Additional context: https://bugzilla.mozilla.org/show_bug.cgi?id=1485087#c5

Based on https://bugzilla.mozilla.org/show_bug.cgi?id=1485087
2022-04-21 21:46:24 +08:00
Moonchild ed26fe34af Issue #1746 - Update pkix code with later NSS code. 2021-03-16 09:49:44 +08:00
Moonchild 9fd40b1c93 Issue #457 - Remove duplicate PKCS11 definitions 2021-02-25 09:26:44 +08:00
Moonchild ef29cca224 [security] Hold mutex when accessing TSI fields. 2021-02-25 09:26:42 +08:00
adesh 2924d30a83 Issue #1280 - Follow-up: Get rid of HPKP pinning mode.
This was a leftover from HPKP removal.

Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
2020-11-19 21:11:43 +08:00
Moonchild a77ab3da7f Issue #1656 - Nuke the remaining vim lines in UXP
Closes #1656
2020-10-30 09:09:20 +08:00
Moonchild d5919942ff Issue #1656 - Part 8: Devtools and misc. 2020-09-25 22:06:55 +08:00
Moonchild 0cd673d720 Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00
Moonchild 30df895eb2 Issue #1656 - Part 3: Nuke more vim config lines in the tree.
Another S&R run with some smarter matching.
2020-09-25 22:04:17 +08:00
Moonchild 8c395520d9 Issue #1656 - Part 1: Nuke most vim config lines in the tree.
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
Moonchild 594c930eca Issue #439 - Remove, fix and clean up automated tests
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
2020-06-10 21:00:09 +08:00
wolfbeast 052b2e70a3 Issue #1280 - Un-bust certerror pages and ForgetAboutSite 2020-04-03 09:30:07 +08:00
wolfbeast 593ea86a68 Issue #1280 - Part 2: Remove HPKP tests. 2020-04-03 09:27:13 +08:00
wolfbeast cf5f069080 Issue #1280 - Part 1: Remove HPKP components.
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast ff8c58e8db Issue #1498 - Part 6: Remove STS preloadlist pref. 2020-04-03 09:22:00 +08:00
wolfbeast be0246f8e4 Issue #1498 - Part 5: Update SSService CID and correct mismatch. 2020-04-03 09:21:57 +08:00
wolfbeast 6fe7731e5e Issue #1498 - Part 4: Remove clearPreloads.
Also tag #1280
2020-04-03 09:21:53 +08:00
wolfbeast bcfc5b3a88 Issue #1498 - Part 3: Remove support for storing "knockout" values. 2020-04-03 09:21:49 +08:00
wolfbeast 786480c19c Issue #1498 - Part 1: Stop persisting preload states.
Since we don't use preloading anymore for either HPKP or HSTS, we no
longer need persistent storage in the profile for preload states.
Tag #1280 also
2020-04-03 09:17:35 +08:00
wolfbeast 7d012bfdc0 Issue #1498 - Part 1: Stop using HSTS preload lists. 2020-04-03 09:17:28 +08:00
Matt A. Tobin 5010fed2fd Take nsSiteSecurityService out of UNIFIED_SOURCES
It exceeded the obj file sections limit because of the HSTS preload list so it cannot be built in UNIFIED mode.
2020-04-03 09:16:53 +08:00
wolfbeast 2c18f6df31 Issue #447 - Update HSTS preload list 2020-04-03 09:16:50 +08:00
wolfbeast 8778ddfc52 Issue #1467 - Part 4: Rename NSS_SQLSTORE to MOZ_SECURITY_SQLSTORE.
Rename the build config option accordingly.
2020-04-03 09:14:07 +08:00
wolfbeast ff29b77edc Issue #1467 - Part 3: Use UTF-8 file paths for NSS-SQL database. 2020-04-03 09:14:04 +08:00
wolfbeast 5efa1a9e43 Issue #1467 - Part 1: Set up conditional NSS-SQL builds.
- Adds buildconfig option --enable-nss-sqlstore
- Prefixes NSS dbinit with either sql: or dbm: depending on config
- Pre-initializes mozStorage when NSS-SQL storage is used to prevent
  an sqlite3_config race in NSS Init
2020-04-03 09:12:04 +08:00
Matt A. Tobin 56f64bd775 Issue #1053 - Remove android support from nsNSSComponent.cpp 2020-03-05 09:38:27 +08:00
wolfbeast ed6f10f477 Issue #447 - Update HSTS preload list & reduce debug spew
Commented out spewing dump() statements in loops. With the ever growing
HSTS list it takes too much time and is pointless to display.
2020-02-07 07:52:21 +08:00
wolfbeast d12d260c6a Be more consistent about decoding IP addresses in PSM. 2020-01-10 17:06:58 +08:00
wolfbeast b753aec164 Issue #1118 - Part 6: Fix various tests that are no longer correct.
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-28 21:20:04 +08:00
wolfbeast a9481b02f7 Issue #447 - Update HSTS preload list 2019-11-22 10:53:07 +08:00
wolfbeast 08a2dbad4c Issue #1289 - Part 3: Update tests. 2019-11-15 14:24:07 +08:00
wolfbeast 79593d40e1 Issue #1289 - Part 2: Clear out the preload list except for test
domains.
2019-11-15 14:24:05 +08:00
wolfbeast e7ab106190 Issue #1289 - Part 1: Add a pref to disable HPKP header processing. 2019-11-15 14:24:03 +08:00
wolfbeast 24645d4b58 Issue #1064 - Part 3: Fix notifyObservers() call. 2019-11-08 20:24:03 +08:00
wolfbeast db9333e3c8 Issue #1064 - Part 2: Fix shorthand and services module import. 2019-11-08 20:24:01 +08:00
wolfbeast 6c3b83022a No issue: Clean up exceptionDialog.js
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-11-08 20:24:00 +08:00
wolfbeast b09c92a90a Issue #1064: Don't get certificate details synchronously.
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-11-08 20:23:58 +08:00
wolfbeast c3dc56af72 Properly implement various HSTS states.
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-06 23:50:01 +08:00
trav90 d5703962e7 Update HSTS preload list
Tag #447
2019-06-28 07:02:09 +08:00
wolfbeast 3a613f462d Update HSTS preload list
Tag #447
2019-05-31 07:21:57 +08:00
Matt A. Tobin 97059c1b48 Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC 2019-04-27 08:51:55 +08:00