ma1 pushed to branch mullvad-browser-140.4.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser

Commits:

• 4c23bcda
  by Maurice Dauer at 2025-10-27T10:59:38+01:00

  Bug 1419501 - Part 1: Add `dom.security.framebusting_intervention.enabled` pref, r=maltejur
  
  Differential Revision: https://phabricator.services.mozilla.com/D254677
  

• 7ce0fc57
  by Maurice Dauer at 2025-10-27T10:59:39+01:00

  Bug 1419501 - Part 2: Rename existing user-facing popup related strings, r=fluent-reviewers,bolsson,Gijs
  
  Differential Revision: https://phabricator.services.mozilla.com/D254678
  

• 761bfc4c
  by Maurice Dauer at 2025-10-27T10:59:41+01:00

  Bug 1419501 - Part 3: Introduce `RedirectBlockedEvent`, r=maltejur,webidl,frontend-codestyle-reviewers,smaug
  
  Differential Revision: https://phabricator.services.mozilla.com/D254679
  

• 4c11c990
  by Maurice Dauer at 2025-10-27T10:59:43+01:00

  Bug 1419501 - Part 4: Implement framebusting intervention, r=fluent-reviewers,desktop-theme-reviewers,tabbrowser-reviewers,bolsson,edgar,mstriemer,sfoster,sthompson,emz
  
  Differential Revision: https://phabricator.services.mozilla.com/D254680
  

• cf17000f
  by Maurice Dauer at 2025-10-27T10:59:44+01:00

  Bug 1419501 - Part 5: Framebusting intervention browser tests, r=maltejur,frontend-codestyle-reviewers
  
  Differential Revision: https://phabricator.services.mozilla.com/D259046
  

• 1386ba38
  by Malte Jürgens at 2025-10-27T10:59:46+01:00

  Bug 1419501 - Expand web-platform tests for preventing iframes from navigating their top window r=mdauer
  
  Differential Revision: https://phabricator.services.mozilla.com/D251179
  

73 changed files:

• browser/base/content/browser-init.js
• browser/base/content/browser-sitePermissionPanel.js
• browser/base/content/browser.js
• browser/base/content/browser.js.globals
• browser/base/content/main-popupset.inc.xhtml
• browser/base/content/navigator-toolbox.inc.xhtml
• + browser/base/content/test/framebusting/browser.toml
• + browser/base/content/test/framebusting/browser_framebusting_identity.js
• + browser/base/content/test/framebusting/browser_framebusting_notification.js
• + browser/base/content/test/framebusting/framebusting_intervention_frame.html
• + browser/base/content/test/framebusting/framebusting_intervention_parent.html
• + browser/base/content/test/framebusting/head.js
• browser/base/moz.build
• browser/components/enterprisepolicies/content/aboutPolicies.js
• browser/components/preferences/dialogs/permissions.js
• browser/components/preferences/privacy.inc.xhtml
• browser/components/tabbrowser/content/tabbrowser.js
• browser/locales/en-US/browser/browser.ftl
• browser/locales/en-US/browser/policies/policies-descriptions.ftl
• browser/locales/en-US/browser/preferences/permissions.ftl
• browser/locales/en-US/browser/preferences/preferences.ftl
• browser/locales/en-US/browser/sitePermissions.ftl
• browser/locales/en-US/chrome/browser/sitePermissions.properties
• + browser/modules/PopupAndRedirectBlockerObserver.sys.mjs
• − browser/modules/PopupBlockerObserver.sys.mjs
• browser/modules/SitePermissions.sys.mjs
• browser/modules/moz.build
• browser/modules/test/browser/browser_SitePermissions.js
• browser/themes/shared/controlcenter/panel.css
• docshell/base/BrowsingContext.cpp
• docshell/base/BrowsingContext.h
• docshell/base/nsDocShell.cpp
• dom/base/Document.h
• dom/base/nsGlobalWindowOuter.cpp
• dom/base/nsGlobalWindowOuter.h
• dom/base/nsPIDOMWindow.h
• + dom/chrome-webidl/RedirectBlockedEvent.webidl
• dom/chrome-webidl/moz.build
• eslint-test-paths.config.mjs
• modules/libpref/init/StaticPrefList.yaml
• + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture.tentative.html.ini
• + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture_after_failure.tentative.html.ini
• + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture.tentative.html.ini
• + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_nested_same_site.tentative.html.ini
• + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_same_site.tentative.html.ini
• − testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_sandbox_allow_top_navigation_by_user_activation-manual.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_sandbox_allow_top_navigation_by_user_activation_with_user_gesture.html
• testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_sandbox_allow_top_navigation_by_user_activation_without_user_gesture.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture.tentative.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture_after_failure.tentative.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture.tentative.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_nested_same_site.tentative.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_same_site.tentative.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-child-with-user-gesture-after-failure.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-child-with-user-gesture.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-child.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-grandparent.sub.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-same-site.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-sandbox.sub.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-user-gesture-after-failure.sub.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-user-gesture-with-sandbox.sub.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-user-gesture.sub.html
• + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent.sub.html
• − testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-without-user-gesture-failed.html
• − testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation.html
• testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/navigation-changed-iframe.html
• + toolkit/actors/PopupAndRedirectBlockingChild.sys.mjs
• + toolkit/actors/PopupAndRedirectBlockingParent.sys.mjs
• − toolkit/actors/PopupBlockingChild.sys.mjs
• − toolkit/actors/PopupBlockingParent.sys.mjs
• toolkit/actors/moz.build
• toolkit/content/widgets/browser-custom-element.mjs
• toolkit/modules/ActorManagerParent.sys.mjs

The diff was not included because it is too large.