Marco Simonelli authored 2 years ago and Pier Angelo Vendrame committed 10 months ago

- properly define NOMINMAX for just MSVC builds

Bug 42529: Fix the breakage of this patch on Android.

Also, improve the patch hoping I can finally uplift it.

System fonts are an enormous fingerprinting vector.
Even with font allow lists and with our custom configuration on Linux,
which counter metrics measurements, getComputedStyle leaks several
details.
This patch counters both these kinds of attacks.

henry authored 2 years ago and Pier Angelo Vendrame committed 10 months ago

Remove this patch after upstream bugzilla bug 1790187

henry authored 2 years ago and Pier Angelo Vendrame committed 10 months ago

Temporary fix until mozilla bug 1799153 gets a patch upstream.

Tom Ritter authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Differential Revision: https://phabricator.services.mozilla.com/D204571

Differential Revision: https://phabricator.services.mozilla.com/D202203

Differential Revision: https://phabricator.services.mozilla.com/D198967

Differential Revision: https://phabricator.services.mozilla.com/D198965

Tom Ritter authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Differential Revision: https://phabricator.services.mozilla.com/D198081

Kagami Sascha Rosylight authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Per /etc/fonts.xml, there are now only two `<family lang="ko">` nodes there:

* OneUISansKRVF series
* SECCJK series (but no KR postfix anymore?)

This patch uses One UI Sans KR VF as the replacement as this is newer and is a variable font (tested with https://codepen.io/SaschaNaz/pen/ExrdYXJ)

Differential Revision: https://phabricator.services.mozilla.com/D195078

Bug 1444275 introduced an assertion on the parent process to check that
the value of toolkit.telemetry.enabled is the expected one.
However, this expected value could be different from the one set and
locked e.g. in some forks. Therefore, the assertion prevented debug
builds from working in these cases.

Differential Revision: https://phabricator.services.mozilla.com/D195080

Andreas Pehrson authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Similar to MediaTrack::mDisabledMode, but this is for uses on the
SourceMediaTrack producer thread. It is still signaled via a control message
from the control thread to maintain order of operations, and is protected by the
SourceMediaTrack mutex.

Differential Revision: https://phabricator.services.mozilla.com/D187554

Malte Jürgens authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Differential Revision: https://phabricator.services.mozilla.com/D187887

Bob Owen authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

This also specializes ElementStreamFormat for bool.

Differential Revision: https://phabricator.services.mozilla.com/D187794

Bug 1849186 - Add a preference not to expose the content title in the window title. r=Gijs,tabbrowser-reviewers,dao

Differential Revision: https://phabricator.services.mozilla.com/D190496

Mark Banner authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Differential Revision: https://phabricator.services.mozilla.com/D186676

Kelsey Gilbert authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

We could do non-racy static init here (e.g. with a static initializer
self-calling-closure), but there doesn't seem to be a strong reason for
this. Let's just use a switch and get robustness from -Werror=switch.

Differential Revision: https://phabricator.services.mozilla.com/D188054

edgul authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Bug 1802057 - Block the following characters from use in the cookie name in the cookie string: 0x3B (semi-colon), 0x3D (equals), and 0x7F (del) r=dveditz,cookie-reviewers

Differential Revision: https://phabricator.services.mozilla.com/D182373

Eden Chuang authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Bug 1738426 - Ignoring status 206 and vary header checking for opaque response in Cache API. r=asuth

Differential Revision: https://phabricator.services.mozilla.com/D186431

Differential Revision: https://phabricator.services.mozilla.com/D188716

Emilio Cobos Álvarez authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Bug 1853731 - Use html:img for message-bar-icon. r=Gijs,dao,settings-reviewers,desktop-theme-reviewers,sfoster

Differential Revision: https://phabricator.services.mozilla.com/D188521

Bug 1849129: Prevent exceptions caused by extensions from interrupting the SearchService initialization. r=search-reviewers,Standard8

Differential Revision: https://phabricator.services.mozilla.com/D186456

Bug 1832523 - Allow using NSS to sign and verify MAR signatures. r=application-update-reviewers,glandium,bytesized

Allow using NSS for checking MAR signatures also in platforms where
OS-native APIs are used by default, i.e., macOS and Windows.

Differential Revision: https://phabricator.services.mozilla.com/D177743

Eitan Isaacson authored 1 year ago and Pier Angelo Vendrame committed 10 months ago

Differential Revision: https://phabricator.services.mozilla.com/D179737

Original Revision: https://phabricator.services.mozilla.com/D205048

Differential Revision: https://phabricator.services.mozilla.com/D209549

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D209531

This is an ESR115-specific revision that drops the test changes.

Differential Revision: https://phabricator.services.mozilla.com/D207920

Original Revision: https://phabricator.services.mozilla.com/D208981

Differential Revision: https://phabricator.services.mozilla.com/D209332

Differential Revision: https://phabricator.services.mozilla.com/D209352

Bug 1894412 - When reading /etc/os-release, fall back to BUILD_ID when VERSION_ID is not set.  a=dmeehan

Arch Linux doesn't come with a VERSION_ID at all, but it has a BUILD_ID.
Semantically, falling back to BUILD_ID when VERSION_ID is not present
would seem fair play:

Per https://www.freedesktop.org/software/systemd/man/latest/os-release.html:

BUILD_ID=
    A string uniquely identifying the system image originally used as the
    installation base. In most cases, VERSION_ID or IMAGE_ID+IMAGE_VERSION
    are updated when the entire system image is replaced during an update.
    BUILD_ID may be used in distributions where the original installation
    image version is important: VERSION_ID would change during incremental
    system updates, but BUILD_ID would not. This field is optional.

Original Revision: https://phabricator.services.mozilla.com/D209089

Differential Revision: https://phabricator.services.mozilla.com/D209192

No Bug, mozilla-esr115 repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update, r=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D209224

Bug 1884962 - report kProtectionHDCP for the protection mask. r=media-playback-reviewers,padenot, a=dmeehan

According to what Widevine told us, `kProtectionNone` will cause playback
to stop if HDCP_V1 is required. Therefore, we would report HDCP protection
if there is no potential capturing.

Differential Revision: https://phabricator.services.mozilla.com/D207483

Bug 1886892 - Part 2: (ESR115) Remove non-SHIP cases from SessionStore tests, r=#sessionstore-reviewers, a=dmeehan


These cases will no longer be run, as SHIP is always on for desktop firefox, so
can be removed.

Differential Revision: https://phabricator.services.mozilla.com/D209146

Bug 1886892 - Part 1: (ESR115) Remove non-SHIP code from desktop SessionStore, r=#sessionstore-reviewers, a=dmeehan


In bug 1804140, we shipped SHIP everywhere on desktop. Unfortunately, we
never removed the now-dead code from SessionStore.

This patch removes the easy to identify SessionStore code for non-SHIP,
now that it is a fully unsupported configuration.

Differential Revision: https://phabricator.services.mozilla.com/D209145

Bug 1878577 - Ensure private storage repo is always cleaned up, even with PBM autostart.r=dom-storage-reviewers,janv, a=dmeehan

Differential Revision: https://phabricator.services.mozilla.com/D208995

Original Revision: https://phabricator.services.mozilla.com/D208657

Differential Revision: https://phabricator.services.mozilla.com/D208837

Original Revision: https://phabricator.services.mozilla.com/D208556

Differential Revision: https://phabricator.services.mozilla.com/D208836