wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-04 06:48:38 +09:00
Code Issues Projects Releases Packages Wiki Activity

Issue #2466 - Part 2: Implement script-src-elem and script-src-attr

Browse source
This commit is contained in:
Moonchild 2024-02-04 20:15:14 +01:00 • committed by roytam1
commit ff01a35bdb
12 changed files with 117 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

4
dom/jsurl/nsJSProtocolHandler.cpp
View file

@ -179,8 +179,10 @@ nsresult nsJSThunk::EvaluateScript(nsIChannel *aChannel,
rv = principal->GetCsp(getter_AddRefs(csp));
NS_ENSURE_SUCCESS(rv, rv);
if (csp) {
// javascript: is a "navigation" type, so script-src-elem applies.
// https://w3c.github.io/webappsec-csp/#effective-directive-for-inline-check
bool allowsInlineScript = true;
rv = csp->GetAllowsInline(nsIContentSecurityPolicy::SCRIPT_SRC_DIRECTIVE,
rv = csp->GetAllowsInline(nsIContentSecurityPolicy::SCRIPT_SRC_ELEM_DIRECTIVE,
EmptyString(), // aNonce
true, // aParserCreated
EmptyString(), // aContent