9 commits

Author	SHA1	Message	Date
Moonchild	ff01a35bdb	Issue #2466 - Part 2: Implement script-src-elem and script-src-attr	2024-02-08 14:33:43 +08:00
Brian Smith	811bcbefd4	Issue #2402 - Optionally strictly enforce the MIME type of scripts loaded by importScripts(). https://bugzilla.mozilla.org/show_bug.cgi?id=1514680 This is default on in Firefox 67 but Moonchild requested it be set off by default.	2024-01-11 09:46:39 +08:00
Brian Smith	1349cf2d01	Issue #2402 - Remove child-src deprecation warning. https://bugzilla.mozilla.org/show_bug.cgi?id=1486331	2024-01-11 09:42:51 +08:00
wolfbeast	59ee48bfb0	Prevent loading of document subresources over FTP.	2019-03-16 07:01:31 +08:00
janekptacijarabaci	acb5d5839b	Fixed misleading console error message for multiple CORS headers	2019-02-16 00:10:27 +08:00
janekptacijarabaci	712d19e1b7	moebius#223: Consider blocking top level window data: URIs (part 1/3 without tests) ... https://github.com/MoonchildProductions/moebius/pull/223	2019-02-15 23:49:17 +08:00
wolfbeast	0665a343a5	Add support for CSP v3 "worker-src" directive	2019-02-15 23:35:05 +08:00
janekptacijarabaci	a01c9abce8	CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists	2019-02-15 23:33:17 +08:00
Roy Tam	dcd9973243	import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo	2018-01-19 03:59:58 +08:00