2005-07-26 Trunk builds

Exciting new stuff:

  • Fixed: 296566 - Move Extension Update into Extension Manager.
  • Fixed: 300731 - Change app/extension version scheme going forward.
  • Fixed: 297312 - Extension Manager gets confused between multiple installations of Firefox (e.g. nightlies in different directories).
  • Fixed: 236304 - MacIE Profile Migrator.
  • Fixed: 269460 - Easier rebranding (make browser use no trademarked names when not called with --enable-official-branding).
  • Fixed: 250274 - Find Toolbar: Esc should focus link (after finding link text with Ctrl+F).

Bug fixes:

  • Fixed: 285002 - Slow scrolling/redrawing in new cookies window with many cookies.
  • Fixed: 191642 - Lots of missing keyboard accelerators (accesskeys) in Options window.
  • Fixed: 244964 - Support quotes around the charset parameter value.
  • Fixed: 300733 - Open links destined for "new tab" in front most fully chromed window.
  • Fixed: 301353 - Components.utils.evalInSandbox does not report errors (and is slow).
  • Fixed: 264750 - Updating disabled extensions re-enables them.
  • Fixed: 300132 - Add .lt, .info, .th, .ac, .io, .sh, .tm, .gr, .br to IDN whitelist.
  • Partially fixed: 155723 - InnerHTML will need to be fixed to work with XHTML.
  • Fixed: 260437 - [Windows] "Set as Wallpaper" changes wallpaper for all users (should not save in windows directory).
  • Fixed: 286825 - [Windows] Firefox.exe is compiled with incorrect Product Version information.
  • Fixed: 102330 - [Mac] Back/Forward menu gets stuck on click-and-hold.
  • Fixed: 233977 - [Mac] Single-click selects entire address bar rather than activates cursor.
  • Fixed: 263146 - [Mac] Use the Cmd key instead of the Ctrl key on Mac ("accel" instead of "control").
  • Fixed: 281455 - [Mac] Top left of page foreground disappears when page is scrolled to bottom and "website description" textarea or any input field in form is selected.
  • Fixed: 292914 - [Mac] No repaint after scrolling 32768 pixels.
  • Fixed: 300721 - [Mac] Italicized bogus characters lead to gap and overlapping text.

Fixes for regressions:

  • Fixed: Chatzilla doesn't work due to partial fix for 155723 (since July 16.)
  • Fixed: 298077 - Link remains focused (outlined) when going back to the previous page using the back button and the focus can not be undone.
  • Fixed: 269927 - Tooltip appears after closing tab (even after switching windows) (and doesn't go away easily).
  • Fixed: 297421 - Open link in new tab causes focus rects to remain when switching tabs.
  • Fixed: 297887 - Form values are not correct with bfcache enabled.
  • Fixed: 292890 - Investigate interaction of bfcache/fastback and midas.
  • Fixed: 292948 - Resize events not fired on fastback to a document with resize handlers.
  • Fixed: 275564 - Mozilla SVG build 2004122009, 1004121909: wrong 'mismatched tag' message.
  • Fixed: 301416 - Form doesn't show submit button: regression from 1.0.6 to DPalpha2.
  • Fixed: 289973 - [Mac] White space shows up in XUL menu after redrawing (e.g. "Open in Tabs" is replaced by a white space).
  • Fixed: 300095 - [Mac] Tab close button draws over top of scroll bar of first tab after closing second tab, when page has focus.

Security fixes:

  • Fixed: 285438 - Drag and drop gestures can be hijacked to load priviliged xul.
  • Fixed: 275564 - Random characters appear in XML parser "mismatched text" error message.
  • Fixed: 240661 - "commonName" wrongly named and bogusly set.
  • Fixed: 300942 - <base href> and background: url(); send the wrong referer for the image request.
  • Fixed: 300997 - location.port can return garbage.
  • Fixed: 300247 - "Set as desktop background" is not disabled for javascript images.
  • Fixed: 300936 - Security hole.
  • Fixed: 301069 - On Mac, prevent dialog spoofing by putting hostname in dialog.
  • Fixed: 301694 - Create IDN blacklist that include 'DIVISION SLASH'(U+2215) and 'FRACTION SLASH'(U+2044).
  • Fixed: 239411 - Security hole.

I don't know of any major regressions since Deer Park Alpha 2, but with major changes to the extension manager, I wouldn't be surprised if there were some major regressions related to extensions.

Checkins between 2005-07-19 08:00 and 2005-07-26 08:00

Windows builds: Official Windows, Official Windows installer (discussion)

Linux builds: Official Linux, Official Linux installer

Mac builds: Official Mac

2 Responses to “2005-07-26 Trunk builds”

  1. Jan! Says:

    In what way is bug 300942 ( and background: url(); send the wrong referer for the image request) a security bug? Because it allowed spoofing the referrer?

  2. Shawn Says:

    Jan: I’d consider that a security bug. Some webapps regularly use the referer as a sort of authentication for allowing actions to get executed. I wouldn’t recommend that anyone use that method, but it gets used a lot and can easily get broken. But holes like this allow for it to get triggered by an unsuspecting user through XSS, rather than someone maliciously doing it themselves.