CMXSL.org/trisquel-icecat
2
0
Fork 0
Code Issues Pull requests Projects Releases 11 Packages Wiki Activity Actions

icecat: add release icecat-140.10.1-1gnu1 for ecne

Browse source
This commit is contained in:
Ark74 2026-05-04 16:58:41 -06:00
parent a5f93cb214
commit ff85d7c623
1256 changed files with 63469 additions and 24141 deletions
Download patch file Download diff file Expand all files Collapse all files

10
icecat/dom/security/nsCSPUtils.cpp
View file

@ -1333,10 +1333,14 @@ bool nsCSPDirective::permits(CSPDirective aDirective, nsILoadInfo* aLoadInfo,
// Step 1.4. If directive’s value contains a source expression that is an
// ASCII case-insensitive match for the "'strict-dynamic'" keyword-source:
if (hasStrictDynamicKeyword) {
// GetParserCreatedScript() isn't set for XSLT.
if (aLoadInfo->InternalContentPolicyType() ==
nsIContentPolicy::TYPE_XSLT) {
CSPUTILSLOG((" Blocked XSLT by default with 'strict-dynamic'"));
return false;
}
// XXX I don't think we should apply strict-dynamic to XSLT.
if (hasStrictDynamicKeyword && aLoadInfo->InternalContentPolicyType() !=
nsIContentPolicy::TYPE_XSLT) {
// Step 1.4.1 If the request’s parser metadata is "parser-inserted",
// return "Blocked". Otherwise, return "Allowed".
if (aLoadInfo->GetParserCreatedScript()) {