11 commits

Author	SHA1	Message	Date
janekptacijarabaci	8aa17f5b90	moebius#159: CSP - support for "frame-ancestors" in "Content-Security-Policy-Report-Only" ... https://github.com/MoonchildProductions/moebius/pull/159	2019-02-15 23:45:38 +08:00
janekptacijarabaci	6509b677d3	Bug 1288768 - Better error reporting for network errors in workers	2019-02-15 23:42:47 +08:00
wolfbeast	0665a343a5	Add support for CSP v3 "worker-src" directive	2019-02-15 23:35:05 +08:00
janekptacijarabaci	96886141e1	CSP: connect-src 'self' should always include https: and wss: schemes	2019-02-15 23:33:23 +08:00
janekptacijarabaci	ee67abc801	CSP: Support IDNs in connect-src	2019-02-15 23:33:21 +08:00
janekptacijarabaci	7de286b67c	CSP: Ignore nonces on <img> per spec	2019-02-15 23:33:20 +08:00
janekptacijarabaci	54e7645cb6	CSP: Upgrade SO navigational requests per spec.	2019-02-15 23:33:18 +08:00
janekptacijarabaci	a01c9abce8	CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists	2019-02-15 23:33:17 +08:00
wolfbeast	4923ad3b10	Explicitly cancel channel after mixed content redirect.	2019-02-15 23:30:31 +08:00
wolfbeast	fd1bb58ea8	CSP should only check host (not including path) when performing frame ancestors checks. ... This has been explicitly stated in the CSP-3 spec.	2019-02-15 23:29:42 +08:00
Roy Tam	dcd9973243	import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo	2018-01-19 03:59:58 +08:00