corysanin/tubestation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 1970075 - Relax img-src CSP in alert.xhtml + tests a=pascalc

Browse Source 
Original Revision: https://phabricator.services.mozilla.com/D253561

Differential Revision: https://phabricator.services.mozilla.com/D253828
This commit is contained in:
Rob Wu
2025-07-02 12:19:37 +00:00
committed by pchevrel@mozilla.com
parent e9b26188b9
commit fff97f3ade
4 changed files with 190 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
dom/security/nsContentSecurityUtils.cpp
View File

@@ -1356,6 +1356,7 @@ static nsLiteralCString sImgSrcDataBlobAllowList[] = {
"chrome://devtools/content/responsive/toolbar.xhtml"_ns,
"chrome://devtools/content/shared/sourceeditor/codemirror/cmiframe.html"_ns,
"chrome://devtools/content/webconsole/index.html"_ns,
"chrome://global/content/alerts/alert.xhtml"_ns,
"chrome://global/content/print.html"_ns,
};
// img-src https:
@@ -1382,6 +1383,7 @@ static nsLiteralCString sImgSrcHttpAllowList[] = {
"chrome://devtools/content/framework/browser-toolbox/window.html"_ns,
"chrome://devtools/content/framework/toolbox-window.xhtml"_ns,
"chrome://browser/content/preferences/dialogs/applicationManager.xhtml"_ns,
"chrome://global/content/alerts/alert.xhtml"_ns,
"chrome://mozapps/content/handling/appChooser.xhtml"_ns,
// STOP! Do not add anything to this list.
};