4 commits

Author	SHA1	Message	Date
janekptacijarabaci	96886141e1	CSP: connect-src 'self' should always include https: and wss: schemes	2019-02-15 23:33:23 +08:00
janekptacijarabaci	ee67abc801	CSP: Support IDNs in connect-src	2019-02-15 23:33:21 +08:00
wolfbeast	fd1bb58ea8	CSP should only check host (not including path) when performing frame ancestors checks. ... This has been explicitly stated in the CSP-3 spec.	2019-02-15 23:29:42 +08:00
Roy Tam	dcd9973243	import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo	2018-01-19 03:59:58 +08:00