12 commits

Author	SHA1	Message	Date
janekptacijarabaci	a6d927b167	Bug 1469150 - Tests added to check scripts with valid nonce is allowed if URL redirects (follow up)	2019-02-16 00:04:36 +08:00
janekptacijarabaci	c8131a687a	Bug 1469150 - CSP: Scripts with valid nonce get blocked if URL redirects ... https://bugzilla.mozilla.org/show_bug.cgi?id=1469150	2019-02-16 00:04:34 +08:00
Gaming4JC	d4ac94cf3e	Remove support and tests for HSTS priming from the tree. Fixes #384	2019-02-15 23:59:39 +08:00
janekptacijarabaci	8aa17f5b90	moebius#159: CSP - support for "frame-ancestors" in "Content-Security-Policy-Report-Only" ... https://github.com/MoonchildProductions/moebius/pull/159	2019-02-15 23:45:38 +08:00
janekptacijarabaci	6509b677d3	Bug 1288768 - Better error reporting for network errors in workers	2019-02-15 23:42:47 +08:00
wolfbeast	0665a343a5	Add support for CSP v3 "worker-src" directive	2019-02-15 23:35:05 +08:00
janekptacijarabaci	96886141e1	CSP: connect-src 'self' should always include https: and wss: schemes	2019-02-15 23:33:23 +08:00
janekptacijarabaci	ee67abc801	CSP: Support IDNs in connect-src	2019-02-15 23:33:21 +08:00
janekptacijarabaci	7de286b67c	CSP: Ignore nonces on <img> per spec	2019-02-15 23:33:20 +08:00
janekptacijarabaci	54e7645cb6	CSP: Upgrade SO navigational requests per spec.	2019-02-15 23:33:18 +08:00
janekptacijarabaci	a01c9abce8	CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists	2019-02-15 23:33:17 +08:00
Roy Tam	dcd9973243	import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo	2018-01-19 03:59:58 +08:00