wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-09 09:18:42 +09:00
Code Issues Projects Releases Packages Wiki Activity

dom/security: respect security.csp.reporting.enabled in other places

Browse source
This commit is contained in:
roytam1 2025-02-13 21:00:20 +08:00
commit f59ffe2826
1 changed files with 13 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

23
dom/security/nsCSPContext.cpp
View file

@ -263,7 +263,7 @@ nsCSPContext::permitsInternal(CSPDirective aDir,
// Do not send a report or notify observers if this is a preload - the
// decision may be wrong due to the inability to get the nonce, and will
// incorrectly fail the unit tests.
if (!aIsPreload && aSendViolationReports) {
if (CSPService::sCSPReportingEnabled && (!aIsPreload && aSendViolationReports)) {
uint32_t lineNumber = 0;
uint32_t columnNumber = 0;
nsAutoCString spec;
@ -601,13 +601,15 @@ nsCSPContext::GetAllowsInline(CSPDirective aDirective,
}
nsAutoString violatedDirective;
mPolicies[i]->getDirectiveStringForContentType(aDirective, violatedDirective);
reportInlineViolation(aDirective,
aNonce,
aContent,
violatedDirective,
i,
aLineNumber,
aColumnNumber);
if(CSPService::sCSPReportingEnabled) {
reportInlineViolation(aDirective,
aNonce,
aContent,
violatedDirective,
i,
aLineNumber,
aColumnNumber);
}
}
}
return NS_OK;
@ -646,8 +648,9 @@ nsCSPContext::GetAllowsInline(CSPDirective aDirective,
keyword, observerTopic) \
case nsIContentSecurityPolicy::VIOLATION_TYPE_ ## violationType : \
PR_BEGIN_MACRO \
if (!mPolicies[p]->allows(directive##_SRC_DIRECTIVE, keyword, nonceOrHash, \
false)) { \
if (CSPService::sCSPReportingEnabled && \
(!mPolicies[p]->allows(directive##_SRC_DIRECTIVE, keyword, nonceOrHash,\
false))) { \
nsAutoString violatedDirective; \
mPolicies[p]->getDirectiveStringForContentType( \
directive##_SRC_DIRECTIVE, violatedDirective); \