wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-05 15:28:39 +09:00
Code Issues Projects Releases Packages Wiki Activity

moebius#159: CSP - support for "frame-ancestors" in "Content-Security-Policy-Report-Only"

Browse source 
https://github.com/MoonchildProductions/moebius/pull/159
This commit is contained in:
janekptacijarabaci 2018-04-14 22:22:59 +02:00 • committed by Roy Tam
commit 8aa17f5b90
5 changed files with 74 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
dom/security/nsCSPContext.cpp
View file

@ -219,14 +219,6 @@ nsCSPContext::permitsInternal(CSPDirective aDir,
nsAutoString violatedDirective;
for (uint32_t p = 0; p < mPolicies.Length(); p++) {
// According to the W3C CSP spec, frame-ancestors checks are ignored for
// report-only policies (when "monitoring").
if (aDir == nsIContentSecurityPolicy::FRAME_ANCESTORS_DIRECTIVE &&
mPolicies[p]->getReportOnlyFlag()) {
continue;
}
if (!mPolicies[p]->permits(aDir,
aContentLocation,
aNonce,