Bug 99710 - Web Inspector: add X-WebKit-CSP header into inspector.html
Summary: Web Inspector: add X-WebKit-CSP header into inspector.html
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Web Inspector (Deprecated) (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P2 Normal
Assignee: Pavel Feldman
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-10-18 05:32 PDT by Pavel Feldman
Modified: 2012-10-18 09:45 PDT (History)
13 users (show)

See Also:


Attachments
Patch (1.46 KB, patch)
2012-10-18 05:34 PDT, Pavel Feldman
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Pavel Feldman 2012-10-18 05:32:52 PDT
Simple sanity measure.
Comment 1 Pavel Feldman 2012-10-18 05:34:47 PDT
Created attachment 169396 [details]
Patch
Comment 2 WebKit Review Bot 2012-10-18 06:41:03 PDT
Comment on attachment 169396 [details]
Patch

Clearing flags on attachment: 169396

Committed r131744: <http://trac.webkit.org/changeset/131744>
Comment 3 WebKit Review Bot 2012-10-18 06:41:06 PDT
All reviewed patches have been landed.  Closing bug.
Comment 4 Adam Barth 2012-10-18 09:37:13 PDT
Comment on attachment 169396 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=169396&action=review

> Source/WebCore/inspector/front-end/inspector.html:32
> +    <meta http-equiv="X-WebKit-CSP" content="script-src 'self' 'unsafe-eval'">

You can add object-src 'none' as well?
Comment 5 Pavel Feldman 2012-10-18 09:45:45 PDT
> You can add object-src 'none' as well?

https://bugs.webkit.org/show_bug.cgi?id=99728