Bug 1497201: Apply Meta CSP to about:networking. DONTBUILD

Differential Revision: https://phabricator.services.mozilla.com/D35153 --HG-- extra : source : 80e58bbe2e88549bed98c8c5f2e08d836c50ae90 extra : histedit_source : 9244d02362d7fa9fc8329babfcca16f2b471c9c9
2019-06-16 11:12:16 +00:00 · 2019-06-16 11:12:16 +00:00 · f0ef1b0536
--- a/modules/libpref/init/all.js
+++ b/modules/libpref/init/all.js
@ -2515,7 +2515,7 @@ pref("security.dialog_enable_delay", 1000);
 pref("security.notification_enable_delay", 500);

 #if defined(DEBUG) && !defined(ANDROID)
-pref("csp.about_uris_without_csp", "blank,printpreview,srcdoc,addons,cache-entry,config,debugging,devtools,downloads,home,networking,newtab,performance,plugins,profiles,preferences,restartrequired,serviceworkers,sessionrestore,support,sync-log,telemetry,url-classifier,welcomeback");
+pref("csp.about_uris_without_csp", "blank,printpreview,srcdoc,addons,cache-entry,config,debugging,devtools,downloads,home,newtab,performance,plugins,profiles,preferences,restartrequired,serviceworkers,sessionrestore,support,sync-log,telemetry,url-classifier,welcomeback");
 // the following prefs are for testing purposes only.
 pref("csp.overrule_about_uris_without_csp_whitelist", false);
 pref("csp.skip_about_page_has_csp_assert", false);
--- a/toolkit/content/aboutNetworking.xhtml
+++ b/toolkit/content/aboutNetworking.xhtml
@ -8,6 +8,7 @@

 <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
+        <meta http-equiv="Content-Security-Policy" content="default-src chrome:" />
        <title data-l10n-id="title"/>
        <link rel="stylesheet" href="chrome://mozapps/skin/aboutNetworking.css" type="text/css" />
        <script src="chrome://global/content/aboutNetworking.js" />