Commit message (Collapse) | Author | Age | Lines | |
---|---|---|---|---|
* | CSP: connect-src 'self' should always include https: and wss: schemes | janekptacijarabaci | 2018-02-22 | -11/+168 |
| | ||||
* | CSP: Support IDNs in connect-src | janekptacijarabaci | 2018-02-22 | -2/+135 |
| | ||||
* | CSP: Ignore nonces on <img> per spec | janekptacijarabaci | 2018-02-22 | -4/+111 |
| | ||||
* | CSP: Upgrade SO navigational requests per spec. | janekptacijarabaci | 2018-02-22 | -0/+184 |
| | ||||
* | CSP 2 - ignore (x-)frame-options if CSP with frame-ancestors directive exists | janekptacijarabaci | 2018-02-22 | -0/+104 |
| | ||||
* | Explicitly cancel channel after mixed content redirect. | wolfbeast | 2018-02-08 | -1/+6 |
| | ||||
* | CSP should only check host (not including path) when performing frame ↵ | wolfbeast | 2018-02-06 | -0/+19 |
| | | | | | | ancestors checks. This has been explicitly stated in the CSP-3 spec. | |||
* | Add m-esr52 at 52.6.0 | Matt A. Tobin | 2018-02-02 | -0/+31574 |