diff options
| author | Wojtek Kosior <koszko@koszko.org> | 2021-06-30 16:39:53 +0200 |
|---|---|---|
| committer | Wojtek Kosior <koszko@koszko.org> | 2021-06-30 16:39:53 +0200 |
| commit | 12fd4fc3a01eb9718a60c8d04860c4e797049b26 (patch) | |
| tree | 1ecbe7483fe79eae04fcdba627193b48b81a5e60 /TODOS.org | |
| parent | c49e3750ffaa7ab9ba5fea9e1f5af1df91e1f829 (diff) | |
| download | browser-extension-12fd4fc3a01eb9718a60c8d04860c4e797049b26.tar.gz browser-extension-12fd4fc3a01eb9718a60c8d04860c4e797049b26.zip | |
fix whitelisting under Firefox
Diffstat (limited to 'TODOS.org')
| -rw-r--r-- | TODOS.org | 7 |
1 files changed, 3 insertions, 4 deletions
@@ -47,12 +47,11 @@ TODO: (e.g. file:// and ftp://) - Process HTML files in data: URLs instead of just blocking them - improve CSP injection for pathological cases like <script> before <head> -- Fix FF script blocking and whitelisting (FF seems to be by itself repeatedly - injecting CSP headers that were injected once, this makes it impossible to - whielist site that was unwhitelisted before; FF also seems to be removing our - injected script's nonce for no reason 🙁) DONE: +- Fix FF script whitelisting (FF seems to be by itself repeatedly -- DONE 2021-06-30 + injecting CSP headers that were injected once, this made it impossible to + whielist site that was unwhitelisted before) - find out if we can successfully use CSP to block file:// under FF -- DONE 2021-06-30 - come up with own simple DSL to manage imports/exports -- DONE 2021-06-30 - add some mechanism to build the extension -- DONE 2021-06-30 |