Moonchild
721ded9b48
Issue #2466 - Part 3: Implement style-src-elem and style-src-attr
2024-02-08 14:33:59 +08:00
Moonchild
ff01a35bdb
Issue #2466 - Part 2: Implement script-src-elem and script-src-attr
2024-02-08 14:33:43 +08:00
Moonchild
4ea2206c15
Issue #2466 - Part 1: Reduce nsContentPolicy type usage.
...
Use CSPDirective instead, since it directly deals with CSP anyway.
This cleanup prepares for the following changes.
2024-02-08 14:33:28 +08:00
Brian Smith
b842a1937a
Issue #2402 - Fill in column in CSP Report.
2024-01-11 09:51:07 +08:00
Brian Smith
e21d466d13
Issue #2402 - Print Related JS-Line on CSP Violation (if any). https://bugzilla.mozilla.org/show_bug.cgi?id=1100630
2024-01-11 09:50:49 +08:00
Brian Smith
5b068f3726
Issue #2402 - CSP Violation events should have the correct sample for inline contexts. https://bugzilla.mozilla.org/show_bug.cgi?id=1473587 Add preference to increase max length of CSP report source sample. https://bugzilla.mozilla.org/show_bug.cgi?id=1415352 Return valid columnNumber value in CSP violation events. https://bugzilla.mozilla.org/show_bug.cgi?id=1418246
2024-01-11 09:50:12 +08:00
Brian Smith
9cd8aafeaa
Issue #2402 - CSP violation: blockedURI inline/eval. https://bugzilla.mozilla.org/show_bug.cgi?id=1418241 CSP: Blocked URI should be empty for inline violations. https://bugzilla.mozilla.org/show_bug.cgi?id=1236222
2024-01-11 09:46:53 +08:00
Brian Smith
1e0851158e
Issue #2402 - Fix SecurityPolicyViolationEvent.violatedDirective. https://bugzilla.mozilla.org/show_bug.cgi?id=1418243
2024-01-11 09:43:27 +08:00
Brian Smith
ec29404083
Issue #2402 - Implement security policy violation event. https://bugzilla.mozilla.org/show_bug.cgi?id=1037335
2024-01-11 09:43:10 +08:00
Moonchild
f1f9dde29e
Issue #2405 - Add a pref to disable CSP reporting.
...
Resolves #2405
2023-12-21 10:15:17 +08:00
Moonchild
95120acbb2
[DOM security] Be more explicit about CSP checks and reports.
2022-09-22 10:18:33 +08:00
Moonchild
ed7e49eda6
Issue #1656 - Part 2: Unmangle some unfortunate UTF-8 victims.
...
The poor fellows got lost in an ASCII-interpretation of the world.
2020-09-25 22:04:14 +08:00
Moonchild
8c395520d9
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
wolfbeast
c2fafd67b0
Fix whitelisting of JavaScript-uris by CSP hash.
2019-09-06 23:50:03 +08:00
wolfbeast
719ac1bc38
Remove MOZ_B2G leftovers and some dead B2G-only components.
2019-02-15 23:57:05 +08:00
janekptacijarabaci
9e52126f1a
Bug 1329288: Allow content policy consumers to identify contentPolicy checks from docshell
2019-02-15 23:49:24 +08:00
janekptacijarabaci
8aa17f5b90
moebius#159: CSP - support for "frame-ancestors" in "Content-Security-Policy-Report-Only"
...
https://github.com/MoonchildProductions/moebius/pull/159
2019-02-15 23:45:38 +08:00
janekptacijarabaci
7de286b67c
CSP: Ignore nonces on <img> per spec
2019-02-15 23:33:20 +08:00
janekptacijarabaci
a01c9abce8
CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists
2019-02-15 23:33:17 +08:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00
