Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Issue %3005 - Centralize the Security Features and locate them to ↵ | Matt A. Tobin | 2021-11-23 |
| | | | | system/security | ||
* | Issue mcp-graveyard/UXP%1656 - Part 1: Nuke most vim config lines in the tree. | Moonchild | 2020-09-23 |
| | | | | | | Since these are just interpreted comments, there's 0 impact on actual code. This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are a few others scattered around which will be removed manually in a second part. | ||
* | Issue mcp-graveyard/UXP%80 - De-unify dom/security | Moonchild | 2020-04-23 |
| | | | | | Exception: CSPUtils relies on something in CSPContext, but on Windows it throws in an MSVC include which provides no hints. | ||
* | [CSP] Allow not having a Port for RessourceURI if the Scheme has no | wolfbeast | 2020-02-11 |
| | | | | Default Port | ||
* | Add checks to respect CSP-wildcard + Ports. | Sebastian Streich | 2019-09-05 |
| | |||
* | Bug 1430758 - No CSP directive for nsIContentPolicy::TYPE_SAVEAS_DOWNLOAD | janekptacijarabaci | 2018-06-17 |
| | |||
* | Add support for CSP v3 "worker-src" directive | wolfbeast | 2018-03-03 |
| | |||
* | CSP: connect-src 'self' should always include https: and wss: schemes | janekptacijarabaci | 2018-02-22 |
| | |||
* | CSP: Support IDNs in connect-src | janekptacijarabaci | 2018-02-22 |
| | |||
* | CSP should only check host (not including path) when performing frame ↵ | wolfbeast | 2018-02-06 |
| | | | | | | ancestors checks. This has been explicitly stated in the CSP-3 spec. | ||
* | Add m-esr52 at 52.6.0 | Matt A. Tobin | 2018-02-02 |