1
0
mirror of https://github.com/gorhill/uBlock.git synced 2024-10-04 16:47:15 +02:00
uBlock/platform/chromium
Raymond Hill 7e1868b1c3
Add virtuous signal that remote code execution is not possible
Related Chromium issue:
- https://bugs.chromium.org/p/chromium/issues/detail?id=985759

By expressly restricting JavaScript execution to only code
from the extension package, this explicitly tells code reviewer
that uBO can't execute remote code.

I also had to add `object-src 'self'`, otherwise Chromium
refused to load the extension with the following error message:

> 'content_security_policy': CSP directive 'object-src' must be specified

`object-src 'self'` is the default value.
2019-07-21 10:37:58 -04:00
..
is-webrtc-supported.html fix warnings in browser console 2017-07-25 11:59:52 -04:00
is-webrtc-supported.js this fixes https://github.com/gorhill/uBlock/issues/533#issuecomment-167931681 2015-12-31 09:24:55 -05:00
managed_storage.json #985: might be the missing trailing # 2015-11-27 14:30:17 -05:00
manifest.json Add virtuous signal that remote code execution is not possible 2019-07-21 10:37:58 -04:00
vapi-background.js Minor code review re. context menu code 2019-07-02 09:43:26 -04:00
vapi-client.js Minor generic code review of changes since 1.18.2 2019-02-02 08:09:34 -05:00
vapi-common.js Refactor selfie generation into a more flexible persistence mechanism 2019-02-14 13:33:55 -05:00
vapi-usercss.js Add ability to report exception cosmetic filters in the logger 2019-05-16 13:44:49 -04:00
vapi-usercss.pseudo.js Fix internal cosmetic filter being reported in the logger 2019-06-20 07:14:34 -04:00
vapi-usercss.real.js Fix internal cosmetic filter being reported in the logger 2019-06-20 07:14:34 -04:00
vapi-webrequest.js Add ability to suspend network request handler at will 2019-06-30 10:09:27 -04:00
vapi.js refactor some webRequest-related code (now that firefox legacy is out of the way) 2018-10-28 10:58:25 -03:00