Closed
Bug 1797070
Opened 3 years ago
Closed 3 years ago
CSP: Add basic implementation of unsafe-hashes behind a flag
Categories
(Core :: DOM: Security, task, P2)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
108 Branch
| Tracking | Status | |
|---|---|---|
| firefox108 | --- | fixed |
People
(Reporter: tschuster, Assigned: tschuster)
References
Details
(Whiteboard: [domsecurity-active])
Attachments
(1 file)
A basic implementation of unsafe-hashes actually fits quite well into our existing implementation. However there is one preexisting problem not directly related to unsafe-hashes, but causes most of the test failures: We always treat javascript: as inline script elements instead of attributes.
|
Assignee | |
Updated•3 years ago
|
No longer blocks: CVE-2022-46873
|
|
Assignee | |
Updated•3 years ago
|
Blocks: CVE-2022-46873
|
|
Assignee | |
Comment 1•3 years ago
|
||
|
||
Updated•3 years ago
|
Assignee: nobody → tschuster
Severity: -- → S3
Status: NEW → ASSIGNED
Priority: -- → P2
|
||
Updated•3 years ago
|
Whiteboard: [domsecurity-active]
|
||
Updated•3 years ago
|
Attachment #9299859 -
Attachment description: WIP: Bug 1797070 - CSP: Add a basic implementation of unsafe-hashes behind a flag → Bug 1797070 - CSP: Add a basic implementation of unsafe-hashes behind a flag. r?freddyb
Pushed by tschuster@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/89eced845825
CSP: Add a basic implementation of unsafe-hashes behind a flag. r=freddyb
|
||
Comment 3•3 years ago
|
||
| bugherder | ||
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
status-firefox108:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 108 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•