9 commits

Author	SHA1	Message	Date
Moonchild	b6d9a013c8	Issue #80 - De-unify dom/security ... Exception: CSPUtils relies on something in CSPContext, but on Windows it throws in an MSVC include which provides no hints.	2020-05-02 08:25:00 +08:00
wolfbeast	2537698cd2	[CSP] Allow not having a Port for RessourceURI if the Scheme has no ... Default Port	2020-02-13 07:17:36 +08:00
Sebastian Streich	3f25eeefaf	Add checks to respect CSP-wildcard + Ports.	2019-09-06 23:49:53 +08:00
janekptacijarabaci	9578e970f0	Bug 1430758 - No CSP directive for nsIContentPolicy::TYPE_SAVEAS_DOWNLOAD	2019-02-16 00:03:19 +08:00
wolfbeast	0665a343a5	Add support for CSP v3 "worker-src" directive	2019-02-15 23:35:05 +08:00
janekptacijarabaci	96886141e1	CSP: connect-src 'self' should always include https: and wss: schemes	2019-02-15 23:33:23 +08:00
janekptacijarabaci	ee67abc801	CSP: Support IDNs in connect-src	2019-02-15 23:33:21 +08:00
wolfbeast	fd1bb58ea8	CSP should only check host (not including path) when performing frame ancestors checks. ... This has been explicitly stated in the CSP-3 spec.	2019-02-15 23:29:42 +08:00
Roy Tam	dcd9973243	import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo	2018-01-19 03:59:58 +08:00