From 5777dc0b15fa99c26d31bbfd55faf6ff23f2ee7b Mon Sep 17 00:00:00 2001 From: Raymond Hill Date: Fri, 5 Dec 2014 10:45:43 -0200 Subject: [PATCH] code review: actually no `file:` should occurs within `https:` doc --- src/js/traffic.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/js/traffic.js b/src/js/traffic.js index efba2fb..d26f9ff 100644 --- a/src/js/traffic.js +++ b/src/js/traffic.js @@ -654,7 +654,7 @@ var onMainDocHeadersReceived = function(details) { // Enforce strict HTTPS? if ( requestScheme === 'https' && µm.tMatrix.evaluateSwitchZ('https-strict', pageStats.pageHostname) ) { - csp += "default-src chrome-search: data: file: https: wss: 'unsafe-eval' 'unsafe-inline'"; + csp += "default-src chrome-search: data: https: wss: 'unsafe-eval' 'unsafe-inline'"; } // https://github.com/gorhill/httpswitchboard/issues/181