ma1 pushed to branch mullvad-browser-140.11.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser

Commits:

• 80d06be5
  by Paul Adenot at 2026-05-18T21:35:27+02:00

  Bug 2021222 - Cancel SpeechSynthesis when the page navigates away. r=eeejay
  
  Override DisconnectFromOwner, which is called during navigation, to cancel any
  ongoing or queued speech utterances.
  
  Differential Revision: https://phabricator.services.mozilla.com/D290201
  

• 01b0cbdc
  by Valentin Gosu at 2026-05-18T21:35:29+02:00

  Bug 2023943 - Make CookieNotification::GetOperation ID clone the ID r=baku,cookie-reviewers
  
  Differential Revision: https://phabricator.services.mozilla.com/D288379
  

• 63f596ee
  by Valentin Gosu at 2026-05-18T21:35:30+02:00

  Bug 2024244 - Make socket transport hold a reference to TLSServerConnectionInfo r=necko-reviewers,kershaw
  
  Differential Revision: https://phabricator.services.mozilla.com/D290394
  

• 7cf0eb67
  by Kershaw Chang at 2026-05-18T21:35:32+02:00

  Bug 2024260 - nsRequestObserverProxy cleanup, r=necko-reviewers,valentin
  
  Differential Revision: https://phabricator.services.mozilla.com/D290376
  

• fca37cac
  by Tom Schuster at 2026-05-18T21:35:33+02:00

  Bug 2024443 - Make CryptoKey::GetAlgorithm more idiomatic. r=nkulatova
  
  Differential Revision: https://phabricator.services.mozilla.com/D290392
  

• 5f995e1a
  by Jan Grulich at 2026-05-18T21:35:35+02:00

  Bug 2029894 - WebRTC backport: Fix double mapoffset application in PipeWire video capture  a=dmeehan
  
  mmap() with mapoffset as the file offset already returns a pointer to
  the data at that offset, so passing it again to SPA_MEMBER was reading
  mapoffset bytes past the mapped region. Also queue the buffer back to
  PipeWire before returning on mmap failure to avoid leaking it.
  
  This is a simple backport of an WebRTC upstream change.
  
  Upstream commit: 9ee59b4ab343540923a23edd6429064c22571c3b
  
  Original Revision: https://phabricator.services.mozilla.com/D296761
  
  Differential Revision: https://phabricator.services.mozilla.com/D297303
  

• 6b0d13c9
  by Emilio Cobos Álvarez at 2026-05-18T21:35:36+02:00

  Bug 2025968 - Don't allow fragmenting a MiddleCroppingBlockFrame. r=layout-reviewers,dshin
  
  This requires multicol and XUL (see prefs). But anyways easy to fix.
  
  Differential Revision: https://phabricator.services.mozilla.com/D289644
  

• 444c50fe
  by Dana Keeler at 2026-05-18T21:35:38+02:00

  Bug 2027310 - improve thread coordination in ShowProtectedAuthPrompt r=jschanck
  
  Differential Revision: https://phabricator.services.mozilla.com/D291021
  

• 8e4070f1
  by James Teh at 2026-05-18T21:35:39+02:00

  Bug 2027308: Fix handling of empty text leaves.  a=dmeehan
  
  Original Revision: https://phabricator.services.mozilla.com/D294876
  
  Differential Revision: https://phabricator.services.mozilla.com/D296555
  

• f6545c51
  by Justin Link at 2026-05-18T21:35:41+02:00

  Bug 2028274: Removed incorrect CloseHandle() in ~KeyWatcher() and also ensure that no in-flight callbacks are still going to fire r=win-reviewers,gstoll
  
  Differential Revision: https://phabricator.services.mozilla.com/D291328
  

• 6384e83a
  by Randell Jesup at 2026-05-18T21:35:42+02:00

  Bug 2024665: Make nsIReplacedHttpResponse non-scriptable r=necko-reviewers,valentin
  
  Differential Revision: https://phabricator.services.mozilla.com/D288719
  

• e8feca10
  by Rob Wu at 2026-05-18T21:35:44+02:00

  Bug 1940116 - Ignore clicks shortly after extension popup closes r=rpl,Gijs
  
  Differential Revision: https://phabricator.services.mozilla.com/D288887
  

• aefd2c7d
  by Maurice Dauer at 2026-05-18T21:35:45+02:00

  Bug 2025170 - Pass correct report index for blocked popups, r=emz
  
  Differential Revision: https://phabricator.services.mozilla.com/D290850
  

• ecc5dc9d
  by Edgar Chen at 2026-05-18T21:35:47+02:00

  Bug 2025346 - Create RemoteObjectProxy properly; r=smaug
  
  Differential Revision: https://phabricator.services.mozilla.com/D293507
  

• e44241ce
  by Randell Jesup at 2026-05-18T21:35:49+02:00

  Bug 2025434: Return early in ClearKey r=media-playback-reviewers,padenot
  
  Differential Revision: https://phabricator.services.mozilla.com/D289646
  

• 549b8fc4
  by Lee Salzman at 2026-05-18T21:35:51+02:00

  Bug 2025877. r=gfx-reviewers,bradwerth
  
  Differential Revision: https://phabricator.services.mozilla.com/D293720
  

• 51284f96
  by Valentin Gosu at 2026-05-18T21:35:52+02:00

  Bug 2025888 - Make IncrementalTokenizer read entire buffer r=necko-reviewers,jesup
  
  Differential Revision: https://phabricator.services.mozilla.com/D290085
  

• 70dbb314
  by Jens Stutte at 2026-05-18T21:35:54+02:00

  Bug 2025942 - Fix off-by-one in a LogModuleManager::PrintFmt check. r=xpcom-reviewers,emilio
  
  Differential Revision: https://phabricator.services.mozilla.com/D290099
  

• 215b380c
  by Tooru Fujisawa at 2026-05-18T21:35:56+02:00

  Bug 2025947 - Check data corruption in script decompression. r=bthrall
  
  Differential Revision: https://phabricator.services.mozilla.com/D290360
  

• 6f4394c7
  by Iain Ireland at 2026-05-18T21:35:57+02:00

  Bug 2027276: Use size_t when inflating UTF8 r=spidermonkey-reviewers,sfink
  
  Differential Revision: https://phabricator.services.mozilla.com/D291002
  

• 2e297634
  by Matthew Gregan at 2026-05-18T21:35:59+02:00

  Bug 2029281 - Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74.  r=cubeb-reviewers,pehrsons
  
  Differential Revision: https://phabricator.services.mozilla.com/D292234
  

• 66d05327
  by Tom Schuster at 2026-05-18T21:36:01+02:00

  Bug 2030385 - Fix non-contiguous nsIContentAnalysisResponse::Action serializer. r=dlp-reviewers,gstoll
  
  Differential Revision: https://phabricator.services.mozilla.com/D293519
  

• d2dfb405
  by Randell Jesup at 2026-05-18T21:36:02+02:00

  Bug 2032604: Check Jar entry names for nulls  a=dmeehan
  
  Original Revision: https://phabricator.services.mozilla.com/D295451
  
  Differential Revision: https://phabricator.services.mozilla.com/D297033
  

42 changed files:

• accessible/base/TextLeafRange.cpp
• browser/base/content/test/popups/browser_popup_blocker.js
• browser/components/extensions/ExtensionPopups.sys.mjs
• browser/components/extensions/test/browser/browser.toml
• + browser/components/extensions/test/browser/browser_ext_popup_after_close.js
• browser/modules/PopupAndRedirectBlockerObserver.sys.mjs
• dom/bindings/RemoteObjectProxy.cpp
• dom/canvas/OffscreenCanvasDisplayHelper.cpp
• dom/cookiestore/CookieStoreNotificationWatcher.cpp
• dom/crypto/CryptoKey.cpp
• dom/crypto/KeyAlgorithmProxy.h
• dom/ipc/ContentParent.cpp
• dom/media/eme/clearkey/ClearKeyBase64.cpp
• dom/media/webspeech/synth/SpeechSynthesis.cpp
• dom/media/webspeech/synth/SpeechSynthesis.h
• + dom/media/webspeech/synth/test/file_speech_cancel_on_navigation_page1.html
• + dom/media/webspeech/synth/test/file_speech_cancel_on_navigation_page2.html
• dom/media/webspeech/synth/test/mochitest.toml
• + dom/media/webspeech/synth/test/test_speech_cancel_on_navigation.html
• dom/script/ScriptCompression.cpp
• js/src/vm/CharacterEncoding.cpp
• layout/generic/MiddleCroppingBlockFrame.cpp
• media/libcubeb/moz.yaml
• media/libcubeb/src/cubeb_jack.cpp
• modules/libjar/nsJARChannel.cpp
• netwerk/base/TLSServerSocket.cpp
• netwerk/base/nsRequestObserverProxy.cpp
• netwerk/base/nsSocketTransport2.cpp
• netwerk/base/nsSocketTransport2.h
• netwerk/cookie/CookieNotification.cpp
• netwerk/protocol/http/nsIReplacedHttpResponse.idl
• security/manager/ssl/nsNSSCallbacks.cpp
• third_party/libwebrtc/modules/video_capture/linux/video_capture_pipewire.cc
• + third_party/libwebrtc/moz-patch-stack/9ee59b4ab3.no-op-cherry-pick-msg
• toolkit/actors/PopupAndRedirectBlockingChild.sys.mjs
• toolkit/actors/PopupAndRedirectBlockingParent.sys.mjs
• toolkit/components/contentanalysis/ContentAnalysisIPCTypes.h
• toolkit/components/contentanalysis/nsIContentAnalysis.idl
• widget/windows/WinRegistry.cpp
• xpcom/base/Logging.cpp
• xpcom/ds/IncrementalTokenizer.cpp
• xpcom/ds/IncrementalTokenizer.h

The diff was not included because it is too large.