Issue #2693 - Disable CSP reporting by default in the platform.

This is a temporary measure to work around CF OOM situations.
Reporting is desirable normally so webmasters get alerted to CSP issues,
and this should be flipped back on once we can.
This commit is contained in:
Moonchild 2025-02-18 10:03:17 +01:00 committed by roytam1
commit 8b41e53028

View file

@ -2212,7 +2212,7 @@ pref("security.notification_enable_delay", 500);
pref("security.csp.enable", true);
pref("security.csp.experimentalEnabled", false);
pref("security.csp.enableStrictDynamic", true);
pref("security.csp.reporting.enabled", true);
pref("security.csp.reporting.enabled", false);
// Default Content Security Policy to apply to signed contents.
pref("security.signed_content.CSP.default", "script-src 'self'; style-src 'self'");