This commits makes it possible to disable OS spoofing in the HTTP
User-Agent header, to see if matching header and JS property improve
usability.

Firefox computes an internal network ID used to detect network changes
and act consequently (e.g., to improve WebSocket UX).
However, there are a few ways to get this internal network ID, so we
patch them out, to be sure any new code will not be able to use them and
possibly link users.

We also sent a patch to Mozilla to seed the internal network ID, to
prevent any accidental leak in the future.
Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1817756

Alex Catarineu authored 5 years ago and Pier Angelo Vendrame committed 10 months ago

More concretely, SearchService.jsm 'hijack-blocklists' and
url-classifier-skip-urls.

Avoid creating instance for 'anti-tracking-url-decoration'.

If prefs are disabling their usage, avoid creating instances for
'cert-revocations' and 'intermediates'.

Do not ship JSON dumps for collections we do not expect to need. For
the ones in the 'main' bucket, this prevents them from being synced
unnecessarily (the code in remote-settings does so for collections
in the main bucket for which a dump or local data exists). For the
collections in the other buckets, we just save some size by not
shipping their dumps.

We also clear the collections database on the v2 -> v3 migration.

Mike Perry authored 10 years ago and Pier Angelo Vendrame committed 10 months ago

The Mozilla bugs: https://bugzilla.mozilla.org/show_bug.cgi?id=1046421,
https://bugzilla.mozilla.org/show_bug.cgi?id=1261591, tor-browser#27602

Marco Simonelli authored 2 years ago and Pier Angelo Vendrame committed 10 months ago

- fixes requried to build netwerk/sctp

edgul authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Bug 1802057 - Block the following characters from use in the cookie name in the cookie string: 0x3B (semi-colon), 0x3D (equals), and 0x7F (del) r=dveditz,cookie-reviewers

Differential Revision: https://phabricator.services.mozilla.com/D182373

Original Revision: https://phabricator.services.mozilla.com/D205048

Differential Revision: https://phabricator.services.mozilla.com/D209549

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D209531

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D209224

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D208120

Differential Revision: https://phabricator.services.mozilla.com/D207426

Original Revision: https://phabricator.services.mozilla.com/D205234

Differential Revision: https://phabricator.services.mozilla.com/D206699

Original Revision: https://phabricator.services.mozilla.com/D205233

Differential Revision: https://phabricator.services.mozilla.com/D206698

Differential Revision: https://phabricator.services.mozilla.com/D206232

Differential Revision: https://phabricator.services.mozilla.com/D206010

Differential Revision: https://phabricator.services.mozilla.com/D205554

The causes of the runnable loop are as follows:
1. In Release we have a special case to make sure OnStart&OnStop are always
   called. We do this by dispatching a runnable that calls DoNotifyListener.
2. DoNotifyListener is called, then the reference to the channel is again
   dropped. But at this point only OnStartRequest was called, and
   ContinueDoNotifyListener was added to mEventQ. That means another
   runnable would be dispatched.

While the loop was broken in the previous patch, we still want to ensure
OnStopRequest is called before the channel is released, so this patch
adds an argument to DoNotifyListener to select whether ContinueDoNotifyListener
should be called synchronously or dispatched to mEventQ.

Original Revision: https://phabricator.services.mozilla.com/D202798

Differential Revision: https://phabricator.services.mozilla.com/D204063

Original Revision: https://phabricator.services.mozilla.com/D202797

Differential Revision: https://phabricator.services.mozilla.com/D204062

Original Revision: https://phabricator.services.mozilla.com/D202796

Differential Revision: https://phabricator.services.mozilla.com/D204061

Differential Revision: https://phabricator.services.mozilla.com/D203895

Differential Revision: https://phabricator.services.mozilla.com/D203411

HpackDynamicTableReporter::mMutex protects access to HpackDynamicTableReporter::mCompressor
nvFIFO::mMutex protects access to mvFIFO::mTable - is aquired when adding or removing elements in the table, and when reporting SizeOfDynamicTable

Original Revision: https://phabricator.services.mozilla.com/D200814

Differential Revision: https://phabricator.services.mozilla.com/D202906

Bug 1851570 - [for esr] Allow necko to know when client auth is selected to drive TLS handshake, r=necko, a=dsmith

Differential Revision: https://phabricator.services.mozilla.com/D201722

Bug 1851570 - [for esr] Allow necko to know when client auth is selected to drive TLS handshake, r=necko-reviewers,valentin, a=dsmith

Differential Revision: https://phabricator.services.mozilla.com/D201722

Differential Revision: https://phabricator.services.mozilla.com/D201951

Bug 1833020: Disable TestWifiMonitor for intermittent failures r=gstoll,necko-reviewers,kershaw a=test-only

Differential Revision: https://phabricator.services.mozilla.com/D200066

Bug 1843752 - Explicitly transfer ownership of queued-up OnDataAvailableParams data buffers, a=RyanVM

Bug 1864385 - Block set-cookie from multipart/x-mixed-replace with pref. r=valentin,necko-reviewers a=RyanVM

Bug 1760081 - Disabled netwerk/test/unit/test_alt-data_simple.js on Windows for having a high failure rate. r=necko-reviewers,kershaw a=test-only

Differential Revision: https://phabricator.services.mozilla.com/D201069

Differential Revision: https://phabricator.services.mozilla.com/D200615

Bug 1874627 - regenerate expiring test certificates for 2024 (branch patch), this time with certificates included. r=jschank a=test-only


* the certificates were regenerated using `./mach generate-test-certs`
* the build/pgo/certs/ changes were made using
  `./mach python build/pgo/genpgocert.py`
* the zip files in security/manager/ssl/tests/unit/test_signed_apps/ were
  updated per the directions in the corresponding moz.build file
* security/manager/ssl/tests/unit/test_cert_override_read.js needed manual
  updating

These certificates and other test artifacts will now expire in 2025.

Differential Revision: https://phabricator.services.mozilla.com/D199156

* the certificates were regenerated using `./mach generate-test-certs`
* the build/pgo/certs/ changes were made using
  `./mach python build/pgo/genpgocert.py`
* the zip files in security/manager/ssl/tests/unit/test_signed_apps/ were
  updated per the directions in the corresponding moz.build file
* security/manager/ssl/tests/unit/test_cert_override_read.js needed manual
  updating

These certificates and other test artifacts will now expire in 2025.

Test Plan:
https://treeherder.mozilla.org/jobs?repo=try&revision=04e3780551b5e83a70b51acd84e1b3383a249f14

Differential Revision: https://phabricator.services.mozilla.com/D199156

Following the official migration guide from
https://docs.python.org/3/whatsnew/3.12.html#imp

Original Revision: https://phabricator.services.mozilla.com/D190465

Differential Revision: https://phabricator.services.mozilla.com/D200107

Bug 1848013 - Do not call HandleTunnelResponse for a tunnel connection created for WebSocket,  a=pascalc

Original Revision: https://phabricator.services.mozilla.com/D196271

Differential Revision: https://phabricator.services.mozilla.com/D199473

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D197900

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D197059

Differential Revision: https://phabricator.services.mozilla.com/D195769