corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 1418236 - Correct EventTarget for CSP violation events, r=ckerschb

Browse Source
This commit is contained in:
Andrea Marchesini
2018-07-10 17:40:21 +02:00
parent bff8489dc9
commit ab091b9f95
22 changed files with 135 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
dom/script/ScriptLoader.cpp
View File

@@ -1223,7 +1223,7 @@ CSPAllowsInlineScript(nsIScriptElement* aElement, nsIDocument* aDocument)
bool allowInlineScript = false;
rv = csp->GetAllowsInline(nsIContentPolicy::TYPE_SCRIPT,
nonce, parserCreated, aElement,
nonce, parserCreated, scriptContent, EmptyString(),
aElement->GetScriptLineNumber(),
aElement->GetScriptColumnNumber(),
&allowInlineScript);
@@ -2872,6 +2872,7 @@ ScriptLoader::VerifySRI(ScriptLoadRequest* aRequest,
uint32_t columnNo = aRequest->mElement ? aRequest->mElement->GetScriptColumnNumber() : 0;
csp->LogViolationDetails(
nsIContentSecurityPolicy::VIOLATION_TYPE_REQUIRE_SRI_FOR_SCRIPT,
nullptr, // triggering element
NS_ConvertUTF8toUTF16(violationURISpec),
EmptyString(), lineNo, columnNo, EmptyString(), EmptyString());
rv = NS_ERROR_SRI_CORRUPT;