Pier Angelo Vendrame pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser
Commits:
-
d68f1d0a
by Pier Angelo Vendrame at 2025-08-11T11:31:57+02:00
-
7a4c6fc9
by Pier Angelo Vendrame at 2025-08-11T11:32:06+02:00
-
bdec800c
by Pier Angelo Vendrame at 2025-08-11T11:32:06+02:00
-
70a4871e
by Pier Angelo Vendrame at 2025-08-11T11:32:07+02:00
11 changed files:
- browser/components/newidentity/content/newIdentityDialog.xhtml
- browser/components/onionservices/content/savedKeysDialog.xhtml
- browser/components/securitylevel/content/securityLevelDialog.xhtml
- browser/components/torpreferences/content/bridgeQrDialog.xhtml
- browser/components/torpreferences/content/builtinBridgeDialog.xhtml
- browser/components/torpreferences/content/connectionSettingsDialog.xhtml
- browser/components/torpreferences/content/loxInviteDialog.xhtml
- browser/components/torpreferences/content/provideBridgeDialog.xhtml
- browser/components/torpreferences/content/requestBridgeDialog.xhtml
- browser/components/torpreferences/content/torLogDialog.xhtml
- dom/security/nsContentSecurityUtils.cpp
Changes:
| ... | ... | @@ -6,6 +6,8 @@ |
| 6 | 6 | |
| 7 | 7 | <!-- based on resetProfile.xhtml -->
|
| 8 | 8 | |
| 9 | +<?csp default-src chrome: ?>
|
|
| 10 | + |
|
| 9 | 11 | <window
|
| 10 | 12 | id="newIdentityDialogWindow"
|
| 11 | 13 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0"?>
|
| 2 | 2 | <!-- Copyright (c) 2020, The Tor Project, Inc. -->
|
| 3 | 3 | |
| 4 | +<?csp default-src chrome: ?>
|
|
| 5 | + |
|
| 4 | 6 | <window
|
| 5 | 7 | id="onionservices-savedkeys-dialog"
|
| 6 | 8 | windowtype="OnionServices:SavedKeys"
|
| 1 | 1 | <?xml version="1.0"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 5 | 7 | xmlns:html="http://www.w3.org/1999/xhtml"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome:; img-src data: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| 1 | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
| 2 | 2 | |
| 3 | +<?csp default-src chrome: ?>
|
|
| 4 | + |
|
| 3 | 5 | <window
|
| 4 | 6 | type="child"
|
| 5 | 7 | xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
|
| ... | ... | @@ -1361,6 +1361,7 @@ static nsLiteralCString sImgSrcDataBlobAllowList[] = { |
| 1361 | 1361 | "chrome://devtools/content/webconsole/index.html"_ns,
|
| 1362 | 1362 | "chrome://global/content/alerts/alert.xhtml"_ns,
|
| 1363 | 1363 | "chrome://global/content/print.html"_ns,
|
| 1364 | + "chrome://browser/content/torpreferences/requestBridgeDialog.xhtml"_ns,
|
|
| 1364 | 1365 | };
|
| 1365 | 1366 | // img-src https:
|
| 1366 | 1367 | static nsLiteralCString sImgSrcHttpsAllowList[] = {
|