1943360 - Add a CSP to devtools documents

Status: RESOLVED FIXED

(DevTools :: General, task)

Description

[Tom Schuster]

I think some devtools documents already have a Content-Security-Policy, but the following don't seem to have any:

chrome://devtools/content/accessibility/index.html
chrome://devtools/content/debugger/index.html
chrome://devtools/content/dom/index.html
chrome://devtools/content/framework/browser-toolbox/window.html
chrome://devtools/content/framework/toolbox-window.xhtml
chrome://devtools/content/inspector/index.xhtml
chrome://devtools/content/inspector/markup/markup.xhtml
chrome://devtools/content/memory/index.xhtml
chrome://devtools/content/netmonitor/index.html
chrome://devtools/content/performance-new/panel/index.xhtml
chrome://devtools/content/responsive/toolbar.xhtml
chrome://devtools/content/shared/sourceeditor/codemirror/cmiframe.html
chrome://devtools/content/storage/index.xhtml
chrome://devtools/content/styleeditor/index.xhtml
chrome://devtools/content/webconsole/index.html
chrome://devtools/content/shared/webextension-fallback.html

This list is probably incomplete, because I am still collecting data.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'DevTools::Debugger' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Debugger. r?#devtools-reviewers

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/e1554e515f01
Add a CSP to the devtool's Debugger. r=devtools-reviewers,ochameau

Comment 4

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Accessibility tab. r?#devtools-reviewers

Comment 5

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/e1554e515f01

Comment 6

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Console. r?#devtools-reviewers

Comment 7

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Console. r?#devtools-reviewers

Comment 8

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Inspector. r?#devtools-reviewers

Comment 9

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Netmonitor. r?#devtools-reviewers

Comment 10

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Storage tab. r?#devtools-reviewers

Comment 11

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Style Editor. r?#devtools-reviewers

Comment 12

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/bf1e410e174f
Add a CSP to the devtool's Accessibility tab. r=devtools-reviewers,nchevobbe

Comment 13

[amarc]

https://hg.mozilla.org/mozilla-central/rev/bf1e410e174f

Comment 14

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Memory tab. r?#devtools-reviewers

Comment 15

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Responsive toolbar. r?#devtools-reviewers

Comment 16

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5fe5ab69c5c9
Add a CSP to the devtool's Console. r=devtools-reviewers,bomsy
https://hg.mozilla.org/integration/autoland/rev/b93d5e9313de
Add a CSP to the devtool's Inspector. r=devtools-reviewers,bomsy
https://hg.mozilla.org/integration/autoland/rev/387203fc61b0
Add a CSP to the devtool's Netmonitor. r=devtools-reviewers,bomsy
https://hg.mozilla.org/integration/autoland/rev/c631343be068
Add a CSP to the devtool's Storage tab. r=devtools-reviewers,bomsy
https://hg.mozilla.org/integration/autoland/rev/9362682258fe
Add a CSP to the devtool's Style Editor. r=devtools-reviewers,bomsy

Comment 17

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/5fe5ab69c5c9
https://hg.mozilla.org/mozilla-central/rev/b93d5e9313de
https://hg.mozilla.org/mozilla-central/rev/387203fc61b0
https://hg.mozilla.org/mozilla-central/rev/c631343be068
https://hg.mozilla.org/mozilla-central/rev/9362682258fe

Comment 18

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/1e300692756d
Add a CSP to the devtool's Memory tab. r=devtools-reviewers,bomsy
https://hg.mozilla.org/integration/autoland/rev/357aeef0e910
Add a CSP to the devtool's Responsive toolbar. r=devtools-reviewers,bomsy

Comment 19

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/1e300692756d
https://hg.mozilla.org/mozilla-central/rev/357aeef0e910

Comment 20

[Tom Schuster]

Attachment: Bug 1943360 - Add a CSP to the devtool's Inspector Markup View. r?#devtools-reviewers

Comment 21

[Tom Schuster]

For tracking purposes I am going to open a new bug for the remaining files without a CSP.

Comment 22

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/f21cecb256a6
Add a CSP to the devtool's Inspector Markup View. r=devtools-reviewers,bomsy

Comment 23

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/f21cecb256a6