Skip to content
Browse files

NoScript addons.mozilla.org release 2.6.8.18rc1

  • Loading branch information...
1 parent aa5ba7a commit 5a5b43774905258112f848f2dacfa39aa079bc20 @avian2 committed
Showing with 14 additions and 3 deletions.
  1. +13 −2 xpi/chrome/content/noscript/Policy.js
  2. +1 −1 xpi/install.rdf
View
15 xpi/chrome/content/noscript/Policy.js
@@ -174,6 +174,13 @@ const NOPContentPolicy = {
// TYPE_PING = 10
// TYPE_XMLHTTPREQUEST = 11
// TYPE_OBJECT_SUBREQUEST = 12
+// TYPE_DTD = 13
+// TYPE_FONT = 14
+// TYPE_MEDIA = 15
+// TYPE_WEBSOCKET = 16
+// TYPE_CSP_REPORT = 17
+// TYPE_XSLT = 18
+// TYPE_BEACON = 19
// ACCEPT = 1
@@ -370,8 +377,11 @@ const MainContentPolicy = {
break;
case 4: // STYLESHEETS
- if (PolicyUtil.isXSL(aContext) && /\/x[ms]l/.test(aMimeTypeGuess) &&
- !/^(?:chrome|resource)$/.test(aContentLocation.scheme) &&
+ if (PolicyUtil.supportsXSL ||
+ !(PolicyUtil.isXSL(aContext) && /\/x[ms]l/.test(aMimeTypeGuess))
+ ) return CP_OK;
+ case 18: // XSL
+ if (!/^(?:chrome|resource)$/.test(aContentLocation.scheme) &&
this.getPref("forbidXSLT", true)) {
forbid = isScript = true; // we treat XSLT like scripts
break;
@@ -850,6 +860,7 @@ const MainContentPolicy = {
}
var PolicyUtil = {
+ unsupportedXSL: !("TYPE_XSLT" in Ci.nsIContentPolicy),
isXSL: function(ctx) {
return ctx && !(ctx instanceof Ci.nsIDOMHTMLLinkElement || ctx instanceof Ci.nsIDOMHTMLStyleElement || ctx instanceof Ci.nsIDOMHTMLDocument);
}
View
2 xpi/install.rdf
@@ -5,7 +5,7 @@
<em:id>{73a6fe31-595d-460b-a920-fcc0f8843232}</em:id>
<em:name>NoScript</em:name>
- <em:version>2.6.8.17</em:version>
+ <em:version>2.6.8.18rc1</em:version>
<em:description>Extra protection for your Firefox: NoScript allows JavaScript, Java (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-emptive blocking approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality... Experts will agree: Firefox is really safer with NoScript :-)</em:description>
<em:creator>Giorgio Maone</em:creator>
<em:type>2</em:type>

0 comments on commit 5a5b437

Please sign in to comment.
Something went wrong with that request. Please try again.