1
0
mirror of https://github.com/roytam1/UXP.git synced 2026-05-27 13:28:54 +00:00
Commit Graph

18 Commits

Author SHA1 Message Date
Moonchild d5919942ff Issue #1656 - Part 8: Devtools and misc. 2020-09-25 22:06:55 +08:00
Moonchild 0cd673d720 Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00
Moonchild 8c395520d9 Issue #1656 - Part 1: Nuke most vim config lines in the tree.
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
Gaming4JC 30797d4da8 backport mozbug 1334776 - CVE-2017-7797 Header name interning leaks across origins
Potential attack: session supercookie.

[Moz Notes](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c5):
"The problem is that for unknown header names we store the first one we see and then later we case-insensitively match against that name *globally*. That means you can track if a user agent has already seen a certain header name used (by using a different casing and observing whether it gets normalized). This would allow you to see if a user has used a sensitive service that uses custom header names, or allows you to track a user across sites, by teaching the browser about a certain header case once and then observing if different casings get normalized to that.

What we should do instead is only store the casing for a header name for each header list and not globally. That way it only leaks where it's expected (and necessary) to leak."

[Moz fix note](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c8):
"nsHttpAtom now holds the old nsHttpAtom and a string that is case sensitive (only for not standard headers).
So nsHttpAtom holds a pointer to a header name. (header names are store on a static structure). This is how it used to be. I left that part the same but added a nsCString which holds a string that was used to resoled the header name. So when we parse headers we call ResolveHeader with a char*. If it is a new header name the char* will be stored in a HttpHeapAtom, nsHttpAtom::_val will point to HttpHeapAtom::value and the same strings will be stored in mLocalCaseSensitiveHeader. For the first resolve request they will be the same but for the following maybe not. At the end this nsHttpAtom will be stored in nsHttpHeaderArray. For all operation we will used the old char* except when we are returning it to a script using VisitHeaders."
2019-02-16 00:14:28 +08:00
janekptacijarabaci d180a351b0 Added Ci.nsIContentPolicy.TYPE_SAVEAS_DOWNLOAD to next files 2019-02-16 00:03:28 +08:00
janekptacijarabaci c9cb57f881 Removing the unused variable 2019-02-15 23:40:30 +08:00
janekptacijarabaci b8bbffacbe DOMContentLoaded and load does not work properly if "devtools.webconsole.persistlog == true" - is getting higher
Issue #52
2019-02-15 23:36:00 +08:00
janekptacijarabaci d0c4a6bdf1 Copy as cURL (PATCH)
Issue #44
2019-02-15 23:35:35 +08:00
janekptacijarabaci ed8a17ae7d moebius#93: DevTools: Network - DOMContentLoaded and load
Issue #31
Improvements: #34
https://github.com/MoonchildProductions/moebius/pull/93
2019-02-15 23:35:20 +08:00
janekptacijarabaci 358146630a Show the Status Line (e.g. "HTTP/2.0 200 OK") in raw headers (response)
https://github.com/MoonchildProductions/moebius/pull/323
2019-02-15 23:34:55 +08:00
janekptacijarabaci 27538800b5 Properly pass postData into new tab
https://github.com/MoonchildProductions/moebius/pull/352
2019-02-15 23:34:54 +08:00
janekptacijarabaci 4f34dc2b96 [minor fix] DevTools - Throws an error ("String contains an invalid character")
https://github.com/MoonchildProductions/moebius/pull/162
2019-02-15 23:34:52 +08:00
janekptacijarabaci 59559355e6 DevTools - network - Copy as cURL (POST)
https://github.com/MoonchildProductions/moebius/pull/167
2019-02-15 23:34:44 +08:00
janekptacijarabaci 54f2e6eafd DevTools - network - implement the secureConnectionStart property for the PerformanceTiming
https://github.com/MoonchildProductions/moebius/pull/116
("/testing" and "/toolkit" in in the previous commit)
2019-02-15 23:34:40 +08:00
janekptacijarabaci 38e95f9e35 DevTools - network - security (improvements)
https://github.com/MoonchildProductions/moebius/pull/113
https://github.com/MoonchildProductions/moebius/pull/118
https://github.com/MoonchildProductions/moebius/pull/127
2019-02-15 23:34:38 +08:00
janekptacijarabaci 173d356acd Bug 1168376: Show transferred size in request summary instead of decompressed size
https://github.com/MoonchildProductions/moebius/pull/93
- without: DOMContentLoaded and load
2019-02-15 23:34:34 +08:00
janekptacijarabaci 2f496e3f1e Bug 1309194: Implement summary info in Net Panel Toolbar; Bug 1317205: CSS improvement for summary button
Required for: https://github.com/MoonchildProductions/moebius/pull/93
2019-02-15 23:34:27 +08:00
roytam1 dcd9973243 import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00