Closed
Bug 1027966
Opened 12 years ago
Closed 10 years ago
Content Security Policy breaks iframe inserted by extension
Categories
(Core :: DOM: Security, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 615708
People
(Reporter: mgrouchy, Unassigned)
Details
Attachments
(1 file)
|
200.50 KB,
image/png
|
Details |
bufferapp-firefox-csp-bug.png
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.84 Safari/537.36
Steps to reproduce:
1. Sign up for a Buffer Account and login (http://bufferapp.com)
2. Install the Buffer Plugin (http://bufferapp.com/extensions/firefox/download)
3. Visit any repository on Github (ex: http://github.com/mgrouchy/django-stronghold)
4. Press the buffer plugin button in the toolbar.
Actual results:
View javascript errors in the console because of Github's Content Security Policy disallowed the insertion of an iframe. (screenshot attached).
Expected results:
An iframe should be inserted in the page so you can properly use the "buffer" feature of the plugin/app.
Status: UNCONFIRMED → RESOLVED
Closed: 10 years ago
Component: Untriaged → DOM: Security
Product: Firefox → Core
Resolution: --- → DUPLICATE
Summary: Strict Content Security Policy breaks Iframes inserted by Plugins. → Content Security Policy breaks iframe inserted by extension
You need to log in
before you can comment on or make changes to this bug.
Description
•