Moonchild
51022b98b2
Issue #2734 - Add base-64 grammar check to CSP nonces where applicable.
...
Resolves #2734
2025-06-17 09:29:05 +08:00
Moonchild
0331e633bd
Issue #2728 - Remove obsolete CSP referrer policy.
...
This has been superseded by the dedicated Referrer-policy header.
Resolves #2728
2025-04-30 22:58:43 +08:00
Moonchild
721ded9b48
Issue #2466 - Part 3: Implement style-src-elem and style-src-attr
2024-02-08 14:33:59 +08:00
Moonchild
ff01a35bdb
Issue #2466 - Part 2: Implement script-src-elem and script-src-attr
2024-02-08 14:33:43 +08:00
Brian Smith
1349cf2d01
Issue #2402 - Remove child-src deprecation warning. https://bugzilla.mozilla.org/show_bug.cgi?id=1486331
2024-01-11 09:42:51 +08:00
Brian Smith
bfabbcd311
Issue #2402 - Ignore empty CSP directives. https://bugzilla.mozilla.org/show_bug.cgi?id=1439425
2024-01-11 09:42:36 +08:00
Moonchild
5dfded811d
Issue #80 - reinstated unified building for some large chunks of our code.
...
This should reduce compile complexity saving time and reducing linker stress.
2022-09-07 10:36:23 +08:00
Moonchild
8c395520d9
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
wolfbeast
0665a343a5
Add support for CSP v3 "worker-src" directive
2019-02-15 23:35:05 +08:00
janekptacijarabaci
96886141e1
CSP: connect-src 'self' should always include https: and wss: schemes
2019-02-15 23:33:23 +08:00
wolfbeast
fd1bb58ea8
CSP should only check host (not including path) when performing frame ancestors checks.
...
This has been explicitly stated in the CSP-3 spec.
2019-02-15 23:29:42 +08:00
roytam1
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00