Kyle Zhao
|
962fbd1ec7
|
include '/plugins/' directory for script-src and blob for worker-src
- plugins may include additional static JS assets
- ACE.js editor register a service worker with a blob for syntax
checking
|
2018-11-16 16:31:01 -05:00 |
|
Kyle Zhao
|
6fba8b8aef
|
CSP: include `worker_src`
`worker_src` fallbacks to `script_src`, but #6611 made `script_src` too
restrict to include the service worker.
|
2018-11-15 13:57:15 -05:00 |
|
Kyle Zhao
|
055d59373a
|
CSP: drop 'self' in `script-src` (#6611)
|
2018-11-15 12:14:16 -05:00 |
|
Kyle Zhao
|
3493ea85cc
|
remove Logster from CSP whitelist (#6593)
Logster 1.3 no longer has inline JS and is now CSP compliant
|
2018-11-13 09:55:57 +11:00 |
|
Kyle Zhao
|
e9a971a2b6
|
FEATURE: [Experimental] Content Security Policy (#6514)
do not register new MIME type, parse raw body instead
|
2018-10-22 13:22:23 -04:00 |
|
Kyle Zhao
|
dca830cb73
|
Revert "FEATURE: [Experimental] Content Security Policy (#6504)"
This reverts commit fb8231077a.
|
2018-10-19 11:53:29 -04:00 |
|
Kyle Zhao
|
fb8231077a
|
FEATURE: [Experimental] Content Security Policy (#6504)
|
2018-10-19 10:39:22 -04:00 |