Moonchild
52f31a682d
Issue #2728 - Remove obsolete CSP referrer policy.
...
This has been superseded by the dedicated Referrer-policy header.
Resolves #2728
2025-04-24 14:27:39 +02:00
Moonchild
06eca091f7
Issue #2466 - Part 3: Implement style-src-elem and style-src-attr
2024-02-04 23:24:50 +01:00
Moonchild
8fc5e4bd24
Issue #2466 - Part 2: Implement script-src-elem and script-src-attr
2024-02-04 20:15:14 +01:00
Moonchild
73e94dd628
Issue #2466 - Part 1: Reduce nsContentPolicy type usage.
...
Use CSPDirective instead, since it directly deals with CSP anyway.
This cleanup prepares for the following changes.
2024-02-04 13:33:32 +01:00
Brian Smith
80207d6d3f
Issue #2402 - importScripts should be governed by script-src in Web Workers.
...
https://bugzilla.mozilla.org/show_bug.cgi?id=1322111
Add TYPE_INTERNAL_WORKER_IMPORT_SCRIPTS content policy.
Update the Cache API schema to account for new nsIContentPolicy type.
2024-01-06 15:32:04 -06:00
Brian Smith
ec5d6d9b5d
Issue #2402 - Fix SecurityPolicyViolationEvent.violatedDirective.
...
https://bugzilla.mozilla.org/show_bug.cgi?id=1418243
2024-01-06 15:32:02 -06:00
Brian Smith
ba183ce002
Issue #2402 - Ignore empty CSP directives.
...
https://bugzilla.mozilla.org/show_bug.cgi?id=1439425
2024-01-06 15:32:02 -06:00
Moonchild
92452d7614
Issue #80 - reinstated unified building for some large chunks of our code.
...
This should reduce compile complexity saving time and reducing linker stress.
2022-09-04 11:50:24 +00:00
Moonchild
a680bdc637
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-23 13:55:00 +00:00
Moonchild
eb8a6523b8
Issue #80 - De-unify dom/security
...
Exception: CSPUtils relies on something in CSPContext, but on
Windows it throws in an MSVC include which provides no hints.
2020-04-23 14:13:58 +00:00
wolfbeast
6184ed7555
[CSP] Allow not having a Port for RessourceURI if the Scheme has no
...
Default Port
2020-02-11 12:30:45 +01:00
Sebastian Streich
334a892eb5
Add checks to respect CSP-wildcard + Ports.
2019-09-05 09:48:51 +02:00
janekptacijarabaci
bf9d01df16
Bug 1430758 - No CSP directive for nsIContentPolicy::TYPE_SAVEAS_DOWNLOAD
2018-06-17 09:43:40 +02:00
wolfbeast
c3039dadd9
Add support for CSP v3 "worker-src" directive
2018-03-03 11:22:15 +01:00
janekptacijarabaci
896e23c20e
CSP: connect-src 'self' should always include https: and wss: schemes
2018-02-22 11:30:29 +01:00
janekptacijarabaci
cdcfbde10d
CSP: Support IDNs in connect-src
2018-02-22 11:23:16 +01:00
wolfbeast
13e9a0c06d
CSP should only check host (not including path) when performing frame ancestors checks.
...
This has been explicitly stated in the CSP-3 spec.
2018-02-06 09:03:16 +01:00
Matt A. Tobin
5f8de423f1
Add m-esr52 at 52.6.0
2018-02-02 04:16:08 -05:00