1
0
mirror of https://github.com/gorhill/uBlock.git synced 2024-10-04 16:47:15 +02:00
uBlock/platform
Raymond Hill 7e1868b1c3
Add virtuous signal that remote code execution is not possible
Related Chromium issue:
- https://bugs.chromium.org/p/chromium/issues/detail?id=985759

By expressly restricting JavaScript execution to only code
from the extension package, this explicitly tells code reviewer
that uBO can't execute remote code.

I also had to add `object-src 'self'`, otherwise Chromium
refused to load the extension with the following error message:

> 'content_security_policy': CSP directive 'object-src' must be specified

`object-src 'self'` is the default value.
2019-07-21 10:37:58 -04:00
..
chromium Add virtuous signal that remote code execution is not possible 2019-07-21 10:37:58 -04:00
firefox Add ability to suspend network request handler at will 2019-06-30 10:09:27 -04:00
opera Use "relax" instead of "toggle" 2019-06-27 08:16:18 -04:00
safari Compress the icon PNGs with zopflipng (#3458) 2018-04-15 06:30:40 -04:00
thunderbird Add ability to suspend network request handler at will 2019-06-30 10:09:27 -04:00
webext Use "relax" instead of "toggle" 2019-06-27 08:16:18 -04:00