[webkit-gtk] Modifying HTML before loading it in a WebView

Andrea Giammarchi andrea.giammarchi at gmail.com
Fri Oct 7 03:00:50 PDT 2016


Out of curiosity: wouldn't an injected script in the page enabled via
sha-nounce as the only one executable be enough, if CSP support is
available?

On Fri, Oct 7, 2016 at 10:35 AM, Michael Catanzaro <mcatanzaro at igalia.com>
wrote:

> On Fri, 2016-10-07 at 09:25 +0200, Carlos Garcia Campos wrote:
> > That's a very good point, we'll check if that's possible, or wer'll
> > try
> > to make it possible otherwise.
>
> Wow, I never considered this.
>
> Took a quick look at Epiphany. Guess how many Epiphany features
> implemented in JS break when you use the hidden disable JS setting.
> (Four.)
>
> Michael
> _______________________________________________
> webkit-gtk mailing list
> webkit-gtk at lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-gtk
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-gtk/attachments/20161007/2125d7d2/attachment.html>


More information about the webkit-gtk mailing list