ma1 pushed to branch tor-browser-140.12.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 9ff8a03c by Sebastian Hengst at 2026-07-14T07:40:40+02:00 Bug 2046256 - extend web-platform-tests test certificates until 2027-05-11. r=Sasha,jgraham a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D305756 - - - - - 8b50b981 by Release Engineering Landoscript at 2026-07-14T07:40:45+02:00 Automatic version bump NO BUG a=release CLOSED TREE - - - - - ef5a3a9e by Release Engineering Landoscript at 2026-07-14T07:40:47+02:00 No Bug - Update configs after merge day operations a=release IGNORE BROKEN CHANGESETS CLOSED TREE - - - - - fea82c0d by Nicholas Rishel at 2026-07-14T07:40:48+02:00 Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D277134 Differential Revision: https://phabricator.services.mozilla.com/D305398 - - - - - 46c5c619 by rperta at 2026-07-14T07:40:49+02:00 Revert "Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM" for causing build bustages DONTBUILD This reverts commit 7fb19cd315c5b13d32fda38234fa1fd0efa06df6. - - - - - 698df278 by Andrea Marchesini at 2026-07-14T07:40:50+02:00 Bug 2027788 - Ignore the distribution ini file if its global.id is mozillaonline, a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D305913 - - - - - 4d6acd89 by Emilio Cobos Álvarez at 2026-07-14T07:40:52+02:00 Bug 2046162 - Remove some redundant pub qualifiers. a=RyanVM DONTBUILD The enum is not public so this doesn't change behavior but a patch I'm working on in cbindgen gets a bit confused with this. Original Revision: https://phabricator.services.mozilla.com/D305678 Differential Revision: https://phabricator.services.mozilla.com/D305831 - - - - - dc80e72b by Andrew Osmond at 2026-07-14T07:40:53+02:00 Bug 2045730. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305642 Differential Revision: https://phabricator.services.mozilla.com/D305722 - - - - - 54969f84 by Alastor Wu at 2026-07-14T07:40:54+02:00 Bug 2043739 - (esr140) Adjust CDM lifetime handling in the Media Foundation CDM IPC path. a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D306517 - - - - - 3ac27d2d by Alastor Wu at 2026-07-14T07:40:55+02:00 Bug 2045281 - Use the decoded frame format for ffmpeg video chroma plane geometry. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305741 Differential Revision: https://phabricator.services.mozilla.com/D306247 - - - - - bec43ad4 by Leo Tenenbaum at 2026-07-14T07:40:56+02:00 Bug 2045732 - a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305347 Differential Revision: https://phabricator.services.mozilla.com/D306136 - - - - - fd126b78 by Brad Werth at 2026-07-14T07:40:57+02:00 Bug 2040119: Enforce ownership of external image in WebRenderBridgeParent::UpdateSharedExternalImage. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D304923 Differential Revision: https://phabricator.services.mozilla.com/D306193 - - - - - 29082b2d by Valentin Gosu at 2026-07-14T07:40:58+02:00 Bug 2036591 - Use origin attributes in FailDelayManager a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D304395 Differential Revision: https://phabricator.services.mozilla.com/D306416 - - - - - 69e8bb62 by ffxbld at 2026-07-14T07:40:59+02:00 No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D306766 - - - - - bea5df97 by Tim Huang at 2026-07-14T07:41:00+02:00 Bug 2038587 - Introduce "wsb" to the application reputation check. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D301066 Differential Revision: https://phabricator.services.mozilla.com/D306933 - - - - - c28b2c3d by Emilio Cobos Álvarez at 2026-07-14T07:41:01+02:00 Bug 2045616 - Fix CharacterDataBuffer OOM handling. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305165 Differential Revision: https://phabricator.services.mozilla.com/D306945 - - - - - 49cda768 by Emilio Cobos Álvarez at 2026-07-14T07:41:02+02:00 Bug 2045413 - Deal correctly with <area> element removals. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305124 Differential Revision: https://phabricator.services.mozilla.com/D306939 - - - - - 78769f56 by Bob Owen at 2026-07-14T07:41:03+02:00 Bug 2045769 - Check required snapshot shmem size against actual size. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D305707 Differential Revision: https://phabricator.services.mozilla.com/D306972 - - - - - 7d10c341 by Tooru Fujisawa at 2026-07-14T07:41:04+02:00 Bug 2013415 - Use b-linux-docker-large-amd for searchfox jobs. r=ahal a=NPOTB DONTBUILD This reduces the time taken by the linux64-searchfox job from 113min to 53min. Differential Revision: https://phabricator.services.mozilla.com/D283000 - - - - - 03d03ebe by Ryan VanderMeulen at 2026-07-14T07:41:05+02:00 Bug 2013415 - Add b-linux-docker-large-amd worker alias to esr140 config. a=bustage DONTBUILD - - - - - c4e2ebe4 by Ryan VanderMeulen at 2026-07-14T07:41:06+02:00 Bug 2013415 - Use docker-worker implementation for b-linux-docker-large-amd alias. a=bustage DONTBUILD - - - - - 7863fb5a by Nicholas Rishel at 2026-07-14T07:41:07+02:00 Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D277134 Differential Revision: https://phabricator.services.mozilla.com/D305398 - - - - - bbc716d6 by Tom Schuster at 2026-07-14T07:41:08+02:00 Bug 2044612 - Use ClientInfo for font loading in Worker. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305486 Differential Revision: https://phabricator.services.mozilla.com/D307286 - - - - - 0b5660f5 by Tom Schuster at 2026-07-14T07:41:09+02:00 Bug 2041902 - For WebTransport require a ClientInfo. . a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305171 Differential Revision: https://phabricator.services.mozilla.com/D307271 - - - - - b8db7029 by Alastor Wu at 2026-07-14T07:41:10+02:00 Bug 2045756 - Skip a renderer-referenced surface when matching by FFmpeg id in FFmpegVideoFramePool a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305429 Differential Revision: https://phabricator.services.mozilla.com/D307086 - - - - - 81ad8910 by Timothy Nikkel at 2026-07-14T07:41:11+02:00 Bug 2045624. a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D306891 - - - - - 9103d7f8 by Masayuki Nakano at 2026-07-14T07:41:12+02:00 Bug 2045405 - Improve the error handling in `PresShell::CompleteMove` a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305544 Differential Revision: https://phabricator.services.mozilla.com/D307163 - - - - - 9e14fc50 by Timothy Nikkel at 2026-07-14T07:41:13+02:00 Bug 2045614. a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D306900 - - - - - 4ceae3b0 by Lee Salzman at 2026-07-14T07:41:14+02:00 Bug 2045625. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D305785 Differential Revision: https://phabricator.services.mozilla.com/D307126 - - - - - 54e2a23a by Lee Salzman at 2026-07-14T07:41:15+02:00 Bug 2045185. a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D307130 - - - - - 825e17b1 by Edgar Chen at 2026-07-14T07:41:16+02:00 Bug 2045513 - Make parser update form owner properly; a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305669 Differential Revision: https://phabricator.services.mozilla.com/D307295 - - - - - 54ff5613 by az at 2026-07-14T07:41:17+02:00 Bug 2045742 - a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305387 Differential Revision: https://phabricator.services.mozilla.com/D307110 - - - - - 10efbdd3 by Andrew McCreight at 2026-07-14T07:41:18+02:00 Bug 2048110 - Add remoteTypes to AboutTabCrashed, LightweightTheme, Megalist. a=RyanVM DONTBUILD These are only used in a few specific processes. Original Revision: https://phabricator.services.mozilla.com/D307152 Differential Revision: https://phabricator.services.mozilla.com/D307574 - - - - - 0f7666a9 by Leo Tenenbaum at 2026-07-14T07:41:19+02:00 Bug 2047718 - Check for unexpected DOM changes in more places in EnsureNoInvisibleWhiteSpaces. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D306863 Differential Revision: https://phabricator.services.mozilla.com/D307559 - - - - - 81f45631 by Brad Werth at 2026-07-14T07:41:20+02:00 Bug 2045184: Make SharedContextWebgl destructor prevent resurrection. a=RyanVM Detaching the WeakPtr early prevents the object from being AddRef'ed by anything later in the destructor. Original Revision: https://phabricator.services.mozilla.com/D305720 Differential Revision: https://phabricator.services.mozilla.com/D307604 - - - - - 732e7f65 by Ryan VanderMeulen at 2026-07-14T07:41:21+02:00 Bug 2045185 - Fix bustage from stride type mismatch. a=bustage stride is a plain size_t on esr140 (GetAlignedStride's Maybe<> return type was never backported), so the .value() call from the backport fails to compile. - - - - - f7c818b1 by Eden Chuang at 2026-07-14T07:41:22+02:00 Bug 2005113 - Bind FetchBodyBase::mReadableStream to the body stream and rebind it on clone(). . a=RyanVM DONTBUILD Create the body ReadableStream from the underlying body input stream directly. When clone() is called before the stream has been read and the underlying body is not cloneable, clone() replaces the original input stream; repoint the existing unread native ReadableStream at the replacement so the original stream is not read from two places. This keeps native bodies native (cancellation of an unread stream still tears down the channel, and the consume path keeps reading the body input stream directly) without teeing native byte streams. This no longer clones the body when creating the ReadableStream, so it does not buffer the whole body; restore the huge-fetch crashtest expectations that were disabled to avoid OOMing the 32-bit process. Original Revision: https://phabricator.services.mozilla.com/D280568 (cherry picked from commit 38e360c0d435c4bd9b0e45b207877610506433f3) Differential Revision: https://phabricator.services.mozilla.com/D307754 - - - - - bde78cad by Alastor Wu at 2026-07-14T07:41:23+02:00 Bug 2045424 - (esr140) Constrain the per-sample IV size in the CENC parser and ClearKey decryptor. a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D307384 - - - - - 0d5cda16 by Alastor Wu at 2026-07-14T07:41:24+02:00 Bug 2045395 - (esr140) Use checked arithmetic for the interleave buffer length in AudioDecoderInputTrack a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D307385 - - - - - f07e254d by Shravan Narayan at 2026-07-14T07:41:25+02:00 Bug 2045149 - Fix rlbox's unnecessary rejection of unaligned transfer buffers a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D307194 Differential Revision: https://phabricator.services.mozilla.com/D307859 - - - - - 40a38de4 by ffxbld at 2026-07-14T07:41:26+02:00 No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings ct-logs - a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D308004 - - - - - 2ae11c90 by Jonathan Kew at 2026-07-14T07:41:28+02:00 Bug 2045378 - Validate font descriptor in UnscaledFontFontconfig::CreateFromFontDescriptor. a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305662 Differential Revision: https://phabricator.services.mozilla.com/D308002 - - - - - ee07db4d by Jonathan Kew at 2026-07-14T07:41:29+02:00 Bug 2045771 - Validate kern subtable length. a=pascalc DONTBUILD As suggested by clauditor. Original Revision: https://phabricator.services.mozilla.com/D306160 Differential Revision: https://phabricator.services.mozilla.com/D307998 - - - - - 8bfb3ee8 by Jan-Niklas Jaeschke at 2026-07-14T07:41:29+02:00 Bug 2045402 - Refactor CrossShadowBoundaryRange::DoSetRange. a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305276 Differential Revision: https://phabricator.services.mozilla.com/D308085 - - - - - 9930ca0c by Ben Visness at 2026-07-14T07:41:31+02:00 Bug 2043271. a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D306329 Differential Revision: https://phabricator.services.mozilla.com/D308069 - - - - - ba76e147 by Henri Sivonen at 2026-07-14T07:41:31+02:00 Bug 2045417. a=pascalc Original Revision: https://phabricator.services.mozilla.com/D305108 Differential Revision: https://phabricator.services.mozilla.com/D307995 - - - - - 046b2007 by Timothy Nikkel at 2026-07-14T07:41:33+02:00 Bug 2045775. a=pascalc DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D307939 - - - - - 9e8a90ef by Jonathan Kew at 2026-07-14T07:41:34+02:00 Bug 2045612 - Take ownership of the state in RestoreFormControlState. a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307613 Differential Revision: https://phabricator.services.mozilla.com/D307827 - - - - - d172f7de by David Shin at 2026-07-14T07:41:35+02:00 Bug 2045611: a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307076 Differential Revision: https://phabricator.services.mozilla.com/D307776 - - - - - 3e7ee821 by Tomislav Jovanovic at 2026-07-14T07:41:36+02:00 Bug 2048267 - Enable WebExtensions WPT tests on ESR140 a=pascalc Original Revision: https://phabricator.services.mozilla.com/D307614 Differential Revision: https://phabricator.services.mozilla.com/D307920 - - - - - b8fc453c by Matthew Gregan at 2026-07-14T07:41:37+02:00 Bug 2042033 - Update audioipc to 3f0d4aef7a2c06b0146384592b312a7f47ab7cea. a=pascalc DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D307454 - - - - - ab647faa by Jan de Mooij at 2026-07-14T07:41:38+02:00 Bug 2045957 - Initialize BaselineFrame return value slot in OnLeaveBaselineFrame. a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305464 Differential Revision: https://phabricator.services.mozilla.com/D307470 - - - - - 146910a7 by Andrew Osmond at 2026-07-14T07:41:39+02:00 Bug 2045187. a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305653 Differential Revision: https://phabricator.services.mozilla.com/D305719 - - - - - 876d8492 by Justin Link at 2026-07-14T07:41:40+02:00 Bug 2028663: Fixed error-checking in WinRegistry a=pascalc DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D291621 Differential Revision: https://phabricator.services.mozilla.com/D308307 - - - - - c85fb073 by Julien Cristau at 2026-07-14T07:41:41+02:00 Bug 2048897 - fix update-verify-config failures on esr for win64-aarch64 DONTBUILD a=RyanVM That platform was discontinued on esr115 which confuses our scripts. Set last-watershed to 140.0esr to bypass the issue. Original Revision: https://phabricator.services.mozilla.com/D307745 Differential Revision: https://phabricator.services.mozilla.com/D307844 - - - - - e34c5c9a by Randell Jesup at 2026-07-14T07:41:42+02:00 Bug 2031768: Validate Principals in CookieStore a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D294473 Differential Revision: https://phabricator.services.mozilla.com/D308285 - - - - - f4a4901a by Kai Engert at 2026-07-14T07:41:43+02:00 Bug 2013230 - Use strnlen in mozilla::PrintfTarget::cvt_s. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D280910 Differential Revision: https://phabricator.services.mozilla.com/D308438 - - - - - 6d7ef56b by Masayuki Nakano at 2026-07-14T07:41:44+02:00 Bug 2045619 - Make `CompositionTransaction::DoTransaction` scan the replace start position as far as possible a=RyanVM DONTBUILD The replace start may be in the following `Text`. Therefore, we should scan the following `Text` before inserting the new composition string. Original Revision: https://phabricator.services.mozilla.com/D305783 Differential Revision: https://phabricator.services.mozilla.com/D307458 - - - - - 8e407fb3 by Emilio Cobos Álvarez at 2026-07-14T07:41:45+02:00 Bug 2045406 - Validate end of cff dict. a=RyanVM DONTBUILD Sent upstream in https://gitlab.freedesktop.org/cairo/cairo/-/work_items/967 Original Revision: https://phabricator.services.mozilla.com/D305850 Differential Revision: https://phabricator.services.mozilla.com/D307732 - - - - - 14d9f416 by Emilio Cobos Álvarez at 2026-07-14T07:41:46+02:00 Bug 2045406 - Check cff dict operator / operand sizes. a=RyanVM DONTBUILD Missed this one from the AI report. Also submitted upstream. Original Revision: https://phabricator.services.mozilla.com/D306885 Differential Revision: https://phabricator.services.mozilla.com/D307733 - - - - - 05fc875f by Jonathan Kew at 2026-07-14T07:41:47+02:00 Bug 2045518 - Ensure gfxFontEntry's mFamilyName field is guarded by mLock. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305176 Differential Revision: https://phabricator.services.mozilla.com/D307514 - - - - - 1f7385e0 by Andreas Farre at 2026-07-14T07:41:48+02:00 Bug 2045618 - Make sure to consider idle timeouts when getting id. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305582 Differential Revision: https://phabricator.services.mozilla.com/D308000 - - - - - 9599e496 by Jon Coppeard at 2026-07-14T07:41:49+02:00 Bug 2045451 - Prevent allocation of object elemets abutting the end of a nursery chunk a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305804 Differential Revision: https://phabricator.services.mozilla.com/D307781 - - - - - 5376770a by Jan de Mooij at 2026-07-14T07:41:50+02:00 Bug 2045454 - Clamp length of regexp captures array for dollar substitution. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D305181 Differential Revision: https://phabricator.services.mozilla.com/D307473 - - - - - 9c204e29 by Ryan VanderMeulen at 2026-07-14T07:41:51+02:00 Bug 2045518 - Use FamilyName() accessor in CacheFont's assertion to fix thread-safety bustage. a=bustage The backport missed converting one direct mFamilyName access in the NS_ASSERTION at the top of UserFontCache::CacheFont, breaking debug builds under -Wthread-safety-analysis. - - - - - 50758141 by Emilio Cobos Álvarez at 2026-07-14T07:41:52+02:00 Bug 2045604 - Don't leak the static doc via the relevant global of the context. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D306772 Differential Revision: https://phabricator.services.mozilla.com/D307727 - - - - - 04ded981 by Julian Descottes at 2026-07-14T07:41:53+02:00 Bug 2027519 - [devtools] Use the real source url for sourcemap resolution a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D304524 Differential Revision: https://phabricator.services.mozilla.com/D308464 - - - - - 81d1572b by Calixte Denizet at 2026-07-14T07:41:54+02:00 Bug 2037770 - Honor iframe sandbox flags when handling pdf.js downloads a=RyanVM DONTBUILD Cherry pick pdf.js changes from https://github.com/mozilla/pdf.js/commit/ece1e2ed0c58eb9641da33259d958fa9122.... Differential Revision: https://phabricator.services.mozilla.com/D308475 - - - - - 8c8d8c90 by Lee Salzman at 2026-07-14T07:41:55+02:00 Bug 2047729. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307935 Differential Revision: https://phabricator.services.mozilla.com/D308335 - - - - - 10a802fa by Lee Salzman at 2026-07-14T07:41:56+02:00 Bug 2045741. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D306315 Differential Revision: https://phabricator.services.mozilla.com/D308338 - - - - - 97899148 by James Teh at 2026-07-14T07:41:57+02:00 Bug 2047957: Ensure cached line start offsets are valid. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307467 Differential Revision: https://phabricator.services.mozilla.com/D308429 - - - - - 1c6274b0 by Valentin Gosu at 2026-07-14T07:41:59+02:00 Bug 2048934 - Make mInVisitHeaders checks reentrant a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D308013 Differential Revision: https://phabricator.services.mozilla.com/D308471 - - - - - 907647ec by André Bargull at 2026-07-14T07:42:00+02:00 Bug 2045482: Align with hasSpaceForInsts to simplify test case. r=jandem a=RyanVM DONTBUILD Align with `hasSpaceForInsts` so the test case doesn't need to emit thirty additional nop instructions. Differential Revision: https://phabricator.services.mozilla.com/D306374 - - - - - 15aca0de by Julian Seward at 2026-07-14T07:42:01+02:00 Bug 2043035. . a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D303979 Differential Revision: https://phabricator.services.mozilla.com/D308724 - - - - - 7e1c0edf by Jonathan Kew at 2026-07-14T07:42:02+02:00 Bug 2045607 - Hold a strong ref during GetFontAt lookup. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307564 Differential Revision: https://phabricator.services.mozilla.com/D308506 - - - - - f194a890 by Olli Pettay at 2026-07-14T07:42:03+02:00 Bug 2045515, avoid leaking a slot, a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305076 Differential Revision: https://phabricator.services.mozilla.com/D308743 - - - - - 44108423 by Julian Seward at 2026-07-14T07:42:04+02:00 Bug 2045443. . a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D305869 Differential Revision: https://phabricator.services.mozilla.com/D308729 - - - - - e0586f98 by Olli Pettay at 2026-07-14T07:42:05+02:00 Bug 2045414, be consistent with the promise resolve/reject handling, a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D306588 Differential Revision: https://phabricator.services.mozilla.com/D308735 - - - - - 59a449f0 by Jan-Niklas Jaeschke at 2026-07-14T07:42:06+02:00 Bug 2049404 - Remove unused method from nsINode, add mainthread checks. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308201 Differential Revision: https://phabricator.services.mozilla.com/D308748 - - - - - d5135616 by James Teh at 2026-07-14T07:42:07+02:00 Bug 2047716: Ensure cache is valid. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307466 Differential Revision: https://phabricator.services.mozilla.com/D308698 - - - - - 43ccbf85 by longsonr at 2026-07-14T07:42:08+02:00 Bug 2049407 Part 1 - Detach observers on canvas destruction a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D308288 Differential Revision: https://phabricator.services.mozilla.com/D308731 - - - - - bac95fcc by Daniel Darnell at 2026-07-14T07:42:09+02:00 Bug 2005200 - Make Thunderbird langpacks depend on correct Thunderbird epoch. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305463 Differential Revision: https://phabricator.services.mozilla.com/D309200 - - - - - 4d412f5c by Mike Hommey at 2026-07-14T07:42:10+02:00 Bug 2029761 - Handle large values returned by strnlen as an error. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D303290 Differential Revision: https://phabricator.services.mozilla.com/D308936 - - - - - 700cd4fd by Ryan VanderMeulen at 2026-07-14T07:42:11+02:00 Bug 2048062 - Run apt-get update before installing build deps in the debian-packages image. a=diannaS The ubuntu2404 raw image pins an apt snapshot for reproducibility, and the package lists from the parent image aren't usable in the debian-packages child, so apt-get install fails to locate any package. Refresh the lists first. The snapshot pin is inherited by the child image, so the resolved package versions are unchanged. Original Revision: https://phabricator.services.mozilla.com/D307183 Differential Revision: https://phabricator.services.mozilla.com/D308925 - - - - - ed967fe1 by Edgar Chen at 2026-07-14T07:42:12+02:00 Bug 2046215 - Associate image elements with form only if the form and the intended parent are in the same tree; a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305733 Differential Revision: https://phabricator.services.mozilla.com/D309120 - - - - - bde0ab88 by Alastor Wu at 2026-07-14T07:42:13+02:00 Bug 2045508 - Reset the create-promise id once the create promise settles in MediaKeys. a=RyanVM (esr140) DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D308879 - - - - - e4b3238b by Brad Werth at 2026-07-14T07:42:14+02:00 Bug 2045626: Compute range of convolve filter in integer domain. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308096 Differential Revision: https://phabricator.services.mozilla.com/D309197 - - - - - 3dfca483 by Artur Iunusov at 2026-07-14T07:42:15+02:00 Bug 2045397 - Cancel the network channel when failing a cached worker script load a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307328 Differential Revision: https://phabricator.services.mozilla.com/D308528 - - - - - 2c22e70c by Andrew McCreight at 2026-07-14T07:42:15+02:00 Bug 2049523 - Make ToJSValue for float consistent with double. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D308323 Differential Revision: https://phabricator.services.mozilla.com/D308559 - - - - - 2cc56156 by Lee Salzman at 2026-07-14T07:42:17+02:00 Bug 2049822. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308391 Differential Revision: https://phabricator.services.mozilla.com/D308818 - - - - - b934ab2f by Lee Salzman at 2026-07-14T07:42:18+02:00 Bug 2025369. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308172 Differential Revision: https://phabricator.services.mozilla.com/D309240 - - - - - 86792242 by Lee Salzman at 2026-07-14T07:42:19+02:00 Bug 2050151. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308694 Differential Revision: https://phabricator.services.mozilla.com/D309242 - - - - - 71d1a84f by Chun-Min Chang at 2026-07-14T07:42:20+02:00 Bug 2045415 - Harden buffer sizing in Web Audio decoding a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D309159 - - - - - fc3a13e0 by Lee Salzman at 2026-07-14T07:42:21+02:00 Bug 2049805. a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D308859 - - - - - ba3108fa by ffxbld at 2026-07-14T07:42:23+02:00 No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D309303 - - - - - 07d0b96a by Sotaro Ikeda at 2026-07-14T07:42:24+02:00 Bug 2049818 a=pascalc Signed-off-by: Pascal Chevrel <pascal@mozilla.com> - - - - - cf8169e5 by Ryan VanderMeulen at 2026-07-14T07:42:25+02:00 Bug 2051165 - Move ub18 package sources off launchpad.net URLs r=firefox-build-system-reviewers,sergesanspaille a=diannaS Differential Revision: https://phabricator.services.mozilla.com/D309272 - - - - - e479b581 by Simon Farre at 2026-07-14T07:42:26+02:00 Bug 2045396 - Abort parser that otherwise could trigger the running of script when it shouldn't a=RyanVM DONTBUILD Only <embed> and <object> teardown seem to finalize parsing, and circumvent script-safety-aware checks which can trigger script running like the bug displays. nsParser::Terminate is eventually called via nsDocShell::Destroy() also, but this way we ensure the above doesn't happen, provided that NS_BINDING_ABORTED is passed in. Original Revision: https://phabricator.services.mozilla.com/D305221 Differential Revision: https://phabricator.services.mozilla.com/D309304 - - - - - 379ba586 by Valentin Gosu at 2026-07-14T07:42:27+02:00 Bug 2041001 - Drop intermediary HTTPS result when following alias a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308991 Differential Revision: https://phabricator.services.mozilla.com/D309322 - - - - - a0b67044 by Vincent Hilla at 2026-07-14T07:42:28+02:00 Bug 2043820 - Reject javascript URI in nsDocShellLoadState. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D305829 Differential Revision: https://phabricator.services.mozilla.com/D309583 - - - - - 6175a8b0 by Karl Tomlinson at 2026-07-14T07:42:29+02:00 Bug 2042242 Start fallback driver after queuing cubeb stream init a=RyanVM This keeps cubeb operations in order and means that no other thread runs the graph while mStreamName is passed to the cubeb operation thread. MaybeStartAudioStream() no longer uses Start() to queue the stream init, because it does not need to and removing this caller allows Start() to more simply handle its remaining use cases. MaybeStartAudioStream() never starts a fallback driver nor stops a previous driver because it is called from the fallback driver loop. Original Revision: https://phabricator.services.mozilla.com/D305794 Differential Revision: https://phabricator.services.mozilla.com/D309475 - - - - - b9b7ac11 by Andrew McCreight at 2026-07-14T07:42:30+02:00 Bug 2050990 - Call JS_NumberValue in ClientWebGLContext.cpp. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D309205 Differential Revision: https://phabricator.services.mozilla.com/D309810 - - - - - ab90d413 by Chun-Min Chang at 2026-07-14T07:42:31+02:00 Bug 2047723 - Cherry-pick commit f738b1132ec1fd56efc90367898244cf52d9e6a5 for libsoundtouch a=RyanVM DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D309945 - - - - - 9cb9334d by Lee Salzman at 2026-07-14T07:42:32+02:00 Bug 2051666. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D309674 Differential Revision: https://phabricator.services.mozilla.com/D309983 - - - - - 722bf627 by Lee Salzman at 2026-07-14T07:42:33+02:00 Bug 2049405. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308437 Differential Revision: https://phabricator.services.mozilla.com/D309967 - - - - - b006bf36 by Valentin Gosu at 2026-07-14T07:42:34+02:00 Bug 2050668 - WS: set mDataStarted before dispatching runnable a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308990 Differential Revision: https://phabricator.services.mozilla.com/D309771 - - - - - 0847a453 by Andrew McCreight at 2026-07-14T07:42:35+02:00 Bug 2050657 - Fix more floating point setNumber calls. a=RyanVM Plus a DoubleValue because we might as well fix both EventDispatcher issues in one patch. Original Revision: https://phabricator.services.mozilla.com/D308928 Differential Revision: https://phabricator.services.mozilla.com/D309823 - - - - - 58ec3e09 by Andrew McCreight at 2026-07-14T07:42:36+02:00 Bug 2050657 - Fixes for setDouble, Float32Value and JS::NumberValue. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D309191 Differential Revision: https://phabricator.services.mozilla.com/D309824 - - - - - 87fe7365 by Andrew McCreight at 2026-07-14T07:42:37+02:00 Bug 2050657 - Ensure UbiNode Node::identifier() is representable. a=RyanVM Node::identifier() gets used as a JS value in a few places, so we should make sure that it is a nice happy non-NaN value representable as a double. It looks like all of the callers are passing in pointers, so it should be fine. Original Revision: https://phabricator.services.mozilla.com/D309192 Differential Revision: https://phabricator.services.mozilla.com/D309825 - - - - - 01d31953 by Arnaud Bienner at 2026-07-14T07:42:38+02:00 Bug 2051285 - Useless reinterpret_cast in EncryptingOutputStream_impl.h a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D309361 Differential Revision: https://phabricator.services.mozilla.com/D310141 - - - - - 044da35c by Arnaud Bienner at 2026-07-14T07:42:39+02:00 Bug 2044536 - Quota: make EncryptedBlock::RoundedUpToBasicBlockSize public and use it in EncryptingOutputStream, and propertly clear buffer a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D309603 Differential Revision: https://phabricator.services.mozilla.com/D310142 - - - - - 0cc7dcbc by Jens Stutte at 2026-07-14T07:42:40+02:00 Bug 2045510 - Reject snappy CompressedData chunks shorter than the CRC field. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305218 Differential Revision: https://phabricator.services.mozilla.com/D309799 - - - - - 50272d3a by Jens Stutte at 2026-07-14T07:42:41+02:00 Bug 2048795 - Guard access to the GamepadPlatformService singleton by a StaticMutex. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308034 Differential Revision: https://phabricator.services.mozilla.com/D309819 - - - - - e26e8e3e by Valentin Gosu at 2026-07-14T07:42:42+02:00 Bug 2045833 - Clean up nsUnknownDecoder::OnDataAvailable check a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D305526 Differential Revision: https://phabricator.services.mozilla.com/D309891 - - - - - c886993c by Lee Salzman at 2026-07-14T07:42:43+02:00 Bug 2047719. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307948 Differential Revision: https://phabricator.services.mozilla.com/D310173 - - - - - 30b753cb by Jonathan Kew at 2026-07-14T07:42:44+02:00 Bug 2045865 - Use row_bytes rather than bitmap->pitch when copying glyph. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307593 Differential Revision: https://phabricator.services.mozilla.com/D310192 - - - - - bd391cb3 by Matthew Gregan at 2026-07-14T07:42:45+02:00 Bug 2045763. r=cubeb-reviewers,padenot a=dmeehan DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D310249 - - - - - 3f39be32 by smayya at 2026-07-14T07:42:46+02:00 Bug 2049392 - improve nsStandardURL parsing. n=#necko a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D309007 Differential Revision: https://phabricator.services.mozilla.com/D310086 - - - - - 32f4f5f9 by Valentin Gosu at 2026-07-14T07:42:47+02:00 Bug 2045875 - Empty authority is not compatible with port a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D306755 Differential Revision: https://phabricator.services.mozilla.com/D310087 - - - - - 09f5c12c by Bob Owen at 2026-07-14T07:42:48+02:00 Bug 2045767 - a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305931 Differential Revision: https://phabricator.services.mozilla.com/D310114 - - - - - 4b6b8860 by Randell Jesup at 2026-07-14T07:42:49+02:00 Bug 2045783: Clean up TRRQuery::CompleteLookup a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305279 Differential Revision: https://phabricator.services.mozilla.com/D310241 - - - - - d95e8f5e by Randell Jesup at 2026-07-14T07:42:50+02:00 Bug 2045783: Add thread-safety checks to TRRQuery a=dmeehan DONTBUILD Belt-and-suspenders; allows static analyisis Original Revision: https://phabricator.services.mozilla.com/D305601 Differential Revision: https://phabricator.services.mozilla.com/D310242 - - - - - 09073f2c by Yannis Juglaret at 2026-07-14T07:42:51+02:00 Bug 2045770 - Cap constant-fold allocations. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305921 Differential Revision: https://phabricator.services.mozilla.com/D310264 - - - - - 4c008373 by DonalMe at 2026-07-14T07:42:52+02:00 Bug 2051658 a=dmeehan - - - - - 1073dd73 by DonalMe at 2026-07-14T07:42:53+02:00 Revert "Bug 2051658 a=dmeehan" for causing build failures This reverts commit e44a92232c4f71f420ce59f22e15f5c962f794f2. - - - - - 19111068 by Arnaud Bienner at 2026-07-14T07:42:54+02:00 Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308534 Differential Revision: https://phabricator.services.mozilla.com/D310354 - - - - - 887a5625 by Michael Kaply at 2026-07-14T07:42:55+02:00 Bug 2044527 - Normalize the host when matching WebsiteFilter patterns. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305900 Differential Revision: https://phabricator.services.mozilla.com/D310652 - - - - - e0e61a48 by Tom Schuster at 2026-07-14T07:42:56+02:00 Bug 2008369 - Validate principal in PContent::LoadURIExternal. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D309362 Differential Revision: https://phabricator.services.mozilla.com/D310359 - - - - - d72f21f0 by Jonathan Kew at 2026-07-14T07:42:57+02:00 Bug 2048801 - Validate fdselect entries before use. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308373 Differential Revision: https://phabricator.services.mozilla.com/D310395 - - - - - fcbb61b8 by Jonathan Kew at 2026-07-14T07:42:58+02:00 Bug 2049398 - Range-check glyph ID. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308374 Differential Revision: https://phabricator.services.mozilla.com/D310396 - - - - - e151ed6c by Jonathan Kew at 2026-07-14T07:42:59+02:00 Bug 2049399 - Check type1 stack size. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308375 Differential Revision: https://phabricator.services.mozilla.com/D310397 - - - - - 497935fb by ffxbld at 2026-07-14T07:43:00+02:00 No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D310675 - - - - - e005a313 by Mark Banner at 2026-07-14T07:43:01+02:00 Bug 1874712 - Add a keyword for Ecosia. a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D310293 - - - - - 297993de by DonalMe at 2026-07-14T07:43:02+02:00 Bug 2044527 - Fix build failure on ESR140 a=bustage - - - - - ec7aa1b0 by DonalMe at 2026-07-14T07:43:03+02:00 Revert "Bug 2008369 - Validate principal in PContent::LoadURIExternal. a=dmeehan" for causing CI failures on ESR140 This reverts commit 418229151ed0e8261397c2bbcde6112814b14947. - - - - - 2908e88d by DonalMe at 2026-07-14T07:43:04+02:00 Revert "Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan" for causing CI errors on ESR140 This reverts commit acff26261e5c0c60cb66c290d02ff199ea637cf5. - - - - - 9a4de08f by Arnaud Bienner at 2026-07-14T07:43:05+02:00 Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308534 Differential Revision: https://phabricator.services.mozilla.com/D310354 - - - - - 1075a9f1 by smayya at 2026-07-14T07:43:06+02:00 Bug 2045511 - update nsHttpTransaction::Close() handling of NS_BINDING_RETARGETED. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D307751 Differential Revision: https://phabricator.services.mozilla.com/D310586 - - - - - ed81fda3 by James Teh at 2026-07-14T07:43:07+02:00 Bug 2046416: Ensure a hide event never occurs during a split show event. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D306672 Differential Revision: https://phabricator.services.mozilla.com/D310548 - - - - - 615146d9 by Sotaro Ikeda at 2026-07-14T07:43:08+02:00 Bug 2051653 a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D309978 Differential Revision: https://phabricator.services.mozilla.com/D310545 - - - - - 5f67890f by Emilio Cobos Álvarez at 2026-07-14T07:43:09+02:00 Bug 2045617 - Add some bounds checks to cairo_cff_font_read_fdselect. a=dmeehan Attached to https://gitlab.freedesktop.org/cairo/cairo/-/work_items/967 as well. Original Revision: https://phabricator.services.mozilla.com/D306604 Differential Revision: https://phabricator.services.mozilla.com/D310349 - - - - - 7b20e3e8 by Eden Chuang at 2026-07-14T07:43:10+02:00 Bug 2026301 - Synchronize ThreadSafeRequestHandle::mRunnable to fix cross-thread use-after-free a=dmeehan DONTBUILD mRunnable was a plain RefPtr read on the main thread (GetCacheCreator and the other accessors) and cleared on the worker thread by ReleaseRequest() with no synchronization. When the worker's store dropped the last reference to the shared ScriptLoaderRunnable, the main thread could dereference the already-freed pointer, producing a heap-use-after-free. Guard mRunnable with a Mutex (enforced via MOZ_GUARDED_BY). ReleaseRequest() and the new SetRunnable() mutate it under the lock, releasing the runnable outside the lock so it is never destroyed while the mutex is held. Each main-thread accessor copies mRunnable into a local strong reference under the lock and bails if it was already released. GetCacheCreator() now returns a strong CacheCreator reference taken under the lock, so the caller keeps it alive across DeleteCache() even if the runnable is released on the worker thread afterwards. Original Revision: https://phabricator.services.mozilla.com/D307211 Differential Revision: https://phabricator.services.mozilla.com/D310969 - - - - - bec05ff1 by Emilio Cobos Álvarez at 2026-07-14T07:43:11+02:00 Bug 2045198 - Don't bother checking ancestors for constructed check. a=dmeehan DONTBUILD Since we don't allow @import, we can't get there with a constructed ancestor. Original Revision: https://phabricator.services.mozilla.com/D309844 Differential Revision: https://phabricator.services.mozilla.com/D310859 - - - - - 4dd5a131 by Jonathan Kew at 2026-07-14T07:43:12+02:00 Bug 2050368 - Check for end of charstring. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D308768 Differential Revision: https://phabricator.services.mozilla.com/D310831 - - - - - 7a51ebdf by Randell Jesup at 2026-07-14T07:43:13+02:00 Bug 2045772: Clean up nsStandardURL::Deserialize a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305274 Differential Revision: https://phabricator.services.mozilla.com/D310198 - - - - - 1ed75d9f by Daniel Holbert at 2026-07-14T07:43:14+02:00 Bug 2048799: Flip polarity of a bounds check in cairo code. a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D307892 Differential Revision: https://phabricator.services.mozilla.com/D310180 - - - - - 1d329b4b by Eitan Isaacson at 2026-07-14T07:43:15+02:00 Bug 2045392 - Don't allow attaching children to outerdoc. a=dmeehan DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D305621 - - - - - 0fbd3682 by Sotaro Ikeda at 2026-07-14T07:43:16+02:00 Bug 2051658 - for esr140 a=dmeehan DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D310958 - - - - - b92df16f by Valentin Gosu at 2026-07-14T07:43:17+02:00 Bug 2032140 - Verify content process identity when linking background channels a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D309038 Differential Revision: https://phabricator.services.mozilla.com/D311187 - - - - - 8bc39ef1 by Valentin Gosu at 2026-07-14T07:43:18+02:00 Bug 2043200 - Bind RedirectChannelRegistrar ids to their destination content process a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D309039 Differential Revision: https://phabricator.services.mozilla.com/D311188 - - - - - fa458fcf by Atila Butkovits at 2026-07-14T07:43:19+02:00 Revert "Bug 2051658 - for esr140 a=dmeehan DONTBUILD" for causing reftest failures. This reverts commit 58bbb58a4b533f267000b555474fa3f5f2122c61. - - - - - 8ad8ffda by Nika Layzell at 2026-07-14T07:43:20+02:00 Bug 2027207 - Part 1: Align validation in TriggerRedirectToRealChannel and RecvNewWindowGlobal better, a=pascalc This should make TriggerRedirectToRealChannel tighter, to hopefully match the check in RecvNewWindowGlobal better. While this doesn't add much in terms of security, it should reduce the risk of us encountering surprising errors. Original Revision: https://phabricator.services.mozilla.com/D291061 Differential Revision: https://phabricator.services.mozilla.com/D311158 - - - - - deab802f by Nika Layzell at 2026-07-14T07:43:21+02:00 Bug 2027207 - Part 2: Handle schemes better in ValidatePrincipalCouldPotentiallyBeLoadedBy, a=pascalc Previously this logic used `nsIPrincipal::GetScheme`, which returns the scheme of the URI used to create the principal. This could have unexpected behaviour for nested URIs like view-source URIs, which have a view-source: URI scheme, but a non-view-source (e.g. https://) origin. This patch reworks the logic to instead base the checks off of the origin's scheme, parsing it out of the origin string. In addition, the about: URI handling was improved somewhat to have a better understanding of how process selection for about: URIs happens in practice by relying on a component of the process isolation logic. Original Revision: https://phabricator.services.mozilla.com/D291062 Differential Revision: https://phabricator.services.mozilla.com/D311159 - - - - - 585c60c4 by Nika Layzell at 2026-07-14T07:43:23+02:00 Bug 2027207 - Part 3: Return IPC_FAIL when principal validation fails, a=pascalc This entry actually changes the callers to perform principal validation. This turns the code which previously would only send a telemetry ping to a crash. I am hopeful that the rate of failures is low enough that this won't cause an issue, and if it does, I'm hopeful that we'll be able to figure out the cause of the mismatch. Original Revision: https://phabricator.services.mozilla.com/D291063 Differential Revision: https://phabricator.services.mozilla.com/D311160 - - - - - f0376f95 by Timothy Nikkel at 2026-07-14T07:43:24+02:00 Bug 2036518. r=gfx-reviewers,lsalzman a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D311035 - - - - - b4a89257 by Byron Campen at 2026-07-14T07:43:25+02:00 Bug 2043188: Simplify the buffer handling in RTCEncodedFrameBase. r=sfink a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D310880 - - - - - a8146042 by Timothy Nikkel at 2026-07-14T07:43:26+02:00 Bug 2028004. a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D310743 - - - - - f8bb7186 by Randell Jesup at 2026-07-14T07:43:27+02:00 Bug 2029734: Flush before calling sctp_process_init() a=pascalc Original Revision: https://phabricator.services.mozilla.com/D295148 Differential Revision: https://phabricator.services.mozilla.com/D311133 - - - - - 2d6da74b by Randell Jesup at 2026-07-14T07:43:28+02:00 Bug 2045773: Add usrsctp TSN gap check a=pascalc Original Revision: https://phabricator.services.mozilla.com/D309815 Differential Revision: https://phabricator.services.mozilla.com/D311396 - - - - - e17a56a1 by Timothy Nikkel at 2026-07-14T07:43:29+02:00 Bug 2022635. a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D311246 - - - - - c0d41848 by Vincent Hilla at 2026-07-14T07:43:30+02:00 Bug 2035756 - Verify srcdoc and data result principal. a=pascalc Original Revision: https://phabricator.services.mozilla.com/D309545 Differential Revision: https://phabricator.services.mozilla.com/D311257 - - - - - d35af1a8 by Sotaro Ikeda at 2026-07-14T07:43:31+02:00 Bug 2051658 - for esr140 with D265934 a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D310958 - - - - - 9022c51d by James Teh at 2026-07-14T07:43:32+02:00 Bug 2052562: Don't allow moves into a detached subtree. a=pascalc Original Revision: https://phabricator.services.mozilla.com/D310457 Differential Revision: https://phabricator.services.mozilla.com/D311752 - - - - - 53fecf21 by Jan de Mooij at 2026-07-14T07:43:33+02:00 Bug 2052207 - Disable OptimizeIteratorIndices optimization. a=pascalc Original Revision: https://phabricator.services.mozilla.com/D310355 Differential Revision: https://phabricator.services.mozilla.com/D311774 - - - - - 8cea04be by Jonathan Kew at 2026-07-14T07:43:34+02:00 Bug 2053576 - Clamp number of components assigned by SetDetailedGlyphs. a=pascalc (Based on clauditor-suggested patch) Original Revision: https://phabricator.services.mozilla.com/D311412 Differential Revision: https://phabricator.services.mozilla.com/D311780 - - - - - b93ab09b by Randell Jesup at 2026-07-14T07:43:34+02:00 Bug 2045848: Avoid avoid re-initting usrsctp a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D311578 - - - - - ca735d05 by ffxbld at 2026-07-14T07:43:36+02:00 No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D311783 - - - - - 6d554987 by Timothy Nikkel at 2026-07-14T07:43:37+02:00 Bug 2052841. Don't taint a same-origin response that a service worker substitutes for a cross-origin request. a=pascalc When a service worker answers a cross-origin request with a same-origin resource (respondWith(fetch(<same-origin URL>))), the response is delivered as an internal redirect from the cross-origin request URL to the same-origin response URL. nsITimedChannel's allRedirectsSameOrigin counts that internal redirect as a cross-origin hop, so consumers that use it to decide tainting (image loads, stylesheets, media) treat the resource as cross-origin and taint it -- even though the bytes are same-origin and should be readable. Add nsITimedChannel::allRedirectsSameOriginIgnoringInternal, computed like allRedirectsSameOrigin but ignoring internal (e.g. service-worker response-URL) redirects, and switch the tainting consumers (imgRequestProxy, the CSS Loader, and the media resources) to it. Real cross-origin redirects still flip it, so genuine cross-origin loads (including bounce-backs) still taint. Other users of allRedirectsSameOrigin (resource timing, Fetch body-access) intentionally keep the original flag. Add a service-worker regression test for the same-origin substitution case (CSS). Differential Revision: https://phabricator.services.mozilla.com/D311505 - - - - - 8d1a814b by Timothy Nikkel at 2026-07-14T07:43:38+02:00 Bug 2050626. a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D311507 - - - - - 54ba522a by Vincent Hilla at 2026-07-14T07:43:39+02:00 Bug 2048851 - Clear principalToInherit in LoadPageAsViewSource. a=pascalc Original Revision: https://phabricator.services.mozilla.com/D309163 Differential Revision: https://phabricator.services.mozilla.com/D311786 - - - - - 542aa3e4 by Jon Coppeard at 2026-07-14T07:43:40+02:00 Bug 2046917 - Make implicit edge marking state runtime wide (ESR140) a=pascalc Currently this is tracked per-marker but the effect should be per-runtime. There may be multiple markers due to parallel marking. I couldn't get the testcase to reproduce here either. Original Revision: https://phabricator.services.mozilla.com/D307221 Differential Revision: https://phabricator.services.mozilla.com/D311837 - - - - - 0278ecd0 by Andreas Farre at 2026-07-14T07:43:41+02:00 Bug 2045468 - Make sure to check the correct browsing context. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305611 Differential Revision: https://phabricator.services.mozilla.com/D311833 - - - - - a8580110 by Emilio Cobos Álvarez at 2026-07-14T07:43:42+02:00 Bug 2045407 - Validate surface format properly. a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D305381 Differential Revision: https://phabricator.services.mozilla.com/D310858 - - - - - e7de1788 by Eden Chuang at 2026-07-14T07:43:43+02:00 Bug 2039452 - Validate file:// URIs in PExternalHelperApp against the sending process's remote type. a=RyanVM DONTBUILD The parent derived the native helper-launch decision from a content-process supplied aWasFileChannel flag and URI rather than binding it to the sending process's capabilities. Stop sending aWasFileChannel over IPC and derive it on the parent from the actual URI, and reject a file:// URI in PExternalHelperApp from a process that is not allowed to load local files (mirrors the file:// policy in ValidatePrincipalCouldPotentiallyBeLoadedBy). Original Revision: https://phabricator.services.mozilla.com/D309577 Differential Revision: https://phabricator.services.mozilla.com/D311929 - - - - - 7acd409a by Matthew Gregan at 2026-07-14T07:43:44+02:00 Bug 2052753 - Update cubeb-pulse-rs to b46defa to reject start() on a draining stream. a=RyanVM DONTBUILD Backport of upstream cubeb-pulse-rs commit 88194f91c8778fa608a19af7b91306094525595d, carried on the mozilla/cubeb-pulse-rs esr140 branch. The backport adapts the error construction to the cubeb-backend version vendored on this branch (Error::error() rather than Error::Error). Original Revision: https://phabricator.services.mozilla.com/D310552 Differential Revision: https://phabricator.services.mozilla.com/D311956 - - - - - 975c16db by Nika Layzell at 2026-07-14T07:43:45+02:00 Bug 1800120 - Part 1: Remove CreateWindowInDifferentProcess, a=RyanVM DONTBUILD This method is now dead code, as we have shipped fission.autostart on all platforms since bug 1998306, and CreateWindowInDifferentProcess is disabled when Fission is disabled. This is intended to be a fairly straightforward change to remove the unnecessary IPC call, and does not clean up the implementation to remove the now-dead codepaths from CommonCreateWindow. That is done in part 2. Original Revision: https://phabricator.services.mozilla.com/D297450 Differential Revision: https://phabricator.services.mozilla.com/D311910 - - - - - 684e4aab by Nika Layzell at 2026-07-14T07:43:46+02:00 Bug 1800120 - Part 2: Remove now-dead parameters in CommonCreateWindow, a=RyanVM DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D297451 Differential Revision: https://phabricator.services.mozilla.com/D311911 - - - - - adf45eb8 by Nika Layzell at 2026-07-14T07:43:47+02:00 Bug 1800120 - Part 3: Update test expectations for window-open-popup-behavior.html, a=RyanVM DONTBUILD This patch updates the expectations for window-open-popup-behavior.html on Android to reflect the fact that many of these tests appear to have only been passing due to Android using CreateWindowInDifferentProcess. Now that codepath has been removed, the test is now failing more consistently across platforms. I also removed the pass cases for linux-nofis, though I don't think we run that configuration in treeherder anymore off the top of my head. It appears that we fail this test due to a fundamental mismatch between our implementation and the WPT. Specifically it appears the test expects that specifying noopener/noreferrer overrides all other window open options, and always forces the document to open in a tab, not a popup. We always respect the specified options even if noopener is set. Original Revision: https://phabricator.services.mozilla.com/D308619 Differential Revision: https://phabricator.services.mozilla.com/D311912 - - - - - f917afa7 by Ryan Hunt at 2026-07-14T07:43:48+02:00 Bug 2051854 - Clean up StackSlotAllocator. a=RyanVM Route all height_ increments through a checked incrementHeight() and make slot allocation fallible. Original Revision: https://phabricator.services.mozilla.com/D309918 Differential Revision: https://phabricator.services.mozilla.com/D311873 - - - - - 361 changed files: - .cargo/config.toml.in - CLOBBER - Cargo.lock - accessible/base/CacheConstants.h - accessible/base/TextLeafRange.cpp - accessible/ipc/DocAccessibleParent.cpp - accessible/ipc/RemoteAccessible.cpp - accessible/ipc/RemoteAccessible.h - browser/app/profile/firefox.js - browser/components/DesktopActorRegistry.sys.mjs - browser/components/build/components.conf - browser/components/distribution.sys.mjs - browser/components/enterprisepolicies/helpers/WebsiteFilter.sys.mjs - + browser/components/enterprisepolicies/tests/xpcshell/test_websitefilter.js - browser/components/enterprisepolicies/tests/xpcshell/xpcshell.toml - browser/components/metrics.yaml - − browser/components/shell/Windows11LimitedAccessFeatures.cpp - − browser/components/shell/Windows11LimitedAccessFeatures.h - browser/components/shell/Windows11TaskbarPinning.cpp - browser/components/shell/moz.build - + browser/components/shell/nsILimitedAccessFeature.idl - + browser/components/shell/rust/shell_windows/Cargo.toml - + browser/components/shell/rust/shell_windows/src/LimitedAccessFeatureService.h - + browser/components/shell/rust/shell_windows/src/lib.rs - + browser/components/shell/rust/shell_windows/src/limited_access_features.rs - browser/components/shell/test/gtest/LimitedAccessFeatureTests.cpp - + browser/components/tests/unit/test_distribution_mozillaonline.js - browser/components/tests/unit/xpcshell.toml - browser/config/version.txt - browser/config/version_display.txt - config/create_rc.py - config/milestone.txt - devtools/server/actors/source.js - docshell/base/BrowsingContext.cpp - docshell/base/BrowsingContext.h - docshell/base/nsDocShell.cpp - docshell/base/nsDocShellLoadState.cpp - dom/base/CrossShadowBoundaryRange.cpp - dom/base/CrossShadowBoundaryRange.h - dom/base/StaticRange.cpp - dom/base/StaticRange.h - dom/base/TimeoutManager.cpp - dom/base/nsContentUtils.h - dom/base/nsINode.cpp - dom/base/nsINode.h - dom/base/nsTextFragment.h - dom/bindings/ToJSValue.h - dom/cache/CacheOpParent.cpp - dom/cache/CacheStreamControlParent.cpp - dom/cache/CacheStreamControlParent.h - dom/canvas/CanvasRenderingContext2D.cpp - dom/canvas/ClientWebGLContext.cpp - dom/canvas/DrawTargetWebgl.cpp - dom/canvas/WebGLProgram.cpp - dom/canvas/nsICanvasRenderingContextInternal.cpp - dom/cookiestore/CookieStoreParent.cpp - dom/events/IMEStateManager.cpp - dom/events/TextComposition.h - dom/fetch/Fetch.cpp - dom/fetch/Fetch.h - dom/fetch/Request.cpp - dom/fetch/Response.cpp - dom/gamepad/GamepadPlatformService.cpp - dom/html/HTMLCanvasElement.cpp - dom/html/HTMLCanvasElement.h - dom/html/HTMLImageElement.cpp - dom/html/HTMLImageElement.h - dom/html/HTMLSlotElement.cpp - dom/html/nsGenericHTMLElement.cpp - dom/indexedDB/Key.cpp - dom/ipc/BrowserParent.cpp - dom/ipc/ContentChild.cpp - dom/ipc/ContentParent.cpp - dom/ipc/ContentParent.h - dom/ipc/DOMTypes.ipdlh - dom/ipc/PContent.ipdl - dom/ipc/ProcessIsolation.cpp - dom/media/ChannelMediaResource.cpp - dom/media/CloneableWithRangeMediaResource.cpp - dom/media/FileMediaResource.cpp - dom/media/GraphDriver.cpp - dom/media/GraphDriver.h - dom/media/MediaQueue.h - dom/media/eme/MediaKeys.cpp - dom/media/eme/clearkey/ClearKeyDecryptionManager.cpp - dom/media/gmp/GMPVideoDecoderChild.cpp - dom/media/gmp/GMPVideoi420FrameImpl.cpp - dom/media/ipc/MFCDMParent.cpp - dom/media/ipc/MFCDMParent.h - dom/media/ipc/MFMediaEngineParent.cpp - dom/media/mediasink/AudioDecoderInputTrack.cpp - dom/media/mediasource/ContainerParser.cpp - dom/media/mp4/SinfParser.cpp - dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp - dom/media/platforms/ffmpeg/FFmpegVideoFramePool.cpp - + dom/media/platforms/ffmpeg/FFmpegVideoUtils.h - dom/media/platforms/ffmpeg/ffvpx/D3D11TextureWrapper.cpp - dom/media/platforms/ffmpeg/ffvpx/D3D11TextureWrapper.h - dom/media/platforms/wmf/DXVA2Manager.cpp - dom/media/webaudio/MediaBufferDecoder.cpp - dom/media/webrtc/jsapi/RTCEncodedFrameBase.cpp - dom/promise/Promise.cpp - dom/quota/EncryptedBlock.h - dom/quota/EncryptingOutputStream_impl.h - dom/security/nsContentSecurityManager.cpp - dom/streams/ReadableStream.h - dom/streams/UnderlyingSourceCallbackHelpers.h - dom/view-transitions/ViewTransition.cpp - dom/webtransport/api/WebTransport.cpp - dom/webtransport/parent/WebTransportParent.cpp - dom/webtransport/parent/WebTransportParent.h - + dom/webtransport/test/xpcshell/head.js - dom/webtransport/test/xpcshell/test_close.js - dom/webtransport/test/xpcshell/test_simple_conn.js - dom/webtransport/test/xpcshell/test_simple_stream.js - dom/webtransport/test/xpcshell/xpcshell.toml - dom/workers/ScriptLoader.cpp - dom/workers/loader/CacheLoadHandler.cpp - dom/workers/loader/NetworkLoadHandler.cpp - dom/workers/loader/WorkerLoadContext.cpp - dom/workers/loader/WorkerLoadContext.h - editor/libeditor/CompositionTransaction.cpp - editor/libeditor/CompositionTransaction.h - editor/libeditor/EditorBase.cpp - editor/libeditor/TextEditSubActionHandler.cpp - editor/libeditor/WhiteSpaceVisibilityKeeper.cpp - editor/libeditor/tests/mochitest.toml - + editor/libeditor/tests/test_composition_modified_as_multiple_text_nodes.html - gfx/2d/DrawTargetSkia.cpp - gfx/2d/ScaledFontDWrite.cpp - gfx/2d/ScaledFontFontconfig.cpp - gfx/2d/SkConvolver.cpp - gfx/angle/checkout/src/compiler/translator/IntermNode.cpp - gfx/angle/checkout/src/compiler/translator/OutputHLSL.cpp - gfx/angle/checkout/src/libANGLE/renderer/d3d/d3d11/StateManager11.h - gfx/cairo/cairo/src/cairo-cff-subset.c - gfx/cairo/cairo/src/cairo-ft-font.c - gfx/cairo/cairo/src/cairo-scaled-font-subsets.c - gfx/cairo/cairo/src/cairo-type1-subset.c - gfx/cairo/cairo/src/cairoint.h - + gfx/cairo/patches/0034-cff-dict-validation.patch - + gfx/cairo/patches/0035-cff-fdselect-bounds.patch - + gfx/cairo/patches/0036-cff-operator-bounds.patch - + gfx/cairo/patches/0037-fdselect-checks.patch - + gfx/cairo/patches/0037-pcf-row_bytes.patch - + gfx/cairo/patches/0038-gid-range-check.patch - + gfx/cairo/patches/0039-type1-stack-check.patch - + gfx/cairo/patches/0040-type1-decode-integer.patch - + gfx/cairo/patches/0041-Bug-2048799-flip-polarity-of-a-bounds-check.patch - gfx/layers/D3D11ZeroCopyTextureImage.cpp - gfx/layers/D3D11ZeroCopyTextureImage.h - gfx/layers/DcompSurfaceImage.cpp - gfx/layers/ImageContainer.cpp - gfx/layers/ImageContainer.h - gfx/layers/apz/util/APZCCallbackHelper.cpp - gfx/layers/composite/TextureHost.cpp - gfx/layers/d3d11/FenceD3D11.cpp - gfx/layers/d3d11/FenceD3D11.h - gfx/layers/d3d11/TextureD3D11.cpp - gfx/layers/ipc/CanvasChild.cpp - gfx/layers/opengl/DMABUFTextureHostOGL.cpp - gfx/layers/opengl/MacIOSurfaceTextureHostOGL.cpp - gfx/layers/opengl/TextureHostOGL.cpp - gfx/layers/wr/AsyncImagePipelineManager.cpp - gfx/layers/wr/WebRenderBridgeParent.cpp - gfx/layers/wr/WebRenderCommandBuilder.cpp - gfx/layers/wr/WebRenderMessageUtils.h - gfx/thebes/gfxDWriteFontList.cpp - gfx/thebes/gfxFcPlatformFontList.cpp - gfx/thebes/gfxFcPlatformFontList.h - gfx/thebes/gfxFont.cpp - gfx/thebes/gfxFontEntry.cpp - gfx/thebes/gfxFontEntry.h - gfx/thebes/gfxHarfBuzzShaper.cpp - gfx/thebes/gfxTextRun.cpp - gfx/thebes/gfxUserFontSet.cpp - gfx/thebes/gfxUserFontSet.h - gfx/webrender_bindings/DCLayerTree.cpp - gfx/webrender_bindings/RenderD3D11TextureHost.cpp - gfx/webrender_bindings/WebRenderTypes.h - gfx/wr/swgl/src/gl.cc - gfx/wr/swgl/src/rasterize.h - gfx/wr/webrender/src/texture_cache.rs - gfx/ycbcr/ycbcr_to_rgb565.cpp - image/BlobSurfaceProvider.cpp - image/RasterImage.cpp - image/decoders/nsAVIFDecoder.cpp - image/imgRequest.cpp - image/imgRequest.h - image/imgRequestProxy.cpp - ipc/glue/BackgroundParentImpl.cpp - ipc/glue/BackgroundParentImpl.h - ipc/glue/PBackground.ipdl - ipc/glue/SharedMemoryPlatform_posix.cpp - js/public/UbiNode.h - js/src/builtin/RegExp.cpp - js/src/builtin/RegExp.js - js/src/builtin/SelfHostingDefines.h - js/src/ctypes/CTypes.cpp - js/src/gc/GC.cpp - js/src/gc/GCMarker.h - js/src/gc/GCRuntime.h - js/src/gc/Marking.cpp - js/src/gc/Nursery.cpp - js/src/gc/Verifier.cpp - js/src/jit/BacktrackingAllocator.cpp - js/src/jit/BacktrackingAllocator.h - js/src/jit/JitFrames.cpp - js/src/jit/JitOptions.cpp - js/src/jit/LIR.h - js/src/jit/SimpleAllocator.cpp - js/src/jit/SimpleAllocator.h - js/src/jit/StackSlotAllocator.h - js/src/jit/shared/IonAssemblerBufferWithConstantPools.h - js/src/wasm/WasmBaselineCompile.cpp - js/src/wasm/WasmInstance.cpp - js/src/wasm/WasmStubs.cpp - js/src/wasm/WasmTable.cpp - js/xpconnect/src/XPCConvert.cpp - layout/base/PresShell.cpp - layout/base/nsCSSFrameConstructor.cpp - layout/base/nsILayoutHistoryState.idl - layout/base/nsLayoutHistoryState.cpp - layout/generic/TextDrawTarget.h - layout/generic/nsImageMap.cpp - layout/painting/DottedCornerFinder.cpp - layout/style/FontFaceSetImpl.cpp - layout/style/FontFaceSetWorkerImpl.cpp - layout/style/FontFaceSetWorkerImpl.h - layout/style/FontLoaderUtils.cpp - layout/style/FontLoaderUtils.h - layout/style/ServoCSSRuleList.cpp - layout/style/StyleSheet.cpp - layout/style/StyleSheet.h - + media/libcubeb/delay-line-bounds.patch - media/libcubeb/moz.yaml - media/libcubeb/src/cubeb_resampler_internal.h - media/libsoundtouch/moz.yaml - + media/libsoundtouch/ratetransposer-clamp-dest-size.patch - media/libsoundtouch/src/RateTransposer.cpp - mozglue/misc/Printf.cpp - mozglue/misc/Printf.h - netwerk/base/RedirectChannelRegistrar.cpp - netwerk/base/RedirectChannelRegistrar.h - netwerk/base/SimpleChannelParent.cpp - netwerk/base/nsIRedirectChannelRegistrar.idl - netwerk/base/nsITimedChannel.idl - netwerk/base/nsNetUtil.cpp - netwerk/base/nsNetUtil.h - netwerk/base/nsStandardURL.cpp - netwerk/dns/DNSPacket.cpp - netwerk/dns/TRRQuery.cpp - netwerk/dns/TRRQuery.h - netwerk/dns/effective_tld_names.dat - netwerk/ipc/DocumentLoadListener.cpp - netwerk/ipc/ParentChannelWrapper.cpp - netwerk/ipc/ParentChannelWrapper.h - netwerk/ipc/ParentProcessDocumentChannel.cpp - netwerk/protocol/data/DataChannelParent.cpp - netwerk/protocol/file/FileChannelParent.cpp - netwerk/protocol/http/BackgroundChannelRegistrar.cpp - netwerk/protocol/http/HttpBackgroundChannelParent.cpp - netwerk/protocol/http/HttpBackgroundChannelParent.h - netwerk/protocol/http/HttpBaseChannel.cpp - netwerk/protocol/http/HttpBaseChannel.h - netwerk/protocol/http/HttpChannelChild.cpp - netwerk/protocol/http/HttpChannelParams.ipdlh - netwerk/protocol/http/HttpChannelParent.cpp - netwerk/protocol/http/HttpChannelParent.h - netwerk/protocol/http/NullHttpChannel.cpp - netwerk/protocol/http/NullHttpChannel.h - netwerk/protocol/http/ReplacedHttpResponse.cpp - netwerk/protocol/http/ReplacedHttpResponse.h - netwerk/protocol/http/nsHttpRequestHead.cpp - netwerk/protocol/http/nsHttpRequestHead.h - netwerk/protocol/http/nsHttpResponseHead.cpp - netwerk/protocol/http/nsHttpResponseHead.h - netwerk/protocol/http/nsHttpTransaction.cpp - netwerk/protocol/websocket/WebSocketChannel.cpp - netwerk/sctp/datachannel/DataChannel.cpp - netwerk/sctp/src/netinet/sctp_indata.c - netwerk/sctp/src/netinet/sctp_input.c - netwerk/streamconv/converters/nsUnknownDecoder.cpp - parser/html/nsHtml5TreeOperation.cpp - parser/htmlparser/nsParser.cpp - python/mozbuild/mozbuild/repackaging/deb.py - security/ct/CTKnownLogs.h - security/manager/ssl/StaticHPKPins.h - security/manager/ssl/nsSTSPreloadList.inc - security/manager/tools/log_list.json - services/settings/dumps/blocklists/addons-bloomfilters.json - services/settings/dumps/main/devtools-compatibility-browsers.json - services/settings/dumps/main/search-config-v2.json - services/settings/dumps/main/translations-models.json - services/settings/dumps/security-state/intermediates.json - services/settings/dumps/security-state/onecrl.json - taskcluster/config.yml - taskcluster/docker/debian-packages/Dockerfile - taskcluster/kinds/packages/ubuntu.yml - taskcluster/kinds/release-update-verify-config/kind.yml - taskcluster/kinds/searchfox/kind.yml - − testing/web-platform/meta/fetch/images/canvas-remote-read-remote-image-redirect.html.ini - testing/web-platform/meta/html/browsers/the-window-object/window-open-popup-behavior.html.ini - testing/web-platform/tests/html/semantics/forms/form-control-infrastructure/form_owner_and_table_2.html - + testing/web-platform/tests/service-workers/service-worker/css-sw-same-origin-substitution.https.html - + testing/web-platform/tests/service-workers/service-worker/resources/css-sw-same-origin-substitution-iframe.sub.html - + testing/web-platform/tests/service-workers/service-worker/resources/css-sw-same-origin-substitution-worker.js - testing/web-platform/tests/tools/certs/cacert.key - testing/web-platform/tests/tools/certs/cacert.pem - testing/web-platform/tests/tools/certs/web-platform.test.key - testing/web-platform/tests/tools/certs/web-platform.test.pem - third_party/rlbox/include/rlbox_stdlib.hpp - third_party/rust/audioipc2-client/.cargo-checksum.json - third_party/rust/audioipc2-client/src/context.rs - third_party/rust/audioipc2-client/src/stream.rs - third_party/rust/audioipc2-server/.cargo-checksum.json - third_party/rust/audioipc2-server/src/server.rs - third_party/rust/audioipc2/.cargo-checksum.json - third_party/rust/audioipc2/src/messages.rs - third_party/rust/cubeb-pulse/.cargo-checksum.json - third_party/rust/cubeb-pulse/src/backend/stream.rs - toolkit/components/extensions/Extension.sys.mjs - toolkit/components/extensions/ExtensionParent.sys.mjs - toolkit/components/extensions/moz.build - toolkit/components/extensions/test/mochitest/test_ext_test.html - + toolkit/components/extensions/test/xpcshell/test_wpt_actor_pref.js - toolkit/components/extensions/test/xpcshell/test_wpt_test_onMessage.js - toolkit/components/extensions/test/xpcshell/xpcshell-common.toml - toolkit/components/pdfjs/content/PdfStreamConverter.sys.mjs - toolkit/components/pdfjs/content/web/viewer-geckoview.mjs - toolkit/components/pdfjs/content/web/viewer.mjs - toolkit/components/pdfjs/test/browser.toml - + toolkit/components/pdfjs/test/browser_pdfjs_sandboxed_iframe.js - + toolkit/components/pdfjs/test/file_pdfjs_csp.sjs - + toolkit/components/pdfjs/test/file_pdfjs_csp_sandbox_opener.html - + toolkit/components/pdfjs/test/file_pdfjs_csp_sandbox_opener.html^headers^ - toolkit/components/reputationservice/ApplicationReputation.cpp - toolkit/components/reputationservice/ApplicationReputation.h - toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp - toolkit/components/search/tests/xpcshell/searchconfigs/test_ecosia.js - toolkit/components/telemetry/core/TelemetryEvent.cpp - toolkit/components/telemetry/other/TelemetryIOInterposeObserver.cpp - toolkit/components/telemetry/other/UntrustedModulesDataSerializer.cpp - toolkit/components/viewsource/test/browser/browser.toml - + toolkit/components/viewsource/test/browser/browser_bug2048851.js - + toolkit/components/viewsource/test/browser/file_bug2048851.html - toolkit/library/rust/gkrust-features.mozbuild - toolkit/library/rust/shared/Cargo.toml - toolkit/library/rust/shared/lib.rs - toolkit/mozapps/extensions/AddonManagerStartup.cpp - tools/lint/clippy.yml - uriloader/exthandler/ExternalHelperAppParent.cpp - uriloader/exthandler/ExternalHelperAppParent.h - uriloader/exthandler/nsExternalHelperAppService.cpp - widget/ClipboardWriteRequestParent.cpp - widget/GfxInfoBase.cpp - widget/android/EventDispatcher.cpp - widget/windows/WinRegistry.cpp - widget/windows/WinRegistry.h - xpcom/base/ErrorList.py - xpcom/io/SnappyFrameUtils.cpp The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/57c25f2... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/57c25f2... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help