security-and-privacy/CanvasBlocker
security-and-privacy/CanvasBlocker
1
0
Fork 0
mirror of https://github.com/kkapsner/CanvasBlocker synced 2024-12-22 12:50:36 +01:00
Code Releases Activity

Do not add CSP headers to 304 requests

Browse Source 
Fixes #577
This commit is contained in:
kkapsner 2021-09-09 17:40:18 +02:00
parent 2f6ca07bba
commit cca81c4006
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/dataUrls.js
View File

@ -47,7 +47,10 @@
scope.init = function(){ scope.init = function(){
function listener(details){ function listener(details){
const headers = details.responseHeaders; const headers = details.responseHeaders;
if (settings.get("blockDataURLs", new URL(details.url))){ if (
details.statusCode !== 304 &&
settings.get("blockDataURLs", new URL(details.url))
){
const cspMatch = (blockBlob? "": "blob: ") + "filesystem: *"; const cspMatch = (blockBlob? "": "blob: ") + "filesystem: *";
logging.verbose("Adding CSP header to", details); logging.verbose("Adding CSP header to", details);
setHeader(headers, { setHeader(headers, {