Security/Inline Scripts and Styles: Difference between revisions

Jump to navigation Jump to search
(bugzilla bug list included)
 
(12 intermediate revisions by 2 users not shown)
Line 3: Line 3:
'''Can I help?'''
'''Can I help?'''


Sure. There's a [https://bugzilla.mozilla.org/show_bug.cgi?id=923920 tracking bug]. Many of its blockers will be good first bugs too.
Sure. There's a {{bug|923920|tracking bug}}. Many of its blockers will be good first bugs too.


'''What do I need to know to get started?'''
'''What do I need to know to get started?'''


You'll need to know at least some HTML and JavaScript.  You can probably learn some of the rest of what you need to know (like how to [https://developer.mozilla.org/en-US/docs/Developer_Guide/Build_Instructions build firefox] and [https://developer.mozilla.org/en/docs/Running_automated_tests run tests]) as you go along.
You'll need to know at least some HTML and JavaScript.  You can probably learn some of the rest of what you need to know (like how to [https://developer.mozilla.org/en-US/docs/Developer_Guide/Build_Instructions build firefox] and [https://developer.mozilla.org/en/docs/Running_automated_tests run tests]) as you go along. You might be interested in reading about
[https://developer.mozilla.org/en-US/docs/Introduction Contributing to the Mozilla codebase].


== Goals & Non-Goals ==
== Goals & Non-Goals ==
Line 13: Line 14:


== Remaining bugs ==
== Remaining bugs ==
=== In DevTools ===
<bugzilla>
{
  "blocks": "960728",
  "status": "NEW",
  "whiteboard": "good first bug"
}
</bugzilla>
=== Miscellaneous ===
<bugzilla>
<bugzilla>
{
{
   "blocks": "923920",
   "blocks": "923920",
   "status": "NEW"
   "status": "NEW",
  "whiteboard": "good first bug"
}
}
</bugzilla>
</bugzilla>
<!--
  Explanation of bugzilla query:
* 923920 is the tracker. Every item should be listed as a blocker.
* 960728 is the devtools tracker
* We only list "NEW" bugs, as ASSIGNED or RESOLVED is not ready to work on.
* The whiteboard selection is used to exclude meta bugs (e.g., for SeaMonkey and DevTools) that hang below this tracker.
-->


== Identifying and changing inline code patterns ==
== Identifying and changing inline code patterns ==
Line 53: Line 71:
Examples:
Examples:
  <a href="foo.html" style="text-decoration: none; color: pink;">click me</a>
  <a href="foo.html" style="text-decoration: none; color: pink;">click me</a>
  <div style="position:aboslute; z-layer: -1; border: 1px solid blue; min-width: 250px"></div>
  &lt;div style="position:aboslute; z-layer: -1; border: 1px solid blue; min-width: 250px"></div>


== Common pitfalls  ==
== Common pitfalls  ==
Line 81: Line 99:
* [https://bugzilla.mozilla.org/show_bug.cgi?id=956484 Neil Bleasdale patched about:privatebrowsing]
* [https://bugzilla.mozilla.org/show_bug.cgi?id=956484 Neil Bleasdale patched about:privatebrowsing]
* [https://bugzilla.mozilla.org/show_bug.cgi?id=948899 Errietta Kostala patched about:addons on Firefox for Android]
* [https://bugzilla.mozilla.org/show_bug.cgi?id=948899 Errietta Kostala patched about:addons on Firefox for Android]
* [https://bugzilla.mozilla.org/show_bug.cgi?id=980911 Bernd Loeber patched about:accounts]
== Who's involved ==
This project is maintained by Mark Goodwin (mgoodwin) and Frederik Braun (freddyb). You can find us during European daytime on [irc://irc.mozilla.org IRC] in the #security channel. But its good progress builds upon the help by dozens of other Mozillians who have helped with patches, reviews and other feedback.
Confirmed users
239

edits

Navigation menu