Open Bug 1349961 Opened 7 years ago Updated 6 years ago

Add CSP headers for attachment.cgi

Categories

(bugzilla.mozilla.org :: General, enhancement, P3)

Production
enhancement

Tracking

()

People

(Reporter: dylan, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: bmo-small)

Attachments

(1 obsolete file)

This would be the logical next place to add CSP headers. We have some interesting options considering the iframe-ing of html attachments.

Also, "sandbox" might be fun for this.
Lemme know if I can be of any help here! Sandboxing all of these would be great if we could do it.
Attached file pull request (obsolete) —
Assignee: nobody → kohei.yoshino
Status: NEW → ASSIGNED
I forgot why I started to work on this... I’ll revisit later, but please feel free to take it if someone’s interested.
Assignee: kohei.yoshino → nobody
Status: ASSIGNED → NEW
Attachment #8988247 - Attachment is obsolete: true
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: