wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-08-19 19:03:07 +09:00
Code Issues Projects Releases Packages Wiki Activity

[DOM security] Be more explicit about CSP checks and reports.

Browse source
This commit is contained in:
Moonchild 2022-09-21 14:08:22 +00:00 • committed by roytam1
commit 95120acbb2
5 changed files with 70 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

3
dom/html/HTMLSharedElement.cpp
View file

@ -191,7 +191,8 @@ SetBaseURIUsingFirstBaseWithHref(nsIDocument* aDocument, nsIContent* aMustMatch)
// http://www.w3.org/TR/CSP2/#directive-default-src
bool cspPermitsBaseURI = true;
rv = csp->Permits(newBaseURI, nsIContentSecurityPolicy::BASE_URI_DIRECTIVE,
true, &cspPermitsBaseURI);
true /* aSpecific */, true /* aSendViolationReports */,
&cspPermitsBaseURI);
if (NS_FAILED(rv) || !cspPermitsBaseURI) {
newBaseURI = nullptr;
}