mirror of
https://github.com/classilla/tenfourfox.git
synced 2024-09-10 11:54:40 +00:00
Issue #607: new, separate blocklist in caps/ for scripts that can crash the browser, but have no obvious workaround (#609)
This commit is contained in:
parent
3f33f8a6e5
commit
5748c75132
@ -688,6 +688,34 @@ nsScriptSecurityManager::CheckLoadURIWithPrincipal(nsIPrincipal* aPrincipal,
|
|||||||
return NS_ERROR_DOM_BAD_URI;
|
return NS_ERROR_DOM_BAD_URI;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// See TenFourFox issue 607
|
||||||
|
// determine if this is a script we want to block
|
||||||
|
// Scripts that somehow hit hard limits should go in here
|
||||||
|
if (!mIsTenFourFoxTroublesomeJsAllowed &&
|
||||||
|
(targetScheme.EqualsLiteral("http") || targetScheme.EqualsLiteral("https"))) {
|
||||||
|
nsAutoCString hostname;
|
||||||
|
if (MOZ_LIKELY(NS_SUCCEEDED(targetBaseURI->GetHost(hostname)))) {
|
||||||
|
ToLowerCase(hostname);
|
||||||
|
#define BLOC(q) hostname.EqualsLiteral(q)
|
||||||
|
if (0 ||
|
||||||
|
|
||||||
|
#ifdef __ppc__
|
||||||
|
BLOC("static.twitchcdn.net") ||
|
||||||
|
#endif // __ppc__
|
||||||
|
|
||||||
|
0) {
|
||||||
|
#undef BLOC
|
||||||
|
|
||||||
|
#ifndef DEBUG
|
||||||
|
if (mIsTenFourFoxTroublesomeJsLoggingEnabled)
|
||||||
|
#endif
|
||||||
|
fprintf(stderr, "Warning: TenFourFox blocking problematic script from %s.\n",
|
||||||
|
hostname.get());
|
||||||
|
return NS_ERROR_DOM_BAD_URI;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
// TenFourFox issue 469
|
// TenFourFox issue 469
|
||||||
// determine if this is a script we want to block
|
// determine if this is a script we want to block
|
||||||
if (mIsTenFourFoxAdBlockEnabled &&
|
if (mIsTenFourFoxAdBlockEnabled &&
|
||||||
@ -1790,6 +1818,7 @@ static const char* kObservedPrefs[] = {
|
|||||||
sFileOriginPolicyPrefName,
|
sFileOriginPolicyPrefName,
|
||||||
"capability.policy.",
|
"capability.policy.",
|
||||||
"tenfourfox.adblock.",
|
"tenfourfox.adblock.",
|
||||||
|
"tenfourfox.troublesome-js.",
|
||||||
nullptr
|
nullptr
|
||||||
};
|
};
|
||||||
|
|
||||||
@ -1810,6 +1839,8 @@ nsScriptSecurityManager::nsScriptSecurityManager(void)
|
|||||||
, mIsJavaScriptEnabled(false)
|
, mIsJavaScriptEnabled(false)
|
||||||
, mIsTenFourFoxAdBlockEnabled(false)
|
, mIsTenFourFoxAdBlockEnabled(false)
|
||||||
, mIsTenFourFoxAdBlockLoggingEnabled(false)
|
, mIsTenFourFoxAdBlockLoggingEnabled(false)
|
||||||
|
, mIsTenFourFoxTroublesomeJsAllowed(false)
|
||||||
|
, mIsTenFourFoxTroublesomeJsLoggingEnabled(false)
|
||||||
{
|
{
|
||||||
static_assert(sizeof(intptr_t) == sizeof(void*),
|
static_assert(sizeof(intptr_t) == sizeof(void*),
|
||||||
"intptr_t and void* have different lengths on this platform. "
|
"intptr_t and void* have different lengths on this platform. "
|
||||||
@ -1950,6 +1981,12 @@ nsScriptSecurityManager::ScriptSecurityPrefChanged()
|
|||||||
Preferences::GetBool("tenfourfox.adblock.enabled", mIsTenFourFoxAdBlockEnabled);
|
Preferences::GetBool("tenfourfox.adblock.enabled", mIsTenFourFoxAdBlockEnabled);
|
||||||
mIsTenFourFoxAdBlockLoggingEnabled =
|
mIsTenFourFoxAdBlockLoggingEnabled =
|
||||||
Preferences::GetBool("tenfourfox.adblock.logging.enabled", mIsTenFourFoxAdBlockLoggingEnabled);
|
Preferences::GetBool("tenfourfox.adblock.logging.enabled", mIsTenFourFoxAdBlockLoggingEnabled);
|
||||||
|
mIsTenFourFoxTroublesomeJsAllowed =
|
||||||
|
Preferences::GetBool("tenfourfox.troublesome-js.allow",
|
||||||
|
mIsTenFourFoxTroublesomeJsAllowed);
|
||||||
|
mIsTenFourFoxTroublesomeJsLoggingEnabled =
|
||||||
|
Preferences::GetBool("tenfourfox.troublesome-js.logging.enabled",
|
||||||
|
mIsTenFourFoxTroublesomeJsLoggingEnabled);
|
||||||
|
|
||||||
//
|
//
|
||||||
// Rebuild the set of principals for which we allow file:// URI loads. This
|
// Rebuild the set of principals for which we allow file:// URI loads. This
|
||||||
|
@ -125,6 +125,8 @@ private:
|
|||||||
bool mIsJavaScriptEnabled;
|
bool mIsJavaScriptEnabled;
|
||||||
bool mIsTenFourFoxAdBlockEnabled;
|
bool mIsTenFourFoxAdBlockEnabled;
|
||||||
bool mIsTenFourFoxAdBlockLoggingEnabled;
|
bool mIsTenFourFoxAdBlockLoggingEnabled;
|
||||||
|
bool mIsTenFourFoxTroublesomeJsAllowed;
|
||||||
|
bool mIsTenFourFoxTroublesomeJsLoggingEnabled;
|
||||||
nsTArray<nsCOMPtr<nsIURI>> mFileURIWhitelist;
|
nsTArray<nsCOMPtr<nsIURI>> mFileURIWhitelist;
|
||||||
|
|
||||||
// This machinery controls new-style domain policies. The old-style
|
// This machinery controls new-style domain policies. The old-style
|
||||||
|
Loading…
Reference in New Issue
Block a user