Open Bug 1584485 Opened 5 years ago Updated 2 years ago

Remove 'unsafe-inline' from style-src within about:newtab by removing remote CSS

Categories

(Firefox :: New Tab Page, task, P2)

Product:
Firefox
Component:
New Tab Page
Type:
task

Tracking

()

People

(Reporter: ckerschb, Unassigned)

References

Details

We should really try to remove 'unsafe-inline' from the CSP of about:newtab.

Bug 1500061 comment 5 noted that unsafe-inline can't be removed until bug 1513311's functionality is reworked or removed.

Up to pocket if this functionality is still desired especially with hardcoded layouts but if there's plans for remote layouts perhaps via remote settings, there would probably be some desire to have the ability to have custom styling that don't need to ride the trains.

Component: Messaging System → New Tab Page
See Also: → 1500061, 1513311
Summary: Remove 'unsafe-inline' from style-src within about:newtab → Remove 'unsafe-inline' from style-src within about:newtab by removing remote CSS
Priority: -- → P2
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.