tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

commit fc6e1acd39e19e568b706f93accf1bdb603b5a80
parent 20f82c3d14773dd0cecae7ff48b2ea819fb13046
Author: Frédéric Wang <fwang@igalia.com>
Date:   Wed, 10 Dec 2025 12:44:36 +0000

Bug 1994690 - Ship Trusted Types. r=smaug,tschuster,webidl,freddyb

Intent to ship: https://groups.google.com/a/mozilla.org/g/dev-platform/c/WA8vLAbvzB0/m/hJaSC6zkCgAJ

Differential Revision: https://phabricator.services.mozilla.com/D275577

Diffstat:
Mdom/serviceworkers/test/test_serviceworker_interfaces.js | 18+++++-------------
Mdom/tests/mochitest/general/test_interfaces.js | 20++++++--------------
Mdom/workers/test/test_worker_interfaces.js | 18+++++-------------
Mmodules/libpref/init/StaticPrefList.yaml | 2+-
4 files changed, 17 insertions(+), 41 deletions(-)

diff --git a/dom/serviceworkers/test/test_serviceworker_interfaces.js b/dom/serviceworkers/test/test_serviceworker_interfaces.js @@ -448,23 +448,15 @@ let interfaceNamesInGlobalScope = [ // IMPORTANT: Do not change this list without review from a DOM peer! "TransformStreamDefaultController", // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedHTML", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedHTML", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedScript", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedScript", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedScriptURL", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedScriptURL", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { - name: "TrustedTypePolicy", - earlyBetaOrEarlier: true, - insecureContext: true, - }, + { name: "TrustedTypePolicy", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { - name: "TrustedTypePolicyFactory", - earlyBetaOrEarlier: true, - insecureContext: true, - }, + { name: "TrustedTypePolicyFactory", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! "URL", // IMPORTANT: Do not change this list without review from a DOM peer! diff --git a/dom/tests/mochitest/general/test_interfaces.js b/dom/tests/mochitest/general/test_interfaces.js @@ -1559,23 +1559,15 @@ let interfaceNamesInGlobalScope = [ // IMPORTANT: Do not change this list without review from a DOM peer! { name: "TreeWalker", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedHTML", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedHTML", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedScript", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedScript", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedScriptURL", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedScriptURL", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { - name: "TrustedTypePolicy", - earlyBetaOrEarlier: true, - insecureContext: true, - }, + { name: "TrustedTypePolicy", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { - name: "TrustedTypePolicyFactory", - earlyBetaOrEarlier: true, - insecureContext: true, - }, + { name: "TrustedTypePolicyFactory", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! { name: "U2F", insecureContext: false, disabled: true }, // IMPORTANT: Do not change this list without review from a DOM peer! @@ -2175,7 +2167,7 @@ let interfaceNamesInGlobalScope = [ // IMPORTANT: Do not change this list without review from a DOM peer! { name: "top", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "trustedTypes", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "trustedTypes", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! { name: "u2f", insecureContext: false, disabled: true }, // IMPORTANT: Do not change this list without review from a DOM peer! diff --git a/dom/workers/test/test_worker_interfaces.js b/dom/workers/test/test_worker_interfaces.js @@ -544,23 +544,15 @@ let interfaceNamesInGlobalScope = [ // IMPORTANT: Do not change this list without review from a DOM peer! { name: "TransformStreamDefaultController", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedHTML", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedHTML", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedScript", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedScript", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { name: "TrustedScriptURL", earlyBetaOrEarlier: true, insecureContext: true }, + { name: "TrustedScriptURL", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { - name: "TrustedTypePolicy", - earlyBetaOrEarlier: true, - insecureContext: true, - }, + { name: "TrustedTypePolicy", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! - { - name: "TrustedTypePolicyFactory", - earlyBetaOrEarlier: true, - insecureContext: true, - }, + { name: "TrustedTypePolicyFactory", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! { name: "URL", insecureContext: true }, // IMPORTANT: Do not change this list without review from a DOM peer! diff --git a/modules/libpref/init/StaticPrefList.yaml b/modules/libpref/init/StaticPrefList.yaml @@ -4506,7 +4506,7 @@ # (https://w3c.github.io/trusted-types/dist/spec/) is enabled. - name: dom.security.trusted_types.enabled type: RelaxedAtomicBool - value: @IS_EARLY_BETA_OR_EARLIER@ + value: true mirror: always # If true, all content requests will get upgraded to HTTPS://