gecko-dev/dom/jsurl
Boris Zbarsky 63b07e7115 Bug 1478037. Allow bookmarklets to run even on pages with a CSP. r=ckerschb
The removal of the second CSP check is fixing a regression introduced in bug
965637.  See https://github.com/whatwg/html/issues/4651#issuecomment-495050351
for details.  We may want to re-introduce that check depending on the outcome
of that issue, but if so we should do that only if the target document's
principal subsumes our triggering principal.

This commit will not allow bookmarklets to access subresources that
CSP blocks, but will at least allow them to run.

Differential Revision: https://phabricator.services.mozilla.com/D33047

--HG--
extra : moz-landing-system : lando
2019-05-31 19:21:31 +00:00
..
crashtests Bug 1314045 - stylo: Downgrade "Bad loading table" assertion since it occurs frequently. r=me 2017-01-31 15:10:45 +08:00
test Bug 1544322 - Part 2.2 - Remove the [type] attribute for one-liner <script> tags loading files in /tests/SimpleTest/ in dom/ r=bzbarsky 2019-04-16 03:53:28 +00:00
moz.build Bug 1339232 - annotate more dom/* moz.build files with BUG_COMPONENT. r=overholt 2017-03-01 08:20:25 -05:00
nsJSProtocolHandler.cpp Bug 1478037. Allow bookmarklets to run even on pages with a CSP. r=ckerschb 2019-05-31 19:21:31 +00:00
nsJSProtocolHandler.h Bug 1532253 - Add NS_NewURIOnAnyThread r=baku 2019-03-19 15:11:31 +00:00