Open Bug 1955233 Opened 1 year ago Updated 8 months ago

Disallow inline styles in devtools documents

Categories

(DevTools :: General, task, P3)

task

Tracking

(Not tracked)

People

(Reporter: tschuster, Unassigned)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

While adding the CSPs to the devtools documents in bug 1943360 and bug 1950311 we had to allow 'unsafe-inline' for styles. To fix this we need to remove all uses inline styles.

Component: DOM: Security → General
Product: Core → DevTools
Depends on: 1955235
Depends on: 1955245
Depends on: 1955317
Depends on: 1955331
Depends on: 1955339
Priority: -- → P3
See Also: → CVE-2026-6769
You need to log in before you can comment on or make changes to this bug.