commit ff1557013e1ee3035b45565b96d54e46ef03266a Author: Kathy Brade brade@pearlcrescent.com Date: Wed May 13 14:39:57 2020 -0400
Bug 34209: about:tor fails to load in debug build of Tor Browser
Add object-src 'none' to the about:tor content security policy. --- chrome/content/aboutTor/aboutTor.xhtml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/chrome/content/aboutTor/aboutTor.xhtml b/chrome/content/aboutTor/aboutTor.xhtml index edfa4677..5e9ffea0 100644 --- a/chrome/content/aboutTor/aboutTor.xhtml +++ b/chrome/content/aboutTor/aboutTor.xhtml @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="UTF-8"?> <!-- - - Copyright (c) 2019, The Tor Project, Inc. + - Copyright (c) 2020, The Tor Project, Inc. - See LICENSE for licensing information. - vim: set sw=2 sts=2 ts=8 et syntax=xml: --> @@ -20,7 +20,7 @@
<html xmlns="http://www.w3.org/1999/xhtml"> <head> - <meta http-equiv="Content-Security-Policy" content="default-src resource:;" /> + <meta http-equiv="Content-Security-Policy" content="default-src resource:; object-src 'none'" /> <meta name="viewport" content="width=device-width, initial-scale=1"/> <title>&aboutTor.title;</title> <link rel="stylesheet" type="text/css" media="all"