Re: Intent to ship: Treat cookies set over non-secure HTTP as session cookies

2016-04-16 Thread Martin Thomson
On 17 Apr 2016 2:37 AM, "Haik Aftandilian" wrote: > > Sites might depend on a combination of https and non-https cookies and then > act strangely when a user returns to the site with only the https cookies. This is also known as a security vulnerability. See

Re: PSA: Cancel your old Try pushes

2016-04-16 Thread Nicholas Nethercote
On Sun, Apr 17, 2016 at 3:11 AM, L. David Baron wrote: > > We should instead use data to target advice on use of try to the > correct people, and also use that data to allow people to see where > they fit in in terms of ratios of Try resource usage to pushes, and > breaking the

Re: PSA: Cancel your old Try pushes

2016-04-16 Thread L. David Baron
On Saturday 2016-04-16 10:50 +0100, Gijs Kruitbosch wrote: > On 16/04/2016 01:24, Steve Fink wrote: > >Doesn't everyone keep a tab open to their try page? eg I have > >https://treeherder.mozilla.org/#/jobs?repo=try=sf...@mozilla.com > >open all the time. > > No. Treeherder is too

Re: Intent to ship: Treat cookies set over non-secure HTTP as session cookies

2016-04-16 Thread Haik Aftandilian
On Fri, Apr 15, 2016 at 7:37 PM, Chris Peterson wrote: > On 4/15/16 7:47 AM, Tantek Çelik wrote: > >> What steps can we take in this direction WITHOUT breaking web compat? >> > > Would this feature actually break web compatibility? Or just needlessly > annoy users? > > In

Intent to ship: Document.scrollingElement

2016-04-16 Thread smaug
Hi, I'm planning to enable Document.scrollingElement in release builds (FF48) https://bugzilla.mozilla.org/show_bug.cgi?id=1265032 Implementation bug https://bugzilla.mozilla.org/show_bug.cgi?id=1153322: Document.scrollingElement is designed to be a trivial API to hide inconsistencies in

Re: One Firefox repository to rule them all

2016-04-16 Thread Henri Sivonen
On Sat, Apr 16, 2016 at 8:02 AM, Nicholas Nethercote wrote: > For me, having the CVS history in the mozilla-central repo would be > much more helpful than having all the different repositories in one. For me, too. I rarely need to deal with release branches, but history

Re: PSA: Cancel your old Try pushes

2016-04-16 Thread Gijs Kruitbosch
On 16/04/2016 01:24, Steve Fink wrote: Doesn't everyone keep a tab open to their try page? eg I have https://treeherder.mozilla.org/#/jobs?repo=try=sf...@mozilla.com open all the time. No. Treeherder is too resource-intensive to keep open for long periods of time. I tend to see multi-second