Closed Bug 1449872 Opened 3 years ago Closed 3 years ago

Apply Meta CSP to more Content Privileged about: pages

Categories

(Core :: DOM: Security, enhancement, P3)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: ckerschb, Assigned: ckerschb)

References

(Depends on 2 open bugs, Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog1])

Attachments

(1 obsolete file) 

Within Bug 1436808 we started to apply a meta CSP to content-privileged about pages. Within this bug we should continue that effort and apply a meta CSP to:

about:blocked
about:certerror
about:rights
about:checkerboard
about:credits
about:logo
about:neterror
about:srcdoc (don't think that's feasible)
about:printpreview
Blocks: 1430748
Priority: -- → P3
See Also: → 1436808
Whiteboard: [domsecurity-backlog1]
Attachment #8966129 - Attachment is obsolete: true
See Also: → 923902
Assignee: nobody → cegvinoth
Status: NEW → ASSIGNED
Depends on: 1459544
Depends on: 1461438
Depends on: 1490977
See Also: → 1492063
It seems all content privileged about: pages on desktop are shipping with a CSP. The only exceptions are:
* blank
* printpreview
* srcdoc
and we can't apply a CSP to those about: pages.
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Depends on: 1499354
Assignee: cegvinoth → ckerschb
Duplicate of this bug: 923902
You need to log in before you can comment on or make changes to this bug.