ma1 pushed to branch mullvad-browser-140.4.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 4c23bcda by Maurice Dauer at 2025-10-27T10:59:38+01:00 Bug 1419501 - Part 1: Add `dom.security.framebusting_intervention.enabled` pref, r=maltejur Differential Revision: https://phabricator.services.mozilla.com/D254677 - - - - - 7ce0fc57 by Maurice Dauer at 2025-10-27T10:59:39+01:00 Bug 1419501 - Part 2: Rename existing user-facing popup related strings, r=fluent-reviewers,bolsson,Gijs Differential Revision: https://phabricator.services.mozilla.com/D254678 - - - - - 761bfc4c by Maurice Dauer at 2025-10-27T10:59:41+01:00 Bug 1419501 - Part 3: Introduce `RedirectBlockedEvent`, r=maltejur,webidl,frontend-codestyle-reviewers,smaug Differential Revision: https://phabricator.services.mozilla.com/D254679 - - - - - 4c11c990 by Maurice Dauer at 2025-10-27T10:59:43+01:00 Bug 1419501 - Part 4: Implement framebusting intervention, r=fluent-reviewers,desktop-theme-reviewers,tabbrowser-reviewers,bolsson,edgar,mstriemer,sfoster,sthompson,emz Differential Revision: https://phabricator.services.mozilla.com/D254680 - - - - - cf17000f by Maurice Dauer at 2025-10-27T10:59:44+01:00 Bug 1419501 - Part 5: Framebusting intervention browser tests, r=maltejur,frontend-codestyle-reviewers Differential Revision: https://phabricator.services.mozilla.com/D259046 - - - - - 1386ba38 by Malte Jürgens at 2025-10-27T10:59:46+01:00 Bug 1419501 - Expand web-platform tests for preventing iframes from navigating their top window r=mdauer Differential Revision: https://phabricator.services.mozilla.com/D251179 - - - - - 73 changed files: - browser/base/content/browser-init.js - browser/base/content/browser-sitePermissionPanel.js - browser/base/content/browser.js - browser/base/content/browser.js.globals - browser/base/content/main-popupset.inc.xhtml - browser/base/content/navigator-toolbox.inc.xhtml - + browser/base/content/test/framebusting/browser.toml - + browser/base/content/test/framebusting/browser_framebusting_identity.js - + browser/base/content/test/framebusting/browser_framebusting_notification.js - + browser/base/content/test/framebusting/framebusting_intervention_frame.html - + browser/base/content/test/framebusting/framebusting_intervention_parent.html - + browser/base/content/test/framebusting/head.js - browser/base/moz.build - browser/components/enterprisepolicies/content/aboutPolicies.js - browser/components/preferences/dialogs/permissions.js - browser/components/preferences/privacy.inc.xhtml - browser/components/tabbrowser/content/tabbrowser.js - browser/locales/en-US/browser/browser.ftl - browser/locales/en-US/browser/policies/policies-descriptions.ftl - browser/locales/en-US/browser/preferences/permissions.ftl - browser/locales/en-US/browser/preferences/preferences.ftl - browser/locales/en-US/browser/sitePermissions.ftl - browser/locales/en-US/chrome/browser/sitePermissions.properties - + browser/modules/PopupAndRedirectBlockerObserver.sys.mjs - − browser/modules/PopupBlockerObserver.sys.mjs - browser/modules/SitePermissions.sys.mjs - browser/modules/moz.build - browser/modules/test/browser/browser_SitePermissions.js - browser/themes/shared/controlcenter/panel.css - docshell/base/BrowsingContext.cpp - docshell/base/BrowsingContext.h - docshell/base/nsDocShell.cpp - dom/base/Document.h - dom/base/nsGlobalWindowOuter.cpp - dom/base/nsGlobalWindowOuter.h - dom/base/nsPIDOMWindow.h - + dom/chrome-webidl/RedirectBlockedEvent.webidl - dom/chrome-webidl/moz.build - eslint-test-paths.config.mjs - modules/libpref/init/StaticPrefList.yaml - + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture.tentative.html.ini - + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture_after_failure.tentative.html.ini - + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture.tentative.html.ini - + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_nested_same_site.tentative.html.ini - + testing/web-platform/meta/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_same_site.tentative.html.ini - − testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_sandbox_allow_top_navigation_by_user_activation-manual.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_sandbox_allow_top_navigation_by_user_activation_with_user_gesture.html - testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_sandbox_allow_top_navigation_by_user_activation_without_user_gesture.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture.tentative.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_with_user_gesture_after_failure.tentative.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture.tentative.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_nested_same_site.tentative.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/iframe_top_navigation_without_user_gesture_same_site.tentative.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-child-with-user-gesture-after-failure.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-child-with-user-gesture.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-child.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-grandparent.sub.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-same-site.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-sandbox.sub.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-user-gesture-after-failure.sub.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-user-gesture-with-sandbox.sub.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent-with-user-gesture.sub.html - + testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-parent.sub.html - − testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation-without-user-gesture-failed.html - − testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/iframe-that-performs-top-navigation.html - testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/support/navigation-changed-iframe.html - + toolkit/actors/PopupAndRedirectBlockingChild.sys.mjs - + toolkit/actors/PopupAndRedirectBlockingParent.sys.mjs - − toolkit/actors/PopupBlockingChild.sys.mjs - − toolkit/actors/PopupBlockingParent.sys.mjs - toolkit/actors/moz.build - toolkit/content/widgets/browser-custom-element.mjs - toolkit/modules/ActorManagerParent.sys.mjs The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/100... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/100... You're receiving this email because of your account on gitlab.torproject.org.