janekptacijarabaci
|
846daf6d3b
|
Bug 1182569: Update ContentSecurityManager to handle docshell loads
|
2019-02-15 23:54:22 +08:00 |
|
janekptacijarabaci
|
7f09dee539
|
moebius#187: DOM - nsIContentPolicy - context (document)
https://github.com/MoonchildProductions/moebius/pull/187
|
2019-02-15 23:49:47 +08:00 |
|
janekptacijarabaci
|
850879535a
|
Revert "Bug 1182569: Update ContentSecurityManager to handle docshell loads"
This reverts commit 2e33335820b2816bee111e78588ac82e401c86ae.
|
2019-02-15 23:49:44 +08:00 |
|
janekptacijarabaci
|
983926cce7
|
Bug 1182569: Update ContentSecurityManager to handle docshell loads
native in moebius
|
2019-02-15 23:49:30 +08:00 |
|
janekptacijarabaci
|
9e52126f1a
|
Bug 1329288: Allow content policy consumers to identify contentPolicy checks from docshell
|
2019-02-15 23:49:24 +08:00 |
|
janekptacijarabaci
|
79fb0b8506
|
Bug 1329288 - Test ContentPolicy blocks opening a new window
|
2019-02-15 23:49:23 +08:00 |
|
janekptacijarabaci
|
18d312235d
|
moebius#230: Consider blocking top level window data: URIs (part 3/3 without tests)
https://github.com/MoonchildProductions/moebius/pull/230
|
2019-02-15 23:49:20 +08:00 |
|
janekptacijarabaci
|
73f89fe562
|
moebius#226: Consider blocking top level window data: URIs (part 2/2 without tests)
https://github.com/MoonchildProductions/moebius/pull/226
|
2019-02-15 23:49:19 +08:00 |
|
janekptacijarabaci
|
712d19e1b7
|
moebius#223: Consider blocking top level window data: URIs (part 1/3 without tests)
https://github.com/MoonchildProductions/moebius/pull/223
|
2019-02-15 23:49:17 +08:00 |
|
janekptacijarabaci
|
8aa17f5b90
|
moebius#159: CSP - support for "frame-ancestors" in "Content-Security-Policy-Report-Only"
https://github.com/MoonchildProductions/moebius/pull/159
|
2019-02-15 23:45:38 +08:00 |
|
janekptacijarabaci
|
6509b677d3
|
Bug 1288768 - Better error reporting for network errors in workers
|
2019-02-15 23:42:47 +08:00 |
|
wolfbeast
|
0665a343a5
|
Add support for CSP v3 "worker-src" directive
|
2019-02-15 23:35:05 +08:00 |
|
janekptacijarabaci
|
96886141e1
|
CSP: connect-src 'self' should always include https: and wss: schemes
|
2019-02-15 23:33:23 +08:00 |
|
janekptacijarabaci
|
ee67abc801
|
CSP: Support IDNs in connect-src
|
2019-02-15 23:33:21 +08:00 |
|
janekptacijarabaci
|
7de286b67c
|
CSP: Ignore nonces on <img> per spec
|
2019-02-15 23:33:20 +08:00 |
|
janekptacijarabaci
|
54e7645cb6
|
CSP: Upgrade SO navigational requests per spec.
|
2019-02-15 23:33:18 +08:00 |
|
janekptacijarabaci
|
a01c9abce8
|
CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists
|
2019-02-15 23:33:17 +08:00 |
|
wolfbeast
|
4923ad3b10
|
Explicitly cancel channel after mixed content redirect.
|
2019-02-15 23:30:31 +08:00 |
|
wolfbeast
|
fd1bb58ea8
|
CSP should only check host (not including path) when performing frame ancestors checks.
This has been explicitly stated in the CSP-3 spec.
|
2019-02-15 23:29:42 +08:00 |
|
Roy Tam
|
dcd9973243
|
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
|
2018-01-19 03:59:58 +08:00 |
|