summaryrefslogtreecommitdiff
path: root/src/xss/XSS.js
Commit message (Collapse)AuthorAgeFilesLines
* [XSS] Prevent DOS detection from being triggered for already aborted ↵hackademix2020-03-011-12/+36
| | | | requests (thanks therube).
* Refactored XSS filter into an asynchronous worker to better handle DOS attempts.hackademix2020-02-291-54/+66
|
* [XSS] Abort on InjectionChecker timeouts.hackademix2020-02-101-1/+1
|
* Removed XSS prompt for timeouts.hackademix2019-09-241-1/+1
|
* [XSS] Enable InjectionChecker logging when debugging mode is on.hackademix2019-08-021-0/+1
|
* Make XSS timeouts fatal and reported.hackademix2019-05-281-1/+2
|
* XSS Filter made further asynchronous, prevents freezes on complex JSON payloads.hackademix2019-05-271-10/+33
|
* Removed work-around for ↵hackademix2019-05-221-15/+2
| | | | https://bugzilla.mozilla.org/show_bug.cgi?id=1532530 (see https://trac.torproject.org/projects/tor/ticket/29969#comment:9).
* Merge branch 'chromium' into merge/chromiumhackademix2019-03-271-0/+2
|\
| * Fallback XSS filtering to XSS Auditor since asynchronous webRequest handlers ↵hackademix2019-02-011-0/+2
| | | | | | | | are not supported by Chromium.
* | Better detection of privileged URLs in the XSS filter.hackademix2019-03-241-0/+3
| |
* | Improved unscanned POST blocking.hackademix2019-03-201-2/+2
| |
* | Fixed searches from the url bar causing XSS warnings in the Tor Browser.hackademix2019-03-191-1/+3
| |
* | Selective handling of Tor Browser options and work-around for ↵hackademix2019-03-141-3/+15
|/ | | | https://bugzilla.mozilla.org/show_bug.cgi?id=1532530
* Fixed typo in XSS name sanitization script injection (thanks skriptimaahinen).hackademix2018-08-231-1/+1
|
* Removed all references to RequestUtil.js and dependancies.hackademix2018-08-181-2/+3
|
* Initial commit starting at version 10.1.8.3rc4.hackademix2018-07-011-0/+246