[tor-commits] [torbutton/master] Bug 34209: about:tor fails to load in debug build of Tor Browser

Sun Jun 14 15:37:20 UTC 2020

commit ff1557013e1ee3035b45565b96d54e46ef03266a
Author: Kathy Brade <brade at pearlcrescent.com>
Date:   Wed May 13 14:39:57 2020 -0400

    Bug 34209: about:tor fails to load in debug build of Tor Browser
    
    Add object-src 'none' to the about:tor content security policy.
---
 chrome/content/aboutTor/aboutTor.xhtml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/chrome/content/aboutTor/aboutTor.xhtml b/chrome/content/aboutTor/aboutTor.xhtml
index edfa4677..5e9ffea0 100644
--- a/chrome/content/aboutTor/aboutTor.xhtml
+++ b/chrome/content/aboutTor/aboutTor.xhtml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
-   - Copyright (c) 2019, The Tor Project, Inc.
+   - Copyright (c) 2020, The Tor Project, Inc.
    - See LICENSE for licensing information.
    - vim: set sw=2 sts=2 ts=8 et syntax=xml:
   -->
@@ -20,7 +20,7 @@
 
 <html xmlns="http://www.w3.org/1999/xhtml">
 <head>
-  <meta http-equiv="Content-Security-Policy" content="default-src resource:;" />
+  <meta http-equiv="Content-Security-Policy" content="default-src resource:; object-src 'none'" />
   <meta name="viewport" content="width=device-width, initial-scale=1"/>
   <title>&aboutTor.title;</title>
   <link rel="stylesheet" type="text/css" media="all"



