Merge pull request #3034 from sarracini/gh2645

feat(systemaddon): Closes #2645 Add <meta> CSP to activity-stream.html
mozilla · Jul 31, 2017 · a7ac99d · a7ac99d
2 parents f52f501 + 70ea4a8
commit a7ac99d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/system-addon/data/content/activity-stream.html b/system-addon/data/content/activity-stream.html
@@ -2,6 +2,7 @@
 <html lang="en-us" dir="ltr">
   <head>
     <meta charset="utf-8">
+    <meta http-equiv="Content-Security-Policy-Report-Only" content="script-src 'unsafe-inline'; img-src http: https: data: blob:; style-src 'unsafe-inline'; child-src 'none'; object-src 'none'; report-uri https://tiles.services.mozilla.com/v4/links/activity-stream/csp">
     <title></title>
     <link rel="stylesheet" href="chrome://browser/content/contentSearchUI.css" />
     <link rel="stylesheet" href="resource://activity-stream/data/content/activity-stream.css" />