Bug 775815 - Use new Permission Manager API in SpecialPowers. r=sicking
Bug 785161 - Stop uninstalling all installed apps in WebApps tests. r=jlebar
Bug 777072 - 1/7 - Move the logic from methods taking URIs to method taking nsIPrincipals. r=sicking
Bug 777072 - 2/7 - AddInternal() and CommonTestPermission() should use nsIPrincipal. r=sicking
Bug 777072 - 3/7 - Update nsHostTable and nsHostEntry to make them aware of new security model. r=sicking,jlebar
Bug 777072 - 4/7 - Update nsPermission to use appId/isInBrowserElement. r=sicking
Bug 777072 - 5/7 - Update IPC::Permission to use appId/isInBrowserElement. r=sicking
Bug 777072 - 6/7 Update the Permission Manager database to save appId/isInBrowserElement. r=sicking
Bug 777072 - 7/7 - Tests. r=sicking
Bug 619236 - Set user_version in generated permissions.sqlite for tests. r=sicking
Bug 784878 - Use version 2 by default when no version in found in permissions.sqlite. r=sicking

This is a patch to workaround the fact that talos has wrongly gerenated
permissions.sqlite files which don't have a user_version and are version 2.
This is going to be replaced by a MOZ_ASSERT by bug 784884.
Bug 756645 - Implement IndexedDB apps isolation. r=bent
Bug 771284 - Use the child selector to get to button-icon and button-text. r=dao
DONTBUILD
Back out b2900e347f5c (bug 783393) for Windows xpcshell hangs in test_listscripts-01.js on a CLOSED TREE

--HG--
extra : transplant_source : %F4%97%281%7F%AD%7E%C0Vb%00t%9Bd%FC%EC%A5%92%B5%C8
Bug 774633 - Factor nsWindowWatcher call to SetOpenerScriptPrincipal into a method on nsGlobalWindow. r=jst
This doesn't change any functionality in the code. Note that the name is currently
a bit of a misnomer, but we change that in the next patch when we rip out the
arguments.
Bug 774633 - Wean SetInitialPrincipalToSubject off some parameters and clean it up. r=jst
We can remove the fallback to the principal of aParent because we already push the
cx for aParent (callerContextGuard) whenever we're concerned about using its principal.
Bug 774633 - Remove dead mOpenerScriptPrincipal. r=jst
This value is initialized to null and never set, so we can get rid of it.
Bug 774633 - Fold SetOpenerScriptPrincipal into SetInitialPrincipalToSubject, and make it indempotent and callable without an existing document. r=jst
There's no reason it has to fail if there's no mDoc, since any document is promptly
blown away with the new about:blank document.

The indempotence is important because we want to be able to call this method
unconditionally in OpenJSWindowInternal (since we may not have gone through
RegisterTopLevelWindow) without worrying about whether we've called it already.
Bug 774633 - Move the call to SetInitialPrincipalToSubject into nsAppShellService::RegisterTopLevelWindow. r=jst
This means that we get the correct principal on the window before sending notifying
any consumers about the window's creation.
Bug 774633 - Remove "is chrome window" condition for inner window reuse. r=jst
WouldReuseInnerWindow also returns true if the new window is same-origin with
the old one about:blank document.

This condition exists in order to handle some sloppiness with respect to the
principals on initial about:blank documents. Chrome callers sometimes parent
chrome windows (with XUL document) to content windows. But this parenting causes
us to push the cx of the content window during window creation, meaning that
the subsequent load of chrome://foo.xul blows away the old inner window and any
expandos on it. We can handle this case more precisely by skipping the cx push
for type="chrome" windows.

Furthermore, this was also necessary to prevent the inner window from being
blown away in the call to SetOpenerScriptPrincipal once nsWindowWatcher gets
the window back from the window creator (and after it's already told consumers
about the window via "domwindowcreated"). But we fixed this nastiness in the
previous patches.

So we can remove this case. By doing so, we can prevent inner windows from ever
changing origins, which is very important for compartment security invariants.