One feature provided by the BugzillaJS extension  is to add inline treeherder results in bugs. This is done by inserting an iframe in comments with links to treeherder with a specially crafted URL  that gives a summary of the results. With the new CSP, the iframe doesn't load. For some reason I don't get an error in my JS console about this -- I wonder if that's because the iframe is added dynamically. Would it be possible to get an exception to the CSP or to find a better way to implement this? Thanks.  https://addons.mozilla.org/en-US/firefox/addon/bugzillajs/  https://treeherder.mozilla.org/embed/resultset-status/<tree>/<rev>
a better way to implement this would be a patch that adds it to the bug modal view. I will look at the code in a little bit and update this bug with my recommendation.