Content Security Policy: Difference between revisions

From annawiki
No edit summary
No edit summary
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
==MediaWiki==
Failing on simple lists, no bullet points shown:
* line one
* line two
==PDF in Chrome==
==PDF in Chrome==
https://bugs.chromium.org/p/chromium/issues/detail?id=271452
https://bugs.chromium.org/p/chromium/issues/detail?id=271452
Line 11: Line 6:
==SVG==
==SVG==
*[[Content Security Policy - SVG]] - styles are unsafe-inline in Firefox and Edge
*[[Content Security Policy - SVG]] - styles are unsafe-inline in Firefox and Edge
==form-action==
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/form-action
Redirect blocking - will disturb MediaWiki page reading after submitting a change
* Firefox 57 doesn't block
* Chrome 63 does block
==MediaWiki==
Failing on simple lists, no bullet points shown:
* line one
* line two
form-action - Chrome blocks redirect after text edit

Latest revision as of 2018-02-20T19:07:52

PDF in Chrome

https://bugs.chromium.org/p/chromium/issues/detail?id=271452

object-source:none and PDF will not be shown in Chrome

SVG

form-action

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/form-action

Redirect blocking - will disturb MediaWiki page reading after submitting a change

  • Firefox 57 doesn't block
  • Chrome 63 does block

MediaWiki

Failing on simple lists, no bullet points shown:

  • line one
  • line two

form-action - Chrome blocks redirect after text edit