We have enabled HTTPS-Only mode, therefore we do not need
HTTPS-Everywhere anymore.
However, we want to keep supporting .tor.onion aliases (especially for
securedrop).
Therefore, in this patch we implemented the parsing of HTTPS-Everywhere
rulesets, and the redirect of .tor.onion domains.
Actually, Tor Browser believes they are actual domains. We change them
on the fly on the SOCKS proxy requests to resolve the domain, and on
the code that verifies HTTPS certificates.

Alex Catarineu authored 5 years ago and Pier Angelo Vendrame committed 1 year ago

Whenever a valid Onion-Location HTTP header (or corresponding HTML
<meta> http-equiv attribute) is found in a document load, we either
redirect to it (if the user opted-in via preference) or notify the
presence of an onionsite alternative with a badge in the urlbar.

henry authored 2 years ago and Pier Angelo Vendrame committed 1 year ago

#41285: Enable fluent warnings.

Bug 1832523 - Allow using NSS to sign and verify MAR signatures. r=application-update-reviewers,glandium,bytesized

Allow using NSS for checking MAR signatures also in platforms where
OS-native APIs are used by default, i.e., macOS and Windows.

Differential Revision: https://phabricator.services.mozilla.com/D177743

Differential Revision: https://phabricator.services.mozilla.com/D186053

In some edge cases, we may start handling user input events that
are not supposed to be handled by the current document.

This patch introduces some delay to handle user input events.

Differential Revision: https://phabricator.services.mozilla.com/D180976

Differential Revision: https://phabricator.services.mozilla.com/D187285

Bug 1847066: flip back the network.http.http3.retry_different_ip_family pref r=necko-reviewers,valentin a=RyanVM

Differential Revision: https://phabricator.services.mozilla.com/D186197

Differential Revision: https://phabricator.services.mozilla.com/D180679

- Adds pref for whether to enforce size match with central->orglen
- Checks return code of inflateEnd and returns error if it's not Z_OK
- Also enter the finished block if mZs.total_out > mOutSize

Differential Revision: https://phabricator.services.mozilla.com/D181458

Differential Revision: https://phabricator.services.mozilla.com/D181633

Differential Revision: https://phabricator.services.mozilla.com/D178986

Bug 1838208 - Part 1: Add pref to allow choosing exception strategy. r=sefeng,necko-reviewers, a=dmeehan

In `IsOpaqueSafeListedSpecBreakingMIMEType` we make it possible to
configure, with pref, what kind of exception strategy to use to handle
compatibility problems with MIME types starting with `audio/` or
`video/`.

Differential Revision: https://phabricator.services.mozilla.com/D180926

Differential Revision: https://phabricator.services.mozilla.com/D180844

Bug 1826206 - Require nsISerialEventTarget for RetargetDeliveryTo, r=necko-reviewers,valentin, a=dmeehan

This avoids potential issues where multiple OnDataAvailable callbacks or
similar could theoretically be called concurrently on different
StreamTransportService threads when targeting the STS - these cases will
now target a TaskQueue on the STS instead, structurally ensuring serial
execution.

Differential Revision: https://phabricator.services.mozilla.com/D179984

Differential Revision: https://phabricator.services.mozilla.com/D179909

Even though there's some implementation work left before it being in a
shippable state, the bits that do work (which is quite a few) should
work reliably and performantly.

Given this is (afaict) the first implementation of the new spec, I want
to let people test it easier, specially since there are some questions
about error recovery that nesting could change.

Differential Revision: https://phabricator.services.mozilla.com/D179271

Backed out changeset 7bc8c25b2935 (bug 1833244)
Backed out changeset 4576af83a4ec (bug 1833244)
Backed out changeset 90a5bbba7b9c (bug 1833244)

This disables the pref for now so that the following patch doesn't change any
behavior. We'll re-enable the pref shortly.

Differential Revision: https://phabricator.services.mozilla.com/D179858

Bug 1824613 - Convert consumers of toolkit/mozapps/extensions/ to import ES modules directly. r=extension-reviewers,settings-reviewers,application-update-reviewers,credential-management-reviewers,devtools-reviewers,sync-reviewers,sgalich,bytesized,robwu,skhamis

Depends on D179819

Differential Revision: https://phabricator.services.mozilla.com/D179820

Bug 1836377 - Restore permission-based exposure of camera/microphone device labels when media.devices.enumerate.legacy.enabled is true. r=karlt

Differential Revision: https://phabricator.services.mozilla.com/D179730

Differential Revision: https://phabricator.services.mozilla.com/D179753

Backed out changeset cbef096ccab3 (bug 1836377) for causing mochitest-media failures on test_enumerateDevices.html. CLOSED TREE

Bug 1836377 - Restore permission-based exposure of camera/microphone device labels when media.devices.enumerate.legacy.enabled is true. r=karlt

Differential Revision: https://phabricator.services.mozilla.com/D179730

Differential Revision: https://phabricator.services.mozilla.com/D179829

Bug 1836255 - Set network.early-hints.preconnect.max_connections to 10 also in non-nightly channels r=necko-reviewers,jesup

This is fine to be always non-zero, because the variable is only read if
network.early-hints.preconnect.preconnect is set to true

Differential Revision: https://phabricator.services.mozilla.com/D179684

Differential Revision: https://phabricator.services.mozilla.com/D179456

Depends on D179337

Differential Revision: https://phabricator.services.mozilla.com/D179420

Enable wheel event groups by default on early beta.

Differential Revision: https://phabricator.services.mozilla.com/D179746

Since the headless work (bug 1129492 and co) we realistically have no
way of rendering native scrollbars in any meaningful way. Remove dead
code that used to support using a different GTK theme on content.

Differential Revision: https://phabricator.services.mozilla.com/D179616

This API has been disabled on nightly and early beta for a long time.
We have kept the API available in release in order to avoid
triggering any bugs in webapps that assume the API is there, but the
cache backing has been removed a few years back.

Considering this has also been removed in Chrome, it's quite safe
to disable and completely remove it from Firefox.

Differential Revision: https://phabricator.services.mozilla.com/D179337

Backed out changeset 2b6b58a6fe2f (bug 1677718)
Backed out changeset d1cfc37a01b3 (bug 1677718)

Depends on D176858

Differential Revision: https://phabricator.services.mozilla.com/D176859

Differential Revision: https://phabricator.services.mozilla.com/D178593

Backed out 19 changesets (bug 1830790) for causing failures on test_peerConnection_extmapRenegotiation.html. CLOSED TREE

Backed out changeset db4607bbd6d1 (bug 1830790)
Backed out changeset f40f865d0542 (bug 1830790)
Backed out changeset a855ea2a86ce (bug 1830790)
Backed out changeset f8ab14e89266 (bug 1830790)
Backed out changeset c234e91383df (bug 1830790)
Backed out changeset f460416a4c52 (bug 1830790)
Backed out changeset 53848fcc501f (bug 1830790)
Backed out changeset 31754aa2ac82 (bug 1830790)
Backed out changeset 994a28147fd3 (bug 1830790)
Backed out changeset cfb3a9040263 (bug 1830790)
Backed out changeset 416dc905b314 (bug 1830790)
Backed out changeset 8867c53e1827 (bug 1830790)
Backed out changeset 5885fd524e71 (bug 1830790)
Backed out changeset a1185664d37a (bug 1830790)
Backed out changeset 95473364c681 (bug 1830790)
Backed out changeset 85e101a4ff1a (bug 1830790)
Backed out changeset 6fd62bd98d73 (bug 1830790)
Backed out changeset a3d1461f8928 (bug 1830790)
Backed out changeset fcb4c264369e (bug 1830790)

Bug 1704521 - [devtools] Add a preference to disable the F12 shortcut r=devtools-reviewers,fluent-reviewers,nchevobbe,flod

Depends on D143835

Differential Revision: https://phabricator.services.mozilla.com/D179463