[ Intent to change ] Updates to Are We Triaged Yet

2019-09-16 Thread Emma Humphries
Hi, I want to give you a heads up on some incoming updates to the Are We Triaged Yet tool. You can see these at https://are-we-triaged-yet.glitch.me/. The changes: * This release gets rid of the separate sets of charts for each release, that way of tracking wasn't helpful. - Now there's two set

Re: Cookies are no longer stored by nsIHttpChannel?

2019-09-16 Thread john.bieling--- via dev-platform
More details: The same code works in TB60 and in the cookie list of the general options I can see all sorts of cookies being stored. In TB68, none of the expected cookies show up in the cookie list. Did something change in that region? What do I need to do to allow a channel / principal to sto

Re: Cookies are no longer stored by nsIHttpChannel?

2019-09-16 Thread john.bieling--- via dev-platform
It happens also with the SystemPrincipal as well, so independent of the userContextId. I changed to code as follows now and get the same behaviour: let channel = Services.io.newChannelFromURI( uri, null, Services.scriptSecurityManager.getSystemPrincipal(), null, Ci

Re: Cookies are no longer stored by nsIHttpChannel?

2019-09-16 Thread Honza Bambas
This might be a cookie isolation, or something missing to recognize if the cookie storage is allowed for the channel.  Is the `userContextId` the same all the time? If yes, can you capture a log with nsHttp:5,cookie:5?  Checking browser console for errors may tell you something too. CC'ing Eh

Cookies are no longer stored by nsIHttpChannel?

2019-09-16 Thread john.bieling--- via dev-platform
Hi, I have run into something strange. This is how I create network connections in my (Thunderbird-) AddOn: let channel = Services.io.newChannelFromURI( aConnection.uri, null, Services.scriptSecurityManager.createCodebasePrincipal(aConnection.uri, { userContextId }), null, C

Re: The sec-approval process makes users safer

2019-09-16 Thread Stéphanie Ouillon
Hi, I'm taking this opportunity to share a new wiki page documenting guidelines for patching a core-security bugs: https://wiki.mozilla.org/Security/Firefox_security_bug_fixing You'll find generic security principles about handling security bugs, as well as the detailed process for fixing securit

Re: Equivalent for XMLHttpRequest.overrideMimeType() in the world of nsIHttpChannel

2019-09-16 Thread john.bieling--- via dev-platform
Perfect! Having seen that, I also found the "contentType" attribute and its description here: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIChannel which allows me to mimic the behaviour. Thanks a lot for the pointer! John _

Re: Equivalent for XMLHttpRequest.overrideMimeType() in the world of nsIHttpChannel

2019-09-16 Thread Valentin Gosu
The implementation of XMLHttpRequest.overrideMimeType() is here: https://searchfox.org/mozilla-central/rev/d1e33e3e11f559952d7d80e722d26a6cf5dd80ac/dom/xhr/XMLHttpRequestMainThread.cpp#3086-3090 You probably want to do something like this: https://searchfox.org/mozilla-central/rev/d1e33e3e11f5599