1957424 - Allow specifying the full URL in `connect-src` for about pages

Status: RESOLVED INCOMPLETE

(Core :: DOM: Security, enhancement)

Description

[Julien Wajsberg [:julienw]]

From bug 1803607:

I wanted to specify https://api.profiler.firefox.com as a URL in connect-src, but this was by default forbidden due to bug 1895770.

Tom answered my question with:

You can use connect-src https: and add the URL about:logging to the sConnectSrcHttpsAllowList. I can also provide a patch that would make it possible use the whole URL as a source for connect-src.

This bug is for the last sentence.

After doing it it would be good to change the CSP of about:logging in case it's set to https:.

Comment 1

[Julien Wajsberg [:julienw]]

The patch https://phabricator.services.mozilla.com/D243676 in bug 1803607 fixes this.