Open
Bug 1950666
Opened 8 months ago
Updated 3 months ago
[meta] Enforce a strict CSP for all chrome documents
Categories
(Core :: DOM: Security, task)
Core
DOM: Security
Tracking
()
NEW
People
(Reporter: tschuster, Unassigned)
References
(Depends on 5 open bugs, Blocks 1 open bug)
Details
(Keywords: meta, Whiteboard: [domsecurity-meta])
As part of the dependencies for Bug 1935985 we already introduced a lot of strict CSPs for our chrome documents. However the original goal was mostly targeted at preventing unwanted script execution. This bug is for blocking/preventing other kinds of loads, especially style, images etc., which are less dangerous, but should still be prevented.
|
Reporter | |
Updated•6 months ago
|
|
||
Updated•6 months ago
|
Severity: -- → N/A
Whiteboard: [domsecurity-meta]
You need to log in
before you can comment on or make changes to this bug.
Description
•