diff options
Diffstat (limited to 'js')
| -rw-r--r-- | js/traffic.js | 10 | ||||
| -rw-r--r-- | js/vapi-background.js | 5 |
2 files changed, 9 insertions, 6 deletions
diff --git a/js/traffic.js b/js/traffic.js index b9efa4b..80af782 100644 --- a/js/traffic.js +++ b/js/traffic.js @@ -366,12 +366,12 @@ var onHeadersReceived = function(details) { /******************************************************************************/ var cspNoWorkerInit = function() { - if ( vAPI.webextFlavor === undefined ) { - return "child-src 'none'; frame-src data: blob: *; report-uri about:blank"; + if (ηMatrix.cspNoWorker === undefined) { + ηMatrix.cspNoWorker = "worker-src 'none'; " + +"frame-src data: blob: *; " + +"report-uri about:blank"; } - ηMatrix.cspNoWorker = /^Mozilla-Firefox-5[67]/.test(vAPI.webextFlavor) ? - "child-src 'none'; frame-src data: blob: *; report-uri about:blank" : - "worker-src 'none'; report-uri about:blank" ; + return ηMatrix.cspNoWorker; }; diff --git a/js/vapi-background.js b/js/vapi-background.js index 3753b0b..f861338 100644 --- a/js/vapi-background.js +++ b/js/vapi-background.js @@ -2111,7 +2111,10 @@ // eMatrix: as of Pale Moon 28 it seems child-src is // available and depracated(?) if (ηMatrix.cspNoWorker === undefined) { - ηMatrix.cspNoWorker = "child-src 'none'; " + // ηMatrix.cspNoWorker = "child-src 'none'; " + // +"frame-src data: blob: *; " + // +"report-uri about:blank"; + ηMatrix.cspNoWorker = "worker-src 'none'; " +"frame-src data: blob: *; " +"report-uri about:blank"; } |