servo / servo

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Implement Content Security Policy (CSP). #4577

Open

Ms2ger opened this issue Jan 8, 2015 · 1 comment

Assignees

Labels

A-network I-enhancement I-safety

Contributor

Ms2ger commented Jan 8, 2015

Depends on #4576.

Estimated 2 months work assuming the right hooks.

Ms2ger added I-enhancement A-network E-less easy labels

Ms2ger removed the E-less easy label

kmcallister mentioned this issue

Flexible information flow control policy #5743

Open

kmcallister added the I-safety label

Ms2ger changed the title ~~Implement Content Security Policy.~~ Implement Content Security Policy (CSP).

This was referenced Jan 8, 2017

Implement Subresource Integrity (SRI) #14523

Closed

Implement Request verification algorithms part of Subresource Resource Integrity #14918

Open

Ms2ger mentioned this issue

Investigate issues blocking support for Google Docs #13942

Open

9 of 13 tasks complete

nox self-assigned this

Contributor

notriddle commented Oct 4, 2017 •

edited

https://github.com/notriddle/rust-content-security-policy

I started working on it for Ammonia's purposes, but after looking around for an existing implementation, decided that if Servo needs it then here it is.

Darkspirit mentioned this issue

Create a basic embedded ui #22326

Open

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

44a2727

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

5d8e1ce

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

b7e0b83

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle mentioned this issue

Add simple implementation of content-security-policy on network requests #24315

Merged

3 of 3 tasks complete

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

db450a0

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=<try>

e0aadfe

[WIP] Add simple implementation of content-security-policy on scripts / styles

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=<try>

ace8f6e

[WIP] Add simple implementation of content-security-policy on scripts / styles

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

547daf4

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

8066dca

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=<try>

1d7d680

[WIP] Add simple implementation of content-security-policy on scripts / styles

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=<try>

17deb1d

[WIP] Add simple implementation of content-security-policy on scripts / styles

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

9de8664

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

e0cbe26

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

notriddle added a commit to notriddle/servo that referenced this issue


        Add simple implementation of content-security-policy on scripts / styles

b8f3e8b

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo#4577

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=nox

6ae2f78

Add simple implementation of content-security-policy on network requests

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=nox

c575296

Add simple implementation of content-security-policy on network requests

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

bors-servo added a commit that referenced this issue


        Auto merge of #24315 - notriddle:GH-4577, r=nox

58c61d3

Add simple implementation of content-security-policy on network requests

This needs a lot more hooks before it'll actually be a good implementation, but for a start it can help get some feedback on if this is the right way to go about it.

Part of #4577 but we should probably track the rest of the implementation somewhere.

---
<!-- Thank you for contributing to Servo! Please replace each `[ ]` by `[X]` when the step is complete, and replace `___` with appropriate data: -->
- [x] `./mach build -d` does not report any errors
- [x] `./mach test-tidy` does not report any errors
- [x] There are tests for these changes (before merging, this PR should fix at least some of the WPT tests for CSP)

<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.io/review_button.svg" height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.io/reviews/servo/servo/24315)
<!-- Reviewable:end -->

moz-v2v-gh pushed a commit to mozilla/gecko-dev that referenced this issue


        Bug 1593642 - servo: Add simple implementation of content-security-po…

1f7eca8

…licy on scripts / styles.

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo/servo#4577

Servo commit: b8f3e8bb2e9

Differential Revision: https://phabricator.services.mozilla.com/D51588

--HG--
extra : moz-landing-system : lando

xeonchen pushed a commit to xeonchen/gecko that referenced this issue


        Bug 1593642 - servo: Add simple implementation of content-security-po…

73f538a

…licy on scripts / styles.

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo/servo#4577

Servo commit: b8f3e8bb2e9

Differential Revision: https://phabricator.services.mozilla.com/D51588

gecko-dev-updater pushed a commit to marco-c/gecko-dev-comments-removed that referenced this issue


        Bug 1593642 - servo: Add simple implementation of content-security-po…

242473d

…licy on scripts / styles.

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo/servo#4577

Servo commit: b8f3e8bb2e9

Differential Revision: https://phabricator.services.mozilla.com/D51588

UltraBlame original commit: 584249c337abdd0e28b46a013adbda9cd8e2ceae

gecko-dev-updater pushed a commit to marco-c/gecko-dev-wordified-and-comments-removed that referenced this issue


        Bug 1593642 - servo: Add simple implementation of content-security-po…

b235a75

…licy on scripts / styles.

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo/servo#4577

Servo commit: b8f3e8bb2e9

Differential Revision: https://phabricator.services.mozilla.com/D51588

UltraBlame original commit: 584249c337abdd0e28b46a013adbda9cd8e2ceae

gecko-dev-updater pushed a commit to marco-c/gecko-dev-wordified that referenced this issue


        Bug 1593642 - servo: Add simple implementation of content-security-po…

1e9df8f

…licy on scripts / styles.

This needs a lot more hooks before it'll actually be a good
implementation, but for a start it can help get some feedback on if this
is the right way to go about it.

Part of servo/servo#4577

Servo commit: b8f3e8bb2e9

Differential Revision: https://phabricator.services.mozilla.com/D51588

UltraBlame original commit: 584249c337abdd0e28b46a013adbda9cd8e2ceae

pshaughn mentioned this issue

Implement securitypolicyviolation events #25182

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

You can’t perform that action at this time.