1336663 - CSP blocking on sm-drivertools/new-stable-release.html

Status: RESOLVED WORKSFORME

(SeaMonkey :: Release Engineering, defect)

Description

[Edmund Wong (:ewong)]

The tool that we use to assist SeaMonkey releng to create bugs is:
https://hg.mozilla.org/users/Callek_gmail.com/sm-drivertools/new-stable-release.html,
however, with the recent CSP changes, we are now being CSP blocked and thus not 
able to generate any bugs.

Filing this bug to track the fix.

Comment 1

[Edmund Wong (:ewong)]

:gps, could set the CSP header such that it doesn't break this use case?

Thanks

Comment 2

[Gregory Szorc [:gps]]

Possible, yes. What CSP policy is needed by this tool?

Comment 3

[Edmund Wong (:ewong)]

(In reply to Gregory Szorc [:gps] (disappearing for a month after 2017-02-10) from comment #2)
> Possible, yes. What CSP policy is needed by this tool?

As it's mainly for jquery stuff, and from my quick glance at the code,
Dynamic Javascript code evaluation.

Am I correct, Callek?

Comment 4

[Justin Wood (:Callek)]

I'm not aware of what exists for CSP policies that are possible/appropriate... sadly...

Comment 5

[Edmund Wong (:ewong)]

I have found a different way of running this page.  So closing this as wfm.