We shouldn't even be looking at the wrong script URLs of course, but we could also think about injecting the scripts in a way that the page's CSP (and other policies like the Integrity-Policy) apply.
Bug 2007302 Comment 3 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
We shouldn't even be looking at the wrong script URLs of course, but we could also think about injecting the scripts in a way that the page's CSP (and other policies like the Integrity-Policy) apply. Edit: Actually this might be complicated for cases where the original script tag has a nonce.