Skip to content
GitLab
Switch branch/tag
  1. 17 Mar, 2021 1 commit
    • Richard Pospesel's avatar
      Bug 23247: Communicating security expectations for .onion · 3b0641f3
      Richard Pospesel authored and Matthew Finkel's avatar Matthew Finkel committed 
      Encrypting pages hosted on Onion Services with SSL/TLS is redundant
(in terms of hiding content) as all traffic within the Tor network is
already fully encrypted.  Therefore, serving HTTP pages from an Onion
Service is more or less fine.

Prior to this patch, Tor Browser would mostly treat pages delivered
via Onion Services as well as pages delivered in the ordinary fashion
over the internet in the same way.  This created some inconsistencies
in behaviour and misinformation presented to the user relating to the
security of pages delivered via Onion Services:

 - HTTP Onion Service pages did not have any 'lock' icon indicating
   the site was secure
 - HTTP Onion Service pages would be marked as unencrypted in the Page
   Info screen
 - Mixed-mode content restrictions did not apply to HTTP Onion Service
   pages embedding Non-Onion HTTP content

This patch fixes the above issues, and also adds several new 'Onion'
icons to the mix to indicate all of the various permutations of Onion
Services hosted HTTP or HTTPS pages with HTTP or HTTPS content.

Strings for Onion Service Page Info page are pulled from Torbutton's
localization strings.
      3b0641f3
  3. 23 Oct, 2020 1 commit
  5. 11 May, 2020 2 commits
  7. 07 May, 2020 3 commits
  9. 06 May, 2020 2 commits
  11. 05 May, 2020 1 commit
  13. 29 Apr, 2020 1 commit
  15. 16 Apr, 2020 1 commit
  17. 14 Apr, 2020 1 commit
    • Tooru Fujisawa's avatar
      Bug 1432749 - Part 2: Introduce WindowFeature class with spec-compliant... · 44806f8c
      Tooru Fujisawa authored 
      Bug 1432749 - Part 2: Introduce WindowFeature class with spec-compliant tokenization, and use it both in nsGlobalWindowOuter and nsWindowWatcher. r=smaug

WindowFeature provides the tokenization and access to the map.
This changes the following behavior:
  * "*" value is removed, given it's unused.
    * Default width and default height handling is removed,
      given there's no callsites
  * Some chrome-priv feature handling becomes stricter:
    * All substring match is removed and directly checks the item in the map

Also, fixed noopener=0 and noreferrer=0 options to be handled properly.

Differential Revision: https://phabricator.services.mozilla.com/D67725

--HG--
extra : moz-landing-system : lando
      44806f8c
  19. 13 Apr, 2020 2 commits
    • Narcis Beleuzu's avatar
      Backed out 3 changesets (bug 1624150, bug 1432749) for wpt failures at... · 1783003a
      Narcis Beleuzu authored 
      Backed out 3 changesets (bug 1624150, bug 1432749) for wpt failures at open-features-tokenization-top-left.html. CLOSED TREE

Backed out changeset ff061c8d9da9 (bug 1624150)
Backed out changeset 7e96d4acf317 (bug 1432749)
Backed out changeset a95f77732a1c (bug 1432749)
      1783003a
    • Tooru Fujisawa's avatar
      Bug 1432749 - Part 2: Introduce WindowFeature class with spec-compliant... · ede1eed1
      Tooru Fujisawa authored 
      Bug 1432749 - Part 2: Introduce WindowFeature class with spec-compliant tokenization, and use it both in nsGlobalWindowOuter and nsWindowWatcher. r=smaug

WindowFeature provides the tokenization and access to the map.
This changes the following behavior:
  * "*" value is removed, given it's unused.
    * Default width and default height handling is removed,
      given there's no callsites
  * Some chrome-priv feature handling becomes stricter:
    * All substring match is removed and directly checks the item in the map

Also, fixed noopener=0 and noreferrer=0 options to be handled properly.

Differential Revision: https://phabricator.services.mozilla.com/D67725

--HG--
extra : moz-landing-system : lando
      ede1eed1
  21. 31 Mar, 2020 1 commit
  23. 26 Mar, 2020 2 commits
  25. 17 Mar, 2020 1 commit
  27. 18 Mar, 2020 4 commits
  29. 17 Mar, 2020 4 commits
  31. 05 Mar, 2020 3 commits
  33. 04 Mar, 2020 3 commits
  35. 03 Mar, 2020 1 commit
  37. 27 Feb, 2020 1 commit
  39. 24 Feb, 2020 1 commit
    • Dorel Luca's avatar
      Backed out 4 changesets (bug 911444) for Mochitest failures in... · 1def5d81
      Dorel Luca authored 
      Backed out 4 changesets (bug 911444) for Mochitest failures in dom/base/test/test_pdf_print.html. CLOSED TREE

Backed out changeset d156bbaabbd5 (bug 911444)
Backed out changeset a32592af0b11 (bug 911444)
Backed out changeset b96d0a37ed1a (bug 911444)
Backed out changeset fd2e3e8728d9 (bug 911444)
      1def5d81
  41. 21 Feb, 2020 1 commit
  43. 20 Feb, 2020 1 commit
  45. 04 Feb, 2020 1 commit
  47. 27 Jan, 2020 1 commit