fc4ea6534e
[minor fix] Security - added support for TLS 1.3 (follow up, any potential problems)
2018-07-25 07:11:34 +08:00
ef825bd0c8
Security - added support for TLS 1.3 (the next part)
2018-07-25 07:11:32 +08:00
4930dcaf60
Add some sanity checks to auth challenge lengths.
2018-07-25 07:09:12 +08:00
68c5139b0d
A channel suspend()-ed in http-on-modify-request shouldn't send out any traffic until resume()-d
2018-07-25 07:02:45 +08:00
f20d42357a
The referrer policy specification where origin-when-crossorigin should actually be origin-when-cross-origin (fix typo)
2018-07-25 06:59:55 +08:00
e2eeafaacd
Bug 1343505 r=mcmanus a=abillings
...
MozReview-Commit-ID: 7OPJQfzW4FU
2018-07-25 06:59:37 +08:00
3af91e4b80
Implement optional parameters of WebSocket permessage compression.
...
This works around a spec conflict in RFC7692, avoiding socket closure when allowed but unknown parameters are sent back by the server.
Added parameters:
- server_no_context_takeover
- server_max_window_bits
- client_max_window_bits
2018-07-25 06:59:33 +08:00
000c3a1f28
Don't assume whitespace is always present for www auth challenges.
2018-07-25 06:57:31 +08:00
418c035c1e
Match proper type for PR_sscanf which has a signed return value.
2018-07-25 06:57:11 +08:00
141293f5f3
Hold a reference to OnStartRequest()
2018-07-25 06:56:29 +08:00
a7727df056
Fix crash in SetReferrerWithPolicy, add null check the triggeringPrincipal.
2018-07-25 06:22:50 +08:00
01d1a30142
Fix buffer logic in http chunked decoder.
2018-07-25 06:22:20 +08:00
24bd4ab27a
Disable caching for ftp browsing sessions.
...
All this does is make things stale - there's no real advantage to doing this for FTP in the browser.
2018-07-25 01:31:13 +08:00
5f09883da3
Don't accept HTTP/2 pseudo headers that are invalid according to RFC 7540.
2018-07-25 01:04:25 +08:00
b3956f3b4d
Add integer overflow check in WebSocketChannel::ProcessInput.
2018-07-24 23:31:35 +08:00
42c94972e8
Revert "Add integer overflow check in WebSocketChannel::ProcessInput."
...
This reverts commit acb24afd3a8630e44bdb45bd58797c603eb41a23.
2018-07-24 23:31:27 +08:00
bacabd83d0
Add integer overflow check in WebSocketChannel::ProcessInput.
2018-07-24 23:31:24 +08:00
e89b19a584
Crash fix: Add SPDY/HTTPv2 safety check after h2 Shutdown()
2018-07-24 23:30:56 +08:00
482b170ac7
Tighten content access to about: pages
2018-07-24 23:30:48 +08:00
91d64e3cc0
Change UA compatibility mode to a 3-state.
...
- Default Gecko Compatibility which is Gecko slice added to Native (for web compat)
- other modes pure native (no gecko slice) and Firefox compatibility (Gecko+Firefox+rv: changed to Firefox compat version)
This removes `general.useragent.compatMode.firefox` and `.gecko` in favor of an int pref.
See also: MoonchildProductions/Pale-Moon#466
2018-07-24 23:28:32 +08:00
fd5caf4a2d
Bump Firefox compatmode version to 45.9
2018-07-24 23:26:16 +08:00
42030102ac
Allow BuildID overrides with MOZ_UA_BUILDID again.
2018-07-24 23:11:47 +08:00
b67eab9a2a
Fix UA handling build bustage
2018-07-24 23:11:37 +08:00
8cc50528dd
Re-implement UA handling for Goanna
2018-07-24 23:11:35 +08:00
53761b6336
Prep tree for forward-porting Goanna: stage 2
2018-07-24 23:11:02 +08:00
5ee6187aad
Prep tree for forward-porting Goanna, stage 1
2018-07-24 23:10:50 +08:00
baf46a6bf1
Merge pull request #1 from mozilla/esr38: Esr38 upstream pull
2018-07-24 23:04:07 +08:00
janekptacijarabaci
Pale Moon
Nicholas Hurley
Thomas Nguyen
wolfbeast
Moonchild