Browse Source

code review: actually no `file:` should occurs within `https:` doc

pull/2/head
Raymond Hill 10 years ago
parent
commit
5777dc0b15
  1. 2
      src/js/traffic.js

2
src/js/traffic.js

@ -654,7 +654,7 @@ var onMainDocHeadersReceived = function(details) {
// Enforce strict HTTPS? // Enforce strict HTTPS?
if ( requestScheme === 'https' && µm.tMatrix.evaluateSwitchZ('https-strict', pageStats.pageHostname) ) { if ( requestScheme === 'https' && µm.tMatrix.evaluateSwitchZ('https-strict', pageStats.pageHostname) ) {
csp += "default-src chrome-search: data: file: https: wss: 'unsafe-eval' 'unsafe-inline'";
csp += "default-src chrome-search: data: https: wss: 'unsafe-eval' 'unsafe-inline'";
} }
// https://github.com/gorhill/httpswitchboard/issues/181 // https://github.com/gorhill/httpswitchboard/issues/181

Loading…
Cancel
Save