Closed Bug 1449872 Opened 7 years ago Closed 6 years ago

Apply Meta CSP to more Content Privileged about: pages

Categories

(Core :: DOM: Security, enhancement, P3)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: ckerschb, Assigned: ckerschb)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog1])

Attachments

(1 obsolete file)

Within Bug 1436808 we started to apply a meta CSP to content-privileged about pages. Within this bug we should continue that effort and apply a meta CSP to: about:blocked about:certerror about:rights about:checkerboard about:credits about:logo about:neterror about:srcdoc (don't think that's feasible) about:printpreview
Blocks: 1430748
Priority: -- → P3
See Also: → 1436808
Whiteboard: [domsecurity-backlog1]
Attachment #8966129 - Attachment is obsolete: true
See Also: → 923902
Assignee: nobody → cegvinoth
Status: NEW → ASSIGNED
Depends on: 1459544
Depends on: 1461438
Depends on: 1490977
See Also: → 1492063
It seems all content privileged about: pages on desktop are shipping with a CSP. The only exceptions are: * blank * printpreview * srcdoc and we can't apply a CSP to those about: pages.
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Depends on: 1499354
Assignee: cegvinoth → ckerschb
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: