1947441 - Tabmail tries to set favicon to data: URI blocked by CSP

Status: RESOLVED FIXED

(Thunderbird :: Build Config, defect)

Description

[Martin Giger [:freaktechnik]]

STR:

1. Open Thunderbird with a new profile

tabmail-tab is unhappy about the CSP (this is the remote favicon of the privacy policy I think):

Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at data:image/png;base64,iVBORw0KGgoAAAANSU… because it violates the following directive: “img-src chrome: moz-icon:” tabmail-tab.js:174:12
Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at data:image/x-icon;base64,AAABAAMAEBAAAAE… because it violates the following directive: “img-src chrome: moz-icon:”

Comment 1

[Martin Giger [:freaktechnik]]

This also appears to affect the favicons of extension tabs. They also try to set a data: URI as favicon.

Comment 2

[Geoff Lankow (:darktrojan)]

Attachment: Bug 1947441 - Allow data: images in messenger.xhtml CSP. r=#thunderbird-reviewers

This nearly happened right the first time, but I thought I'd removed the need for it.

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/31b241cc9cb7
Allow data: images in messenger.xhtml CSP. r=vineet