Re: [Policy] Tracking Regressions in Firefox Components Managed in GitHub Projects

2018-04-10 Thread Emma Humphries
And I misspelled Glob's name. That's Byron Jones. Sorry about that. -- Emma On Tue, Apr 10, 2018 at 4:18 PM, Emma Humphries wrote: > Release Management and the weekly regression triage must be aware of the > status of all reported regressions in order to assure we are not shipping > known regre

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Masayuki Nakano
On 4/10/2018 5:27 PM, Brian Birtles wrote: On Tue, Apr 10, 2018 at 10:19 AM, wrote: Thanks for sharing. But it's not exactly what is being looked for. We are looking for websites in an overall vertical writing mode, not ones mixed with vertical writing text. That is, there should be a horizon

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Masayuki Nakano
On 4/10/2018 5:53 PM, Karl Dubost wrote: Masayuki, Le 6 avr. 2018 à 17:26, Masayuki Nakano a écrit : Does somebody know some lists of web sites which use vertical writing-mode? Kobo Taiwan for example has preview of books in vertical writing mode. see https://webcompat.com/issues/14152 Th

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Masayuki Nakano
On 4/10/2018 4:40 PM, Brian Birtles wrote: On Fri, Apr 6, 2018 at 10:26 AM, Masayuki Nakano wrote: Does somebody know some lists of web sites which use vertical writing-mode? Unfortunately, I don't know web sites which use writing-mode heavily even though I usually read web sites written in Ja

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Byron Jones
Mark Banner wrote: There are some directories where we only import a file from a third-party and it is alongside other files in that same directory, e.g. testing/modules has "ajv-4.1.1.js" and "sinon-2.3.2.js" imported from elsewhere. How do they fit into this scheme? they would have to be

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Byron Jones
Axel Hecht wrote: One thing I'm missing is the ability to do mono-repo imports. Say we want to vendor in https://github.com/projectfluent/fluent.js/tree/master/fluent-gecko. i'm not sure i understand the specific concerns around mono-repos; you can use exclude/include to perform a selective i

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Botong Zhao
On Tue, Apr 10, 2018 at 8:00 PM, wrote: > -- > > Message: 2 > Date: Tue, 10 Apr 2018 10:27:07 +0200 > From: Brian Birtles > To: z...@zjz.name > Cc: dev-platform > Subject: Re: Are there some lists of web sites which use vertical > writing-mode? > Message-ID:

[Policy] Tracking Regressions in Firefox Components Managed in GitHub Projects

2018-04-10 Thread Emma Humphries
Release Management and the weekly regression triage must be aware of the status of all reported regressions in order to assure we are not shipping known regressions in Firefox releases. If a team is using GitHub to manage their part of the Firefox project, there’s a risk that those groups might no

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Thom Chiovoloni
On Tue, Apr 10, 2018 at 6:00 AM, Mark Banner wrote: > There are some directories where we only import a file from a third-party > and it is alongside other files in that same directory, e.g. > testing/modules has "ajv-4.1.1.js" and "sinon-2.3.2.js" imported from > elsewhere. > > How do they fit i

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Martin Thomson
On Tue, Apr 10, 2018 at 6:41 AM, glob wrote: >> You don't permit the use of a tag for vendoring, is that intentional? > > to echo gps and mike's responses use of a sha to is preferred over tags. Maybe. We currently use tags. Think about the usage model. If the process is to author the YAML, th

Unshippables

2018-04-10 Thread Mike Taylor
Hi all, I created the following page to track bugfixes, features, or APIs we can't ship (or unship) because it breaks the web. Feel free to contribute, there’s bound to be many more. Thanks, -- Mike Taylor Web Compat, Mozilla ___

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Axel Hecht
A couple of comments: One thing I'm missing is the ability to do mono-repo imports. Say we want to vendor in https://github.com/projectfluent/fluent.js/tree/master/fluent-gecko. For js libraries, we might also want to pay attention to .npmignore (others already mentioned hg, so also .hgignor

Re: Editing a vendored crate for a try push

2018-04-10 Thread acrichton
On Tuesday, April 10, 2018 at 8:45:57 AM UTC-5, Ted Mielczarek wrote: > On Mon, Apr 9, 2018, at 7:18 AM, Henri Sivonen wrote: > > What's the current status of tooling for editing vendored crates for > > local testing and try pushes? > > > > It looks like our toml setup is too complex for cargo edi

Re: Intent to implement and ship: same-site cookies

2018-04-10 Thread Daniel Veditz
On Mon, Apr 9, 2018 at 11:56 PM, Anne van Kesteren wrote: > We keep > ​ ​ > trying to find ways to limit cookies transmitted over HTTP (and > limiting HTTP in general). Offering better cookies over HTTPS seems > like a good incentive for sites to migrate. > To me "better cookies" means the __Sec

Re: Is realloc() between bucket sizes worthwhile with jemalloc?

2018-04-10 Thread Simon Sapin
On 09/04/18 13:58, Henri Sivonen wrote: Specifically, is it actually useful that nsStringBuffer uses realloc() as opposed to malloc(), memcpy() with actually semantically filled amount and free()? Upon superficial code reading, it seems to me that currently changing the capacity of an nsA[C]STri

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Nicholas Alexander
Hi all, On Mon, Apr 9, 2018 at 9:25 PM, glob wrote: > mozilla-central contains code vendored from external sources. Currently > there is no standard way to document and update this code. In order to > facilitate automation around auditing, vendoring, and linting we intend to > require all vendor

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread glob
Tom Tromey wrote: this should be: https://goo.gl/QZyz4x for the full specification. Some code in DevTools is vendored by dropping webpack bundles into the tree. The bundles are created by running a yarn command in the source repository; this also copies the bundle into an M-C tree. If these dir

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Tom Ritter
I've spoken to glob about this offline; but just wanted to note: Our fledgling 'Third Party Library Audit' project is planning on using this metadata (even if the library itself isn't completely vendored) for checking for security issues in upstream and auto-filing bugs. -tom On Mon, Apr 9, 2018

Re: Intent to implement and ship: ping, rel, referrerPolicy, relList, hreflang, type and text properties on SVG elements

2018-04-10 Thread Boris Zbarsky
On 4/10/18 4:03 AM, Gijs Kruitbosch wrote: I looked at the patch briefly, and I'm a bit confused about the state of The DOM bit is exposed, but we don't actually send pings. Yes, this sucks in terms of detecting whether ping is supported... -Boris

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Tom Tromey
>> this should be: https://goo.gl/QZyz4x for the full specification. Some code in DevTools is vendored by dropping webpack bundles into the tree. The bundles are created by running a yarn command in the source repository; this also copies the bundle into an M-C tree. If these directories are goin

Re: Intent to implement and ship: ping, rel, referrerPolicy, relList, hreflang, type and text properties on SVG elements

2018-04-10 Thread Jet Villegas
I like that our link handling is getting shared but would really love a fix for this bug in SVG rendering: https://bugzilla.mozilla.org/show_bug.cgi?id=1366494 Robert: do you have time to fix that one while you're in there? Thanks! --Jet On Tue, Apr 10, 2018 at 1:09 AM, Gijs Kruitbosch wrote

Re: Editing a vendored crate for a try push

2018-04-10 Thread Ted Mielczarek
On Mon, Apr 9, 2018, at 7:18 AM, Henri Sivonen wrote: > What's the current status of tooling for editing vendored crates for > local testing and try pushes? > > It looks like our toml setup is too complex for cargo edit-locally to > handle (or, alternatively, I'm holding it wrong). It also seems t

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread James Graham
On 10/04/2018 14:34, Ted Mielczarek wrote: On Tue, Apr 10, 2018, at 9:23 AM, James Graham wrote: On 10/04/2018 05:25, glob wrote: mozilla-central contains code vendored from external sources. Currently there is no standard way to document and update this code. In order to facilitate automation

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Ted Mielczarek
On Tue, Apr 10, 2018, at 9:23 AM, James Graham wrote: > On 10/04/2018 05:25, glob wrote: > > mozilla-central contains code vendored from external sources. Currently > > there is no standard way to document and update this code. In order to > > facilitate automation around auditing, vendoring, and

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread glob
James Graham wrote: So we now have moz.build that in addition to build instructions, contains metadata for mozilla-authored code (e.g. bugzilla components) and moz.yaml that will contain similar metadata but only for non-mozilla-authored code, as well as Cargo.toml that will contain (some of)

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread James Graham
On 10/04/2018 05:25, glob wrote: mozilla-central contains code vendored from external sources. Currently there is no standard way to document and update this code. In order to facilitate automation around auditing, vendoring, and linting we intend to require all vendored code to be annotated wi

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread Mark Banner
On 10/04/2018 05:25, glob wrote: The plan is to create a YAML file for each library containing metadata such as the homepage url, vendored version, bugzilla component, etc. See https://goo.gl/QZyz4xfor the full specification. There are some directories where we only import a file from a third-p

[desktop] Bugs logged by Desktop Release QA in the last 8 days

2018-04-10 Thread Bogdan Maris
Hello, Here's the list of new issues found and filed by the Desktop Release QA team last week. Additional details on the team's priorities last week, as well as the plans for the current week are available at: https://tinyurl.com/yaj49dmm Bugs logged by Desktop Release QA in the last 8 days Fir

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Karl Dubost
Masayuki, Le 6 avr. 2018 à 17:26, Masayuki Nakano a écrit : > Does somebody know some lists of web sites which use vertical writing-mode? Kobo Taiwan for example has preview of books in vertical writing mode. see https://webcompat.com/issues/14152 -- Karl Dubost, mozilla 💡 Webcompat http://

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Brian Birtles
On Tue, Apr 10, 2018 at 10:19 AM, wrote: > Thanks for sharing. > > But it's not exactly what is being looked for. We are looking for > websites in an overall vertical writing mode, not ones mixed with > vertical writing text. That is, there should be a horizontal scrollbar > in the page, and the

Re: Intent to implement and ship: Blocking FTP subresources

2018-04-10 Thread Frederik Braun
On 09.04.2018 15:13, Tom Schuster wrote: > Summary: All FTP subresources in HTTPs pages (this also includes blob: > etc) will be blocked. Opening FTP links as toplevel documents is still > possible. > > Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1404744 > > Platform coverage: All > Targe

Re: Intent to implement and ship: ping, rel, referrerPolicy, relList, hreflang, type and text properties on SVG elements

2018-04-10 Thread Gijs Kruitbosch
On 10/04/2018 09:03, Gijs Kruitbosch wrote: On 09/04/2018 22:11, longs...@gmail.com wrote: Summary: HTML anchor elements have ping, rel, referrerPolicy, relList, hreflang, type and text properties. SVG anchor elements should support these properties too according to the SVG 2 specification and

Re: Intent To Require Manifests For Vendored Code In mozilla-central

2018-04-10 Thread glob
Henri Sivonen wrote: This proposal makes sense to me when it comes to libraries that are not vendored from crates.io. However, this seems very heavyweight and only adds the Bugzilla metadata for crates.io crates. It seems to me that declaring the Bugzilla component isn't worth the trouble of havi

Re: Intent to implement and ship: ping, rel, referrerPolicy, relList, hreflang, type and text properties on SVG elements

2018-04-10 Thread Gijs Kruitbosch
On 09/04/2018 22:11, longs...@gmail.com wrote: Summary: HTML anchor elements have ping, rel, referrerPolicy, relList, hreflang, type and text properties. SVG anchor elements should support these properties too according to the SVG 2 specification and https://github.com/w3c/svgwg/issues/315. B

Re: Intent to implement and ship: ping, rel, referrerPolicy, relList, hreflang, type and text properties on SVG elements

2018-04-10 Thread Gijs Kruitbosch
On 10/04/2018 03:07, Cameron McCormack wrote: On Tue, Apr 10, 2018, at 11:58 AM, Jeff Gilbert wrote: Do we have a heuristic for when to /not/ include something from HTML in SVG? If it doesn't make two features which already exist in both HTML and SVG more consistent, then I wouldn't include i

Re: Intent to implement and ship: same-site cookies

2018-04-10 Thread Jan Odvarko
On Tue, Apr 10, 2018 at 4:25 AM, Francois Marier wrote: > We intend to ship same-site cookies in Firefox 61. This new cookie > attribute allows sites to prevent cross-site requests from using those > cookies which provides a mechanism for web sites to protect themselves > against Cross-Site Reque

Re: Are there some lists of web sites which use vertical writing-mode?

2018-04-10 Thread Brian Birtles
On Fri, Apr 6, 2018 at 10:26 AM, Masayuki Nakano wrote: > Does somebody know some lists of web sites which use vertical > writing-mode? Unfortunately, I don't know web sites which use writing-mode > heavily even though I usually read web sites written in Japanese... > For Japanese there is a lis

Re: Intent to implement and ship: ping, rel, referrerPolicy, relList, hreflang, type and text properties on SVG elements

2018-04-10 Thread Anne van Kesteren
On Tue, Apr 10, 2018 at 3:58 AM, Jeff Gilbert wrote: > Do we have a heuristic for when to /not/ include something from HTML in SVG? > > More or less, these additions to SVG just strike me as having solid > potential risk (for both spec-interaction and implementation bugs) and > negligible upside.