security-and-privacy/CanvasBlocker
security-and-privacy/CanvasBlocker
1
0
Fork 0
mirror of https://github.com/kkapsner/CanvasBlocker synced 2025-06-14 20:21:02 +02:00
Code Releases Activity

CSP cleanup

Browse Source 
Should help with #223.
This commit is contained in:
kkapsner 2018-08-21 22:01:10 +02:00
parent 1cb5f6efa9
commit 9d231c7b02
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/dataUrls.js
View File

@ -49,8 +49,8 @@
logging.verbose("Adding CSP header to", details); logging.verbose("Adding CSP header to", details);
setHeader(headers, { setHeader(headers, {
name: "Content-Security-Policy", name: "Content-Security-Policy",
value: `object-src ${cspMatch}; frame-src ${cspMatch}; worker-src ${cspMatch}; child-src ${cspMatch}; ` + value: `object-src ${cspMatch}; frame-src ${cspMatch}`
"report-to https://canvasblocker.invalid/; report-uri https://canvasblocker.invalid/" // + "; report-to https://canvasblocker.invalid/; report-uri https://canvasblocker.invalid/"
}); });
} }
return { return {

1
releaseNotes.txt
View File

@ -16,6 +16,7 @@ Version 0.5.3:
- popup text not readable in some dark themes - popup text not readable in some dark themes
- display conditions for notification settings - display conditions for notification settings
- page action not useable with a lot of notifications - page action not useable with a lot of notifications
- blocking of blob-worker broke some pages
known issues: known issues:
- if a data URL is blocked the page action button does not appear - if a data URL is blocked the page action button does not appear