wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-05 15:28:39 +09:00
Code Issues Projects Releases Packages Wiki Activity

CSP: connect-src 'self' should always include https: and wss: schemes

Browse source
This commit is contained in:
janekptacijarabaci 2017-08-25 10:38:52 +02:00 • committed by Roy Tam
commit 96886141e1
8 changed files with 168 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dom/security/nsCSPParser.cpp
View file

@ -532,7 +532,7 @@ nsCSPParser::keywordSource()
// Special case handling for 'self' which is not stored internally as a keyword,
// but rather creates a nsCSPHostSrc using the selfURI
if (CSP_IsKeyword(mCurToken, CSP_SELF)) {
return CSP_CreateHostSrcFromURI(mSelfURI);
return CSP_CreateHostSrcFromSelfURI(mSelfURI);
}
if (CSP_IsKeyword(mCurToken, CSP_STRICT_DYNAMIC)) {