Kingsley Yung 7640a38dae script: Use base64ct instead of base64 in SubtleCrypto (#40334) ...

The `SubtleCrypto` interface of WebCrypto API needs to encode and decode
keys in base64 alphabets when exporting/importing keys in JsonWebKey
format.

We currently use the `base64` crate to handle base64 encoding and
decoding. This patch switches to use the `base64ct` crate, which is a
constant-time implementation of base64 alphabets.

Using constant-time implementation to handle base64 encoding and
decoding of cryptographic secret provides a better protection against
time-based sidechannel attack.

Remarks: The multi-line changes in `ecdh_operation.rs` are mostly caused
by `./mach fmt`.

Testing: Refactoring. Existing tests suffice.

Signed-off-by: Kingsley Yung <kingsley@kkoyung.dev>

2025-11-03 12:03:20 +00:00

..

docs

doc: fix broken link to UnrootedMustRoot plugin (#36198)

2025-03-28 10:23:41 +00:00

dom

script: Use base64ct instead of base64 in SubtleCrypto (#40334)

2025-11-03 12:03:20 +00:00

layout_dom

Replace "map(..).unwrap_or(false)" with "is_some_and(..)" everywhere (#40244)

2025-10-28 21:19:04 +00:00

resources

tidy: Add a rule ensuring that // comments are followed by a space in Rust (#38698)

2025-08-18 12:09:09 +00:00

animation_timeline.rs

script: Limit public exports. (#34915)

2025-01-10 08:19:19 +00:00

animations.rs

Upgrade Stylo to 2025-10-01 (#39612)

2025-10-02 01:23:05 +00:00

body.rs

Turn all commented links before functions into doccomments (#40331)

2025-11-01 05:32:45 +00:00

build.rs

script: copy include! files from script_bindings to script's OUT_DIR (#36384)

2025-04-08 19:22:24 +00:00

Cargo.toml

script: Use base64ct instead of base64 in SubtleCrypto (#40334)

2025-11-03 12:03:20 +00:00

clipboard_provider.rs

Add direct script to embedder channel (#39039)

2025-09-02 06:33:44 +00:00

conversions.rs

suppress build warnings when disabling webgpu and webxr (#35379)

2025-02-08 08:16:21 +00:00

devtools.rs

script: Move CSS DOM interfaces to script/dom/css/ (#40241)

2025-10-28 17:40:44 +00:00

document_collection.rs

Replace Hash Algorithm in HashMap/Set with FxHashMap/Set for simple types (#39166)

2025-09-09 08:33:46 +00:00

document_loader.rs

net: Remove CoreResourceThread from FetchThread state (#38422)

2025-08-13 17:40:10 +00:00

drag_data_store.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

fetch.rs

script: Move performance DOM interfaces to script/dom/performance/ (#40262)

2025-10-29 11:41:52 +00:00

iframe_collection.rs

Removed FnvHash and transformed the rest to FxHashmap (#39233)

2025-09-10 13:34:54 +00:00

image_animation.rs

pixels: Store decoded images as RGBA premultiplied data (#40158)

2025-10-31 10:07:38 +00:00

indexed_db.rs

add CanGc as argument to safe_to_jsval (#40175)

2025-10-26 03:15:20 +00:00

init.rs

ohos: Fix JIT detection (#40130)

2025-10-24 18:03:29 +00:00

layout_image.rs

script: Move performance DOM interfaces to script/dom/performance/ (#40262)

2025-10-29 11:41:52 +00:00

lib.rs

Move XPath implementation into its own crate (#39546)

2025-09-30 19:55:10 +00:00

links.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

messaging.rs

script: Make file picker selection flow asynchronous (#39893)

2025-10-20 07:33:11 +00:00

microtask.rs

Combine some access to the thread local variable for script thread. (#38752)

2025-09-11 09:40:32 +00:00

mime.rs

chore: remove repetitive word in comment (#39948)

2025-10-17 08:48:23 +00:00

navigation.rs

constellation: Pass system theme to new Pipelines (#37132)

2025-05-26 12:05:38 +00:00

network_listener.rs

script: Move performance DOM interfaces to script/dom/performance/ (#40262)

2025-10-29 11:41:52 +00:00

realms.rs

Move generated bindings to script_bindings (#36323)

2025-04-04 06:45:08 +00:00

routed_promise.rs

script: add TaskSource argument to route_promise (#36831)

2025-05-04 17:05:27 +00:00

script_module.rs

script: Move performance DOM interfaces to script/dom/performance/ (#40262)

2025-10-29 11:41:52 +00:00

script_mutation_observers.rs

script: Empty pending mutation observers when notifying mutation observers (#39456)

2025-09-29 14:15:07 +00:00

script_runtime.rs

script: Fix script string transfered to mozjs with wrong encoding (#39799)

2025-10-15 07:42:11 +00:00

script_thread.rs

script: Trigger rendering update for skipped resize observations. (#40353)

2025-11-02 14:22:21 +00:00

script_window_proxies.rs

constellation: Always include the WebViewId in Pipeline specific messages (#39974)

2025-10-18 14:23:24 +00:00

security_manager.rs

script: Move performance DOM interfaces to script/dom/performance/ (#40262)

2025-10-29 11:41:52 +00:00

serviceworker_manager.rs

script: replace load_whole_resource with async fetch when constructing a worker (#39671)

2025-10-13 21:11:45 +00:00

stylesheet_loader.rs

script: Move performance DOM interfaces to script/dom/performance/ (#40262)

2025-10-29 11:41:52 +00:00

stylesheet_set.rs

script: Limit public exports. (#34915)

2025-01-10 08:19:19 +00:00

task_manager.rs

Implement fetchLater (#39547)

2025-10-02 07:51:19 +00:00

task_queue.rs

Replace Hash Algorithm in HashMap/Set with FxHashMap/Set for simple types (#39166)

2025-09-09 08:33:46 +00:00

task_source.rs

Implement fetchLater (#39547)

2025-10-02 07:51:19 +00:00

task.rs

script: Measure heap usage of various ignored fields (#38791)

2025-08-20 08:43:58 +00:00

test.rs

script: Move HTML DOM interfaces to script/dom/html/ (#39046)

2025-08-31 01:00:09 +00:00

textinput.rs

Script: len,is_empty and match for DOMString (#39866)

2025-10-23 14:02:28 +00:00

timers.rs

Implement run steps after a timeout (#39994)

2025-10-21 20:59:59 +00:00

unminify.rs

Script: Lazily transform the DOMString into Rust String instead of immediately. (#39509)

2025-10-09 18:18:03 +00:00

webdriver_handlers.rs

Replace "map(..).unwrap_or(false)" with "is_some_and(..)" everywhere (#40244)

2025-10-28 21:19:04 +00:00

window_named_properties.rs

script: Move operations in window_named_properties::get_own_property_descriptor & webdriver_handlers::clone_an_object into unsafe blocks (#38951)

2025-08-26 21:48:25 +00:00

xpath.rs

xpath: Throw a NAMESPACE_ERR DOMException when namespace resolver callback returns invalid value or throws (#40167)

2025-10-27 07:31:28 +00:00