Dactyloidae/dom/security
Moonchild 0a8f50fafa No issue - Adjust CSP URI reporting more closely with the spec.
According to the W3C discussion we should allow websocket URIs to be
reported aside from http/https/ftp ones.
This rewrites things slightly and updates comments to clarify.
We do retain the non-standard reduction to origin only in case the
report is for cross-origin URIs (stops leaking full URIs to the CSP
reported destination).
See https://github.com/w3c/webappsec-csp/issues/735
2025-07-25 07:30:32 +08:00
..
test Issue #2734 - Add base-64 grammar check to CSP nonces where applicable. 2025-06-17 09:29:05 +08:00
ContentVerifier.cpp import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00
ContentVerifier.h import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00
CSPEvalChecker.cpp Issue #2402 - CSP Violation events should have the correct sample for inline contexts. https://bugzilla.mozilla.org/show_bug.cgi?id=1473587 Add preference to increase max length of CSP report source sample. https://bugzilla.mozilla.org/show_bug.cgi?id=1415352 Return valid columnNumber value in CSP violation events. https://bugzilla.mozilla.org/show_bug.cgi?id=1418246 2024-01-11 09:50:12 +08:00
CSPEvalChecker.h Issue #2402 - Workers.setTimeout/setInterval must handle CSP rejections. https://bugzilla.mozilla.org/show_bug.cgi?id=1490165 Has some namespace issues adding the files, so differs slightly. 2024-01-11 09:47:22 +08:00
moz.build Issue #2542 - Part 7: Move SecFetch.* to /netwerk where it belongs. 2024-07-10 14:49:06 +08:00
nsContentSecurityManager.cpp Issue #2736 - Part 1: Provide more consistent principals to CSP. 2025-05-14 14:21:46 +08:00
nsContentSecurityManager.h Issue #1656 - Part 1: Nuke most vim config lines in the tree. 2020-09-25 22:04:12 +08:00
nsCSPContext.cpp No issue - Adjust CSP URI reporting more closely with the spec. 2025-07-25 07:30:32 +08:00
nsCSPContext.h Issue #2466 - Part 1: Reduce nsContentPolicy type usage. 2024-02-08 14:33:28 +08:00
nsCSPParser.cpp Issue #2734 - Add base-64 grammar check to CSP nonces where applicable. 2025-06-17 09:29:05 +08:00
nsCSPParser.h Issue #2466 - Part 3: Implement style-src-elem and style-src-attr 2024-02-08 14:33:59 +08:00
nsCSPService.cpp Issue #2736 - Part 13: Override page CSP for loads by expanded principals. 2025-05-14 15:48:54 +08:00
nsCSPService.h Issue #2405 - Add a pref to disable CSP reporting. 2023-12-21 10:15:17 +08:00
nsCSPUtils.cpp Issue #2728 - Remove obsolete CSP referrer policy. 2025-04-30 22:58:43 +08:00
nsCSPUtils.h Issue #2734 - Add base-64 grammar check to CSP nonces where applicable. 2025-06-17 09:29:05 +08:00
nsMixedContentBlocker.cpp Issue #2542 - Part 1b: Fix dom.securecontext.whitelist code issues 2024-07-10 14:44:56 +08:00
nsMixedContentBlocker.h Issue #2542 - Part 1: Factor out Potentially Trustworthy URI checks. 2024-07-10 14:44:37 +08:00
SRICheck.cpp Issue #1656 - Part 1: Nuke most vim config lines in the tree. 2020-09-25 22:04:12 +08:00
SRICheck.h Issue #1656 - Part 1: Nuke most vim config lines in the tree. 2020-09-25 22:04:12 +08:00
SRILogHelper.h Issue #1656 - Part 1: Nuke most vim config lines in the tree. 2020-09-25 22:04:12 +08:00
SRIMetadata.cpp Issue #1656 - Part 1: Nuke most vim config lines in the tree. 2020-09-25 22:04:12 +08:00
SRIMetadata.h Issue #1656 - Part 1: Nuke most vim config lines in the tree. 2020-09-25 22:04:12 +08:00