Closed Bug 980951 Opened 12 years ago Closed 5 years ago

Ensure devtools/markupview/markup-view.xhtml is free of inline script and styles.

Categories

(DevTools :: General, defect)

Product:
DevTools
Component:
General
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: mgoodwin, Unassigned)

References

(Blocks 1 open bug)

Details

There are a number of attributes in markup-view.xhtml that will cause breakage when CSP is applied: * An onclick attribute * A number of style attributes
Product: Firefox → DevTools

The markup-view.xhtml doesn't exist anymore and existing markup.xhtml doesn't have any inline scripts nor style attributes.

I think that this bug is invalid by now, but please reopen if you still see issues.

Honza

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.