Pale Moon c3b6fc86bd Relax CSP restrictions as a workaround for sites ...

Site in question are solely relying on the deprecated `child-src` directive.
Deprecation in CSP-3: https://w3c.github.io/webappsec-csp/#directive-child-src

Important: This is a rather course temporary workaround and should be removed when the standard stabilizes or a more accurate solution is found.
The main reason for this workaround is that sites remove sources from the `script-src`/`default-src` list for workers, expecting it to be handled solely by `child-src`.
Tag #949

2018-07-25 07:15:52 +08:00

..

moz.build

Merge pull request #1 from mozilla/esr38: Esr38 upstream pull

2018-07-24 23:04:07 +08:00

nsIContentSecurityPolicy.idl

Relax CSP restrictions as a workaround for sites

2018-07-25 07:15:52 +08:00