2005-07-26 Trunk builds
Exciting new stuff:
- Fixed: 296566 - Move Extension Update into Extension Manager.
- Fixed: 300731 - Change app/extension version scheme going forward.
- Fixed: 297312 - Extension Manager gets confused between multiple installations of Firefox (e.g. nightlies in different directories).
- Fixed: 236304 - MacIE Profile Migrator.
- Fixed: 269460 - Easier rebranding (make browser use no trademarked names when not called with --enable-official-branding).
- Fixed: 250274 - Find Toolbar: Esc should focus link (after finding link text with Ctrl+F).
Bug fixes:
- Fixed: 285002 - Slow scrolling/redrawing in new cookies window with many cookies.
- Fixed: 191642 - Lots of missing keyboard accelerators (accesskeys) in Options window.
- Fixed: 244964 - Support quotes around the charset parameter value.
- Fixed: 300733 - Open links destined for "new tab" in front most fully chromed window.
- Fixed: 301353 - Components.utils.evalInSandbox does not report errors (and is slow).
- Fixed: 264750 - Updating disabled extensions re-enables them.
- Fixed: 300132 - Add .lt, .info, .th, .ac, .io, .sh, .tm, .gr, .br to IDN whitelist.
- Partially fixed: 155723 - InnerHTML will need to be fixed to work with XHTML.
- Fixed: 260437 - [Windows] "Set as Wallpaper" changes wallpaper for all users (should not save in windows directory).
- Fixed: 286825 - [Windows] Firefox.exe is compiled with incorrect Product Version information.
- Fixed: 102330 - [Mac] Back/Forward menu gets stuck on click-and-hold.
- Fixed: 233977 - [Mac] Single-click selects entire address bar rather than activates cursor.
- Fixed: 263146 - [Mac] Use the Cmd key instead of the Ctrl key on Mac ("accel" instead of "control").
- Fixed: 281455 - [Mac] Top left of page foreground disappears when page is scrolled to bottom and "website description" textarea or any input field in form is selected.
- Fixed: 292914 - [Mac] No repaint after scrolling 32768 pixels.
- Fixed: 300721 - [Mac] Italicized bogus characters lead to gap and overlapping text.
Fixes for regressions:
- Fixed: Chatzilla doesn't work due to partial fix for 155723 (since July 16.)
- Fixed: 298077 - Link remains focused (outlined) when going back to the previous page using the back button and the focus can not be undone.
- Fixed: 269927 - Tooltip appears after closing tab (even after switching windows) (and doesn't go away easily).
- Fixed: 297421 - Open link in new tab causes focus rects to remain when switching tabs.
- Fixed: 297887 - Form values are not correct with bfcache enabled.
- Fixed: 292890 - Investigate interaction of bfcache/fastback and midas.
- Fixed: 292948 - Resize events not fired on fastback to a document with resize handlers.
- Fixed: 275564 - Mozilla SVG build 2004122009, 1004121909: wrong 'mismatched tag' message.
- Fixed: 301416 - Form doesn't show submit button: regression from 1.0.6 to DPalpha2.
- Fixed: 289973 - [Mac] White space shows up in XUL menu after redrawing (e.g. "Open in Tabs" is replaced by a white space).
- Fixed: 300095 - [Mac] Tab close button draws over top of scroll bar of first tab after closing second tab, when page has focus.
Security fixes:
- Fixed: 285438 - Drag and drop gestures can be hijacked to load priviliged xul.
- Fixed: 275564 - Random characters appear in XML parser "mismatched text" error message.
- Fixed: 240661 - "commonName" wrongly named and bogusly set.
- Fixed: 300942 - <base href> and background: url(); send the wrong referer for the image request.
- Fixed: 300997 - location.port can return garbage.
- Fixed: 300247 - "Set as desktop background" is not disabled for javascript images.
- Fixed: 300936 - Security hole.
- Fixed: 301069 - On Mac, prevent dialog spoofing by putting hostname in dialog.
- Fixed: 301694 - Create IDN blacklist that include 'DIVISION SLASH'(U+2215) and 'FRACTION SLASH'(U+2044).
- Fixed: 239411 - Security hole.
I don't know of any major regressions since Deer Park Alpha 2, but with major changes to the extension manager, I wouldn't be surprised if there were some major regressions related to extensions.
Checkins between 2005-07-19 08:00 and 2005-07-26 08:00
Official Windows, Official Windows installer (discussion)
July 27th, 2005 at 2:37 am
In what way is bug 300942 ( and background: url(); send the wrong referer for the image request) a security bug? Because it allowed spoofing the referrer?
July 27th, 2005 at 6:15 am
Jan: I’d consider that a security bug. Some webapps regularly use the referer as a sort of authentication for allowing actions to get executed. I wouldn’t recommend that anyone use that method, but it gets used a lot and can easily get broken. But holes like this allow for it to get triggered by an unsuspecting user through XSS, rather than someone maliciously doing it themselves.