diff --git a/lib/dataUrls.js b/lib/dataUrls.js index a5057ce..1c90e53 100644 --- a/lib/dataUrls.js +++ b/lib/dataUrls.js @@ -49,8 +49,8 @@ logging.verbose("Adding CSP header to", details); setHeader(headers, { name: "Content-Security-Policy", - value: `object-src ${cspMatch}; frame-src ${cspMatch}; worker-src ${cspMatch}; child-src ${cspMatch}; ` + - "report-to https://canvasblocker.invalid/; report-uri https://canvasblocker.invalid/" + value: `object-src ${cspMatch}; frame-src ${cspMatch}` + // + "; report-to https://canvasblocker.invalid/; report-uri https://canvasblocker.invalid/" }); } return { diff --git a/releaseNotes.txt b/releaseNotes.txt index 9b6ae9b..1bc1869 100644 --- a/releaseNotes.txt +++ b/releaseNotes.txt @@ -16,6 +16,7 @@ Version 0.5.3: - popup text not readable in some dark themes - display conditions for notification settings - page action not useable with a lot of notifications + - blocking of blob-worker broke some pages known issues: - if a data URL is blocked the page action button does not appear