#1 Mark some about: URIs as trusted

오픈
platform8 년 전을 오픈 · 1개의 코멘트
platform 코멘트됨, 8 년 전

Currently the extension considers all about: URIs as untrusted. This breaks Clean Uninstall which depends on about:addons being able to access resource: URIs. However, some about: URIs are indeed untrusted:

  • about:blank
  • about:srcdoc

And since WHATWG may add a new Web-accessible about: URI to their standards, we want to use whitelisting, rather than blacklisting.

Currently the extension considers all `about:` URIs as untrusted. This breaks [Clean Uninstall](https://addons.mozilla.org/en-US/firefox/addon/clean-uninstall/) which depends on `about:addons` being able to access resource: URIs. However, some about: URIs are indeed untrusted: * `about:blank` * `about:srcdoc` And since WHATWG may add a new Web-accessible `about:` URI to their standards, we want to use whitelisting, rather than blacklisting.
platform 코멘트됨, 8 년 전
소유자
* Whitelisted: `about:addons` https://addons.mozilla.org/en-US/firefox/addon/no-resource-uri-leak/versions/0.2.0
로그인하여 이 대화에 참여
마일스톤 없음
담당자 없음
참여자 1명
로딩중...
취소
저장
아직 콘텐츠가 없습니다.