16 Commits

Author	SHA1	Message	Date
kkapsner	cca81c4006	Do not add CSP headers to 304 requests ... Fixes #577	2021-09-09 17:40:18 +02:00
kkapsner	aef6bd3d59	Big linting	2019-11-28 01:26:35 +01:00
kkapsner	b7a8a51a56	Made data URL protection url specific ... Fixes #333	2019-04-19 13:58:04 +02:00
kkapsner	574efa23e7	Cleanup require system	2019-03-12 22:24:23 +01:00
kkapsner	e0729480fb	Fix dataUrls.js	2018-09-06 08:38:22 +02:00
kkapsner	fb31545604	Removed debugging statement	2018-09-05 17:02:36 +02:00
kkapsner	bde8ac3e8e	Only use onHeadersReceived listener when necessary ... As mentioned in #214	2018-08-28 21:09:03 +02:00
kkapsner	4a043b2c78	Typos and linting	2018-08-22 22:16:49 +02:00
kkapsner	9d231c7b02	CSP cleanup ... Should help with #223.	2018-08-21 22:01:10 +02:00
kkapsner	bf868eb6ae	Missing semicolon in CSP ... Fixed #224.	2018-08-02 20:56:01 +02:00
kkapsner	9a26baf5c1	Block blob in Firefox ESR (52)	2018-07-24 23:30:00 +02:00
kkapsner	942d74ce54	Optimized CSP	2018-07-24 21:30:57 +02:00
kkapsner	7bfd300f6a	Inject CSP only in the relevant requests. ... Prevents detection of CB.	2018-07-21 19:34:24 +02:00
kkapsner	8389165b70	Allow blob and filesystem schemes ... They are protected and do not need to be blocked (like data-URLs). Fixes #212 and fixes #213.	2018-07-21 13:25:15 +02:00
kkapsner	9ba9c48422	Block data URLs instead of their requests ... Fixes #211	2018-07-21 00:32:15 +02:00
kkapsner	47a9519ceb	"Protect" data URL pages by blocking outgoing requests ... Fixes #208	2018-07-16 00:14:44 +02:00