Meeting 2019-05-29

Round table:

• Bug 1554079 - Maybe add some MOZ_ASSERTS after the changes to ipc lifecycle
• 1309358 [CORS] Add wildcard to Access-Control-Expose-Headers, Access-Control-Allow-Methods, and Access-Control-Allow-Headers
• Telemetry alerts on Nightly
• bugs 1513519, 1502428, 1549398
• DocumentChannel architecture and prototype

Next on triage duty: Kershaw

Valentin

Bug 1551601 - Perform cross-process switch before processing cached redirect [landed]

Bug 1553582 - Intermittent resource_reparenting.html [landed]

Bug 1536744 - Remove nsIProtocolHandler.newURI [landed] WHOO-HOO!

working on

Bug 1554680 - unsafe-outgoing

Bug 1533877 - Write WPT tests for Cross-Origin header

Bug 1548306 - Do not allow the ^ character to appear in the hostname

Bug 1527314 - Expand Cross-Origin-Opener-Policy tests

Bug 1555302 - Ensure that nsStandardURL::Resolve() doesn't parse URLs with a different scheme as relative[]

blocked

Bug 1552886 - Modernize test_trr.js (part 2) r=dragana

mayhemer

• 1553927 - DoS attack on http2 proxy when secure connection fails (e.g. certificate mismatch)
• looking into 1554093 - Intermittent netwerk/test/unit/test_proxyconnect.js | application crashed [@ mozilla::net::nsHttpConnection::OnOutputStreamReady(nsIAsyncOutputStream*)]
• 1545421 - Propagate useful proxy errors to WebExtensions
• BT rebase
• proxy for testing: mayhemer/node_http2_proxy: A simple HTTP/2 proxy with CONNECT method support based on Node.js

Kershaw

Bug 1550426 - [socket process] Consider using ChannelEventQueue in HttpTransactionParent

• r?

Bug 1545523 - [socket process] Assertion failure: mConcurrentCacheAccess, at /netwerk/protocol/http/nsHttpChannel.cpp:1723

• wip

Bug 1549398

• investigating

Junior

Back on Tuesday

Spec Change on Origin header

Plan to do next:

Bug 1504085 - Origin header honors ReferrerPolicy

rebasing larch (waiting fore drafting patches)

remove mIPCOpen for HttpTransactionParent/Child

Dragana

Firefox+neqo working

needinfos and reviews

Bug 1540574 - XMLHttpRequest state must not be LOADING or DONE is sometimes triggered when HTTP2 is used

Nhi

• Core:General triage
• contractor job posting
• sec bug review

next:

• goal review
• contractor hiring