Brian Smith
6979441734
Issue #2402 - importScripts should be governed by script-src in Web Workers. https://bugzilla.mozilla.org/show_bug.cgi?id=1322111 Add TYPE_INTERNAL_WORKER_IMPORT_SCRIPTS content policy. Update the Cache API schema to account for new nsIContentPolicy type.
2024-01-11 09:45:52 +08:00
Brian Smith
1e0851158e
Issue #2402 - Fix SecurityPolicyViolationEvent.violatedDirective. https://bugzilla.mozilla.org/show_bug.cgi?id=1418243
2024-01-11 09:43:27 +08:00
Brian Smith
bfabbcd311
Issue #2402 - Ignore empty CSP directives. https://bugzilla.mozilla.org/show_bug.cgi?id=1439425
2024-01-11 09:42:36 +08:00
Moonchild
5dfded811d
Issue #80 - reinstated unified building for some large chunks of our code.
...
This should reduce compile complexity saving time and reducing linker stress.
2022-09-07 10:36:23 +08:00
Moonchild
8c395520d9
Issue #1656 - Part 1: Nuke most vim config lines in the tree.
...
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
2020-09-25 22:04:12 +08:00
Moonchild
b6d9a013c8
Issue #80 - De-unify dom/security
...
Exception: CSPUtils relies on something in CSPContext, but on
Windows it throws in an MSVC include which provides no hints.
2020-05-02 08:25:00 +08:00
wolfbeast
2537698cd2
[CSP] Allow not having a Port for RessourceURI if the Scheme has no
...
Default Port
2020-02-13 07:17:36 +08:00
Sebastian Streich
3f25eeefaf
Add checks to respect CSP-wildcard + Ports.
2019-09-06 23:49:53 +08:00
janekptacijarabaci
9578e970f0
Bug 1430758 - No CSP directive for nsIContentPolicy::TYPE_SAVEAS_DOWNLOAD
2019-02-16 00:03:19 +08:00
wolfbeast
0665a343a5
Add support for CSP v3 "worker-src" directive
2019-02-15 23:35:05 +08:00
janekptacijarabaci
96886141e1
CSP: connect-src 'self' should always include https: and wss: schemes
2019-02-15 23:33:23 +08:00
janekptacijarabaci
ee67abc801
CSP: Support IDNs in connect-src
2019-02-15 23:33:21 +08:00
wolfbeast
fd1bb58ea8
CSP should only check host (not including path) when performing frame ancestors checks.
...
This has been explicitly stated in the CSP-3 spec.
2019-02-15 23:29:42 +08:00
roytam1
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00