Issue #2736 - Part 6: Re-work <script> src attribute.

Use subject principal as triggering principal in <script> "src" attribute.
This commit is contained in:
Moonchild 2025-04-29 09:47:42 +02:00 committed by roytam1
commit 1f638b22ec
6 changed files with 47 additions and 17 deletions

View file

@ -68,6 +68,12 @@ public:
return mUri;
}
nsIPrincipal* GetScriptURITriggeringPrincipal()
{
NS_PRECONDITION(mFrozen, "Not ready for this call yet!");
return mSrcTriggeringPrincipal;
}
/**
* Script source text for inline script elements.
*/
@ -363,6 +369,11 @@ protected:
*/
nsCOMPtr<nsIURI> mUri;
/**
* The triggering principal for the src URL.
*/
nsCOMPtr<nsIPrincipal> mSrcTriggeringPrincipal;
/**
* The creator parser of a non-defer, non-async parser-inserted script.
*/