Ship script-src-attr, script-src-elem, style-src-attr and style-src-elem
Categories
(Core :: DOM: Security, task, P2)
Tracking
()
Tracking | Status | |
---|---|---|
firefox108 | --- | fixed |
People
(Reporter: tschuster, Assigned: tschuster)
References
(Blocks 1 open bug)
Details
(Keywords: dev-doc-complete, Whiteboard: [domsecurity-active])
Attachments
(1 file, 1 obsolete file)
(deleted),
text/x-phabricator-request
|
Details |
Assignee | ||
Updated•2 years ago
|
Assignee | ||
Updated•2 years ago
|
Updated•2 years ago
|
Updated•2 years ago
|
Assignee | ||
Comment 1•2 years ago
|
||
Assignee | ||
Comment 2•2 years ago
|
||
I thought we might want to land this later so there is less to backout.
Depends on D158680
Assignee | ||
Comment 4•2 years ago
|
||
It seems like MDN now documents https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src-attr etc. , so I think we really only need to update the compatibility table and add it "New in Firefox".
Comment 5•2 years ago
|
||
bugherder |
Comment 6•2 years ago
|
||
Reopen for D158680 which has not been landed yet.
Updated•2 years ago
|
Assignee | ||
Comment 7•2 years ago
|
||
Moved the test patch to another bug to make it clear this landed.
Comment 8•2 years ago
|
||
Comment on attachment 9297291 [details]
Bug 1782513 - Do not set prefs unnecessarily. r?dveditz
Revision D158681 was moved to bug 1798632. Setting attachment 9297291 [details] to obsolete.
Assignee | ||
Updated•2 years ago
|
Comment 9•2 years ago
|
||
FF108 MDN work for this can be tracked in https://github.com/mdn/content/issues/22113. This is pretty much as suggested by Tom in https://bugzilla.mozilla.org/show_bug.cgi?id=1782513#c4
Updated•2 years ago
|
Description
•